$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa File: ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa (raw, json) Hash identifier: 8Xuc6IqnqcBf6cx4rPVFSdrf16bGNK0Adxd22dGOK28= Subject key identifier: 30:10:C2:00:59:4A:D6:5B:3F:7C:DA:76:04:C5:C6:10:44:E6:64:08 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B53932A9E0F73A24D5D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.21.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:53:93:2a:9e:0f:73:a2:4d:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=25e3fdd9-a0d9-43b3-b2fe-29774dd7e0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:39:dc:96:c2:68:0e:7f:36:32:0e:77:83: 1f:1c:f0:66:b6:92:c5:55:1f:30:a1:2b:19:2d:ca: 6b:45:08:45:5b:f4:5b:f1:94:14:9c:7d:bd:de:cf: 19:83:2a:90:9b:83:ac:97:82:3d:35:25:fb:74:6a: 4c:2c:e5:96:b4:49:31:d4:da:28:25:1e:e9:15:ce: 39:5b:02:6b:20:29:85:3b:0c:b7:40:07:be:0e:e6: 43:d0:e1:7b:10:02:54:25:42:48:dc:66:fc:8f:a6: 49:33:28:54:69:36:f0:d2:9e:49:a9:28:76:a7:b2: ec:9e:cd:bd:ba:26:80:58:89:8e:44:5e:fd:04:8e: 31:8c:c9:e2:ad:aa:32:20:5b:e3:29:34:62:14:1a: fc:3f:96:ad:be:8a:7f:19:0b:0d:fd:4b:01:d6:9c: a4:f4:92:ed:23:7a:b7:8d:4c:6c:b3:5a:03:90:bc: d6:b8:cc:d5:b4:25:0f:42:cc:c1:ea:62:90:d2:ea: f3:21:47:90:01:02:1c:cf:b7:87:e2:af:67:41:53: 18:d7:71:3c:68:0b:5a:a8:d1:44:45:3f:6e:b0:a2: 3b:6b:01:02:66:df:a9:a9:8b:69:b8:76:e8:1b:5a: b0:52:9f:7a:96:e3:dc:57:9e:26:a8:6e:94:e2:76: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:10:C2:00:59:4A:D6:5B:3F:7C:DA:76:04:C5:C6:10:44:E6:64:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff3d5767-a51a-3626-90b3-0f378ba3adaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e9:85:39:b6:85:44:e0:fc:99:ab:44:ba:dd:8f:fb:87:24: f0:77:32:58:e4:91:ea:ae:1f:f3:3d:c9:0d:16:f9:b9:58:1b: 1e:da:0e:82:24:27:2c:57:8e:dc:c3:b6:ea:db:23:a0:be:c1: 64:4c:7f:e4:ac:8d:0c:df:dc:5c:73:69:1f:eb:a7:f0:23:70: 46:19:ff:11:4d:6b:44:b4:4c:b4:4f:b7:5e:8d:58:97:7c:68: 9d:74:d9:92:c5:bd:1c:a7:1e:46:17:ac:44:63:eb:6d:b5:62: 95:5b:28:6f:b0:7c:9e:73:04:bc:cd:d0:78:61:ff:26:2d:16: 03:1e:82:2e:b9:7c:8e:f4:0b:cd:d7:94:31:00:33:ab:b2:87: ba:02:b6:50:fd:c7:63:b5:a3:63:e0:da:d8:97:7a:a1:e1:21: e6:74:10:c7:59:31:d4:77:01:02:50:dd:7f:fa:0b:b3:b9:51: d5:62:d4:c2:c4:72:9b:b8:8b:f1:d5:9e:0a:2e:b3:61:66:aa: 3c:04:25:4a:4e:7b:10:87:92:b7:e5:2b:c7:a1:f9:db:c9:ce: cb:82:82:9c:ca:d6:06:20:2c:82:c9:2b:ea:e1:2e:d2:4f:a2: a5:56:0d:5d:e0:a7:26:5b:4c:be:e0:bc:82:53:12:bc:5b:0a: e6:95:ed:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm1OTKp4Pc6JNXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MjVlM2ZkZDktYTBkOS00M2IzLWIyZmUtMjk3NzRkZDdlMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyA53JbCaA5/NjIOd4MfHPBmtpLFVR8woSsZ LcprRQhFW/Rb8ZQUnH293s8ZgyqQm4Osl4I9NSX7dGpMLOWWtEkx1NooJR7pFc45 WwJrICmFOwy3QAe+DuZD0OF7EAJUJUJI3Gb8j6ZJMyhUaTbw0p5JqSh2p7Lsns29 uiaAWImORF79BI4xjMniraoyIFvjKTRiFBr8P5atvop/GQsN/UsB1pyk9JLtI3q3 jUxss1oDkLzWuMzVtCUPQszB6mKQ0urzIUeQAQIcz7eH4q9nQVMY13E8aAtaqNFE RT9usKI7awECZt+pqYtpuHboG1qwUp96luPcV54mqG6U4nbIpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAQwgBZStZbP3zadgTFxhBE5mQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmYzZDU3NjctYTUxYS0z NjI2LTkwYjMtMGYzNzhiYTNhZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3phTm2hUTg/JmrRLrdj/uHJPB3MljkkequH/M9yQ0W+blYGx7aDoIk JyxXjtzDturbI6C+wWRMf+SsjQzf3FxzaR/rp/AjcEYZ/xFNa0S0TLRPt16NWJd8 aJ102ZLFvRynHkYXrERj6221YpVbKG+wfJ5zBLzN0Hhh/yYtFgMegi65fI70C83X lDEAM6uyh7oCtlD9x2O1o2Pg2tiXeqHhIeZ0EMdZMdR3AQJQ3X/6C7O5UdVi1MLE cpu4i/HVngous2FmqjwEJUpOexCHkrflK8eh+dvJzsuCgpzK1gYgLILJK+rhLtJP oqVWDV3gpyZbTL7gvIJTErxbCuaV7cU= -----END CERTIFICATE-----Generated at Sat Jun 13 20:15:44 2026 by rpki-client