$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e10d8af1-c01e-37fc-ba6b-a60f728c325c.roa File: e10d8af1-c01e-37fc-ba6b-a60f728c325c.roa (raw, json) Hash identifier: +X5tPmZRjvwOP/TTXV1nRq5eTSOHUeJKJyJn+mcMlg4= Subject key identifier: 02:F8:72:83:FA:71:4F:37:3F:F6:C9:56:25:DA:50:8D:48:03:D5:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498828932F37CA57E53B6BC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e10d8af1-c01e-37fc-ba6b-a60f728c325c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.21.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:28:93:2f:37:ca:57:e5:3b:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b6c911dd-c36a-4125-aebd-9823343029e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:15:db:2f:fc:a5:d4:4c:c4:79:c9:fa:62: 79:57:6e:e0:c2:5f:83:8a:48:b2:70:90:3c:86:38: ff:97:0b:3b:5d:bf:ad:5d:fc:56:3e:7b:b1:49:41: 58:f2:1c:1d:79:d4:31:7e:e3:85:91:2c:4e:c8:43: 42:62:36:77:73:36:78:cd:10:ee:be:08:7c:d6:44: 3c:c6:b5:9b:e5:16:c2:23:6f:90:73:02:42:cd:2d: 05:9c:ec:40:fd:11:b9:62:6c:c2:49:92:d7:d8:b9: c9:cb:dc:df:36:65:5f:a2:95:5f:f3:a7:b8:00:1f: 70:17:0a:b5:27:13:17:7e:b3:0b:40:fd:a6:ec:fe: 9a:49:35:5f:8a:1b:16:a1:58:13:9f:bf:29:f6:69: 2c:35:09:68:4c:bd:d6:c3:6e:06:89:48:6f:f2:b7: ea:66:24:d2:b5:d1:c4:c3:a4:e8:77:e3:45:95:fb: e2:ec:55:e5:b2:e3:84:a6:66:14:f2:a3:95:5a:a6: 98:3c:88:aa:c3:d9:ae:72:d0:16:e7:70:0d:76:7d: 98:ae:c5:9a:3b:5a:16:a4:e4:ec:35:f7:21:1d:96: 69:46:c7:d7:8e:d4:07:1d:28:0e:dc:2e:da:e0:54: dc:cd:35:d8:4d:cf:23:50:a6:81:25:1c:33:5c:35: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F8:72:83:FA:71:4F:37:3F:F6:C9:56:25:DA:50:8D:48:03:D5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e10d8af1-c01e-37fc-ba6b-a60f728c325c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:85:6a:54:29:23:5d:1e:70:3f:b2:a5:3c:1b:04:68:45:0f: 3c:17:27:c4:59:37:89:af:56:3e:83:d7:66:f7:9f:e2:26:c5: 4f:c6:53:a7:9e:53:65:95:8c:15:0b:37:d0:4a:b0:4b:6a:2c: bc:6d:24:5f:d8:55:03:df:7e:20:19:2a:8f:e8:ff:25:bb:33: 31:74:c8:85:10:97:18:17:1f:2a:5b:b6:95:94:e3:13:e2:cf: 4c:14:90:85:3d:0c:3b:66:97:b5:d4:c9:f5:62:e5:8f:68:06: d4:50:11:63:5f:a8:d7:85:17:7d:e6:3b:98:22:8c:28:cf:27: bd:37:b7:6f:90:3a:2c:e6:37:4f:70:70:dc:5c:b0:d2:62:a7: dd:24:d9:9c:d5:45:f1:0b:53:3b:19:8b:4a:fd:56:93:b2:ce: 06:c4:a8:b8:ec:f4:23:e4:ee:82:c6:6e:be:7c:b1:40:3c:bd: 59:9c:04:75:6b:4b:3e:e9:af:bc:36:19:0f:cd:cf:a4:cd:e5: 31:68:eb:6d:b2:75:77:c8:62:ae:32:bf:d2:f4:b4:f1:ae:af: e0:f6:37:62:3b:25:b9:93:1e:be:66:14:6a:31:05:a3:93:23: 51:c2:b2:e5:de:bc:c9:77:07:e2:ae:63:92:0d:04:b1:fd:6f: f8:50:dc:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCiTLzfKV+U7a8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjZjOTExZGQtYzM2YS00MTI1LWFlYmQtOTgyMzM0MzAyOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyMV2y/8pdRMxHnJ+mJ5V27gwl+DikiycJA8 hjj/lws7Xb+tXfxWPnuxSUFY8hwdedQxfuOFkSxOyENCYjZ3czZ4zRDuvgh81kQ8 xrWb5RbCI2+QcwJCzS0FnOxA/RG5YmzCSZLX2LnJy9zfNmVfopVf86e4AB9wFwq1 JxMXfrMLQP2m7P6aSTVfihsWoVgTn78p9mksNQloTL3Ww24GiUhv8rfqZiTStdHE w6Tod+NFlfvi7FXlsuOEpmYU8qOVWqaYPIiqw9muctAW53ANdn2YrsWaO1oWpOTs NfchHZZpRsfXjtQHHSgO3C7a4FTczTXYTc8jUKaBJRwzXDWbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL4coP6cU83P/bJViXaUI1IA9VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTEwZDhhZjEtYzAxZS0z N2ZjLWJhNmItYTYwZjcyOGMzMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqFalQpI10ecD+ypTwbBGhFDzwXJ8RZN4mvVj6D12b3n+ImxU/GU6ee U2WVjBULN9BKsEtqLLxtJF/YVQPffiAZKo/o/yW7MzF0yIUQlxgXHypbtpWU4xPi z0wUkIU9DDtml7XUyfVi5Y9oBtRQEWNfqNeFF33mO5gijCjPJ703t2+QOizmN09w cNxcsNJip90k2ZzVRfELUzsZi0r9VpOyzgbEqLjs9CPk7oLGbr58sUA8vVmcBHVr Sz7pr7w2GQ/Nz6TN5TFo622ydXfIYq4yv9L0tPGur+D2N2I7JbmTHr5mFGoxBaOT I1HCsuXevMl3B+KuY5INBLH9b/hQ3D4= -----END CERTIFICATE-----Generated at Fri Sep 25 06:09:16 2026 by rpki-client