$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa File: f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa (raw, json) Hash identifier: tedjw8oJO6mh0RAEieSwb+CqPflSsmnOZrm4m6NhS7Y= Subject key identifier: 52:27:35:2F:9D:5F:C8:25:1B:79:B6:8B:AF:75:AF:4B:9A:D5:CE:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F23C2843CE85C09E2E8D94700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.21.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:84:3c:e8:5c:09:e2:e8:d9:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=032a9164-b05a-4c01-941e-640401bb35d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8a:96:a3:38:ab:03:35:85:3a:60:3a:9d:55: c5:44:32:ac:d0:46:7e:b4:a8:ea:30:41:ad:0b:fd: f0:49:62:ad:40:44:09:3f:70:12:57:59:b9:27:c7: 8b:dd:74:7e:21:3d:fe:d0:06:10:b4:41:a1:22:e4: 26:b5:7f:94:26:30:99:c2:71:e7:8f:fb:bb:7c:07: 3e:be:54:74:21:47:ff:f4:68:04:61:29:f5:7f:bf: 66:1e:c6:f3:f5:c8:c6:d1:03:b2:3d:61:3b:21:65: b9:51:ce:75:61:f7:2d:01:78:01:04:b5:4e:18:05: 58:35:90:ea:b7:ee:2a:5d:f6:02:62:4a:d5:9d:9f: 44:54:bc:4e:0d:4f:95:25:d3:f5:bb:7f:e6:24:a8: 4b:d5:6e:7b:40:0d:95:3e:ec:49:01:61:bc:02:28: 10:0f:18:7c:ca:a2:09:b1:79:c6:22:98:f7:41:f0: f8:59:a0:af:d3:b9:67:c3:5a:2e:b0:c0:58:de:87: dc:94:fa:af:e7:d3:bf:f0:71:73:4b:b4:59:12:e1: a3:48:31:3c:28:6f:8a:87:80:22:02:25:9d:9a:e7: bd:dd:2e:c8:91:3d:44:fb:fd:e3:f2:0d:2e:b5:b9: 00:b3:7f:fe:ed:ec:b2:2b:55:d0:84:94:f7:76:25: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:27:35:2F:9D:5F:C8:25:1B:79:B6:8B:AF:75:AF:4B:9A:D5:CE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:28:0f:2b:dd:50:41:f4:fa:e3:c2:24:02:90:6e:39:26:88: 5a:a3:12:75:dc:6b:17:b2:42:2e:38:d1:f4:81:49:ae:c6:3e: 3d:d6:65:40:5c:b1:c6:c3:b9:81:21:ec:a0:b3:fc:03:41:e8: 96:80:23:bb:85:29:9f:89:50:dc:59:92:44:21:ec:f5:9e:8b: 8c:ec:ea:b0:78:4e:e5:08:92:f8:d4:c3:dd:83:f6:15:10:c2: 89:8e:7c:f7:99:3c:ca:b8:5d:d0:e6:fa:be:17:af:ec:d7:3f: 9e:fa:96:19:2d:68:49:8d:7b:75:dc:6d:17:19:e5:f9:42:0d: 09:30:c0:29:17:d4:74:53:45:ae:1c:46:7d:15:ab:38:c0:03: 65:be:35:71:20:d4:a2:7f:d3:52:8c:50:d2:b3:5f:67:6a:1b: a4:93:b9:aa:e8:86:87:f4:61:ed:13:91:e0:59:5b:02:0f:b7: 44:9e:84:44:44:34:74:42:9e:9d:81:c5:b6:f3:7a:0b:8e:d6: d9:11:1a:95:f1:dc:2b:33:22:1f:40:22:ab:0f:f4:06:0a:6b: dd:3b:67:2a:10:a6:3c:4c:48:e7:a2:80:92:73:eb:e1:5a:13: 1c:f7:0e:fb:73:1f:9c:55:e4:f7:82:25:58:0e:d1:0e:5d:6c: 5e:38:b2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwoQ86FwJ4ujZRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MDMyYTkxNjQtYjA1YS00YzAxLTk0MWUtNjQwNDAxYmIzNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIqWozirAzWFOmA6nVXFRDKs0EZ+tKjqMEGt C/3wSWKtQEQJP3ASV1m5J8eL3XR+IT3+0AYQtEGhIuQmtX+UJjCZwnHnj/u7fAc+ vlR0IUf/9GgEYSn1f79mHsbz9cjG0QOyPWE7IWW5Uc51YfctAXgBBLVOGAVYNZDq t+4qXfYCYkrVnZ9EVLxODU+VJdP1u3/mJKhL1W57QA2VPuxJAWG8AigQDxh8yqIJ sXnGIpj3QfD4WaCv07lnw1ousMBY3ofclPqv59O/8HFzS7RZEuGjSDE8KG+Kh4Ai AiWdmue93S7IkT1E+/3j8g0utbkAs3/+7eyyK1XQhJT3diWkdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFInNS+dX8glG3m2i691r0ua1c4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjQxOWI5NTMtMWE3Ni0z ZjM2LThkNjQtMmI2YmE0OWM5NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUoDyvdUEH0+uPCJAKQbjkmiFqjEnXcaxeyQi440fSBSa7GPj3WZUBc scbDuYEh7KCz/ANB6JaAI7uFKZ+JUNxZkkQh7PWei4zs6rB4TuUIkvjUw92D9hUQ womOfPeZPMq4XdDm+r4Xr+zXP576lhktaEmNe3XcbRcZ5flCDQkwwCkX1HRTRa4c Rn0VqzjAA2W+NXEg1KJ/01KMUNKzX2dqG6STuarohof0Ye0TkeBZWwIPt0SehERE NHRCnp2BxbbzeguO1tkRGpXx3CszIh9AIqsP9AYKa907ZyoQpjxMSOeigJJz6+Fa Exz3DvtzH5xV5PeCJVgO0Q5dbF44sqA= -----END CERTIFICATE-----Generated at Tue Sep 22 05:26:49 2026 by rpki-client