$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa File: fa243cfe-a92e-3e35-a136-c32c50a344e0.roa (raw, json) Hash identifier: yebFbcT8ohD92Sak9iTbjJaY3G0D8ibKzuafYNnwtIU= Subject key identifier: A2:22:9A:8C:13:6A:7A:9B:DA:B3:49:1D:B0:A8:63:9E:E2:A7:8F:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0865DD6D21E7FA8D7E0A9640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.21.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:dd:6d:21:e7:fa:8d:7e:0a:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=e4e07526-0cb4-4809-b909-e81b50365540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d0:0e:c2:c8:32:d2:41:84:58:d3:3f:4e:80: 7c:cc:be:92:4a:8c:c5:35:82:54:c1:f7:3e:b0:e7: 9c:bb:71:5b:72:ac:84:d3:ae:17:23:d8:af:7f:75: 18:c3:ef:3a:e8:ed:58:6e:bb:3f:2c:46:af:1e:c4: 7d:5c:20:96:95:2b:0f:23:6d:dc:b5:ed:56:12:86: e2:41:8f:59:4e:65:09:fd:bf:71:88:af:a5:db:53: 84:76:21:c5:0f:93:05:bb:90:d5:5a:17:93:c5:59: 61:9b:01:8a:f5:87:50:a7:54:80:b6:2b:09:eb:93: e6:a4:99:ec:0a:84:d0:d6:8a:d7:8a:a4:23:64:04: 3a:23:e1:cd:6f:64:72:89:00:45:65:90:51:31:53: f6:3a:5d:92:29:3d:ae:3b:32:af:e0:22:d2:db:97: a5:ad:4e:e6:43:32:0c:0f:3b:4b:77:09:e2:61:b7: 70:a7:f0:74:8f:7c:47:29:88:e5:f8:b8:cb:ef:b0: 38:f3:7e:ef:c0:e7:99:25:0e:94:36:2b:53:97:93: d6:93:99:e3:3f:20:b0:ec:4e:f6:8b:bf:90:e0:93: e5:e0:b4:ca:b1:80:b9:6a:8d:87:e4:62:38:25:03: 87:90:b0:33:0f:f0:68:aa:5b:12:03:26:8b:09:3a: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:22:9A:8C:13:6A:7A:9B:DA:B3:49:1D:B0:A8:63:9E:E2:A7:8F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:77:76:26:24:06:49:78:71:b7:3d:6e:44:fa:b3:6b:30:fa: 0d:ee:c2:ba:f2:bf:35:74:69:55:50:8e:0e:23:32:88:92:de: 0b:81:5f:0b:b8:24:0f:ba:56:45:bf:bb:8f:21:ed:aa:c2:e3: 1c:3f:0a:ea:30:ae:7a:04:38:a4:db:15:60:62:4a:28:37:15: 57:52:d7:c7:61:11:f7:de:62:fd:39:64:31:05:0e:2a:d3:4c: 99:c4:17:f6:23:38:c4:b4:55:57:3a:4c:f0:7c:0b:6c:50:87: 70:f7:86:6d:2b:70:83:a8:a6:e3:25:0b:a0:b9:d8:77:39:bc: 0a:36:55:1a:d4:50:79:e4:80:05:df:47:12:aa:53:3a:c0:c1: 07:9e:53:9e:48:33:38:b6:c6:02:4e:44:37:8c:32:2e:bf:7b: 60:a0:59:c8:9e:0a:7f:cd:73:3f:fb:54:ab:5d:c6:bf:09:30: 9f:10:db:79:51:f0:61:2c:1e:c6:d3:6a:04:ed:f3:e6:d1:3b: 49:45:7b:ed:23:47:9b:36:4e:ae:dd:76:3c:69:d2:06:31:e6: a9:e8:7b:b9:30:95:ac:1c:e4:fc:9e:28:52:1d:02:fe:d3:99: 92:5f:02:87:34:c6:64:f5:26:8e:46:9b:54:ef:98:43:51:ff: 1a:a1:c8:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZd1tIef6jX4KlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ZTRlMDc1MjYtMGNiNC00ODA5LWI5MDktZTgxYjUwMzY1NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptAOwsgy0kGEWNM/ToB8zL6SSozFNYJUwfc+ sOecu3FbcqyE064XI9ivf3UYw+866O1Ybrs/LEavHsR9XCCWlSsPI23cte1WEobi QY9ZTmUJ/b9xiK+l21OEdiHFD5MFu5DVWheTxVlhmwGK9YdQp1SAtisJ65PmpJns CoTQ1orXiqQjZAQ6I+HNb2RyiQBFZZBRMVP2Ol2SKT2uOzKv4CLS25elrU7mQzIM DztLdwniYbdwp/B0j3xHKYjl+LjL77A4837vwOeZJQ6UNitTl5PWk5njPyCw7E72 i7+Q4JPl4LTKsYC5ao2H5GI4JQOHkLAzD/BoqlsSAyaLCTqFUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIimowTanqb2rNJHbCoY57ip4/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmEyNDNjZmUtYTkyZS0z ZTM1LWExMzYtYzMyYzUwYTM0NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV3diYkBkl4cbc9bkT6s2sw+g3uwrryvzV0aVVQjg4jMoiS3guBXwu4 JA+6VkW/u48h7arC4xw/CuowrnoEOKTbFWBiSig3FVdS18dhEffeYv05ZDEFDirT TJnEF/YjOMS0VVc6TPB8C2xQh3D3hm0rcIOopuMlC6C52Hc5vAo2VRrUUHnkgAXf RxKqUzrAwQeeU55IMzi2xgJORDeMMi6/e2CgWcieCn/Ncz/7VKtdxr8JMJ8Q23lR 8GEsHsbTagTt8+bRO0lFe+0jR5s2Tq7ddjxp0gYx5qnoe7kwlawc5PyeKFIdAv7T mZJfAoc0xmT1Jo5Gm1TvmENR/xqhyKs= -----END CERTIFICATE-----Generated at Sat Jun 13 16:06:13 2026 by rpki-client