$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa File: ab8aed72-03d9-3336-891c-beaf500c0618.roa (raw, json) Hash identifier: G+NPPopnQ9beYpOffURuP9HybpPdcidcHrtfFYZ4+CY= Subject key identifier: E9:8E:5C:60:D2:FF:01:10:AC:4C:13:E1:EE:18:7E:30:F7:4E:B4:A6 Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584F093CDA35E74623E23E4D3230 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 32524 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:da:35:e7:46:23:e2:3e:4d:32:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=403c200f-2d51-4ed3-9457-38ea35914f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:55:cc:12:73:db:84:47:a8:f7:81:c0:35: 0d:7a:e6:1c:1c:2e:0c:03:40:3e:66:98:0c:b5:0e: 30:77:f8:44:dc:4d:ea:b2:9f:e5:c2:99:1d:69:c9: 48:24:e8:3b:86:d0:91:fb:e8:60:7e:a5:28:b9:ae: 6d:6e:82:ed:ee:c7:29:e0:45:08:87:fa:7e:01:af: c7:96:4b:b9:60:9e:e4:64:16:2b:41:80:8a:ca:7b: 2a:17:ce:7d:27:d7:16:d0:74:38:57:4b:48:df:68: e3:95:83:d6:3f:51:e8:6f:20:42:5e:8c:e0:23:d8: 0f:d9:69:4f:68:91:b8:4f:74:c9:e8:13:52:08:b5: e0:56:cb:5e:b3:9d:20:85:0b:70:c2:b2:1f:2c:c1: 6f:1e:7b:a7:6f:1c:52:6d:8d:7f:e3:6d:7c:2f:38: 2c:fa:b4:9d:d8:a4:33:58:14:37:4b:4b:f3:f9:59: 94:e3:ef:1f:00:32:ae:d2:78:7e:0f:f2:41:10:7b: cd:e3:df:11:d2:54:d6:05:53:6c:84:55:0a:da:64: 1c:22:cd:7f:61:37:77:0b:7f:fe:db:ec:1b:fc:59: 22:f4:93:12:83:5e:65:1e:5c:1b:40:3b:2a:e8:ac: c9:b8:c6:5e:e8:bd:03:09:95:56:e4:c0:d5:96:31: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8E:5C:60:D2:FF:01:10:AC:4C:13:E1:EE:18:7E:30:F7:4E:B4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cf:65:78:81:f5:db:04:95:5d:1f:0d:b7:5f:d0:70:14:dc: 95:7f:0d:32:6f:56:8a:51:a6:0f:f4:55:e8:03:fd:6e:fc:76: 31:52:00:75:d1:23:16:81:ff:ac:f1:78:c3:f5:9d:d7:25:3d: e2:b9:00:99:2b:86:e0:40:9d:1c:3f:f6:7a:fa:31:e6:fe:d4: 42:53:da:d6:ba:46:9b:cc:4c:c7:63:44:b1:67:5c:42:de:f3: 45:b2:32:db:d7:e6:fd:81:dc:dc:4a:1e:9b:5c:e5:ac:84:86: 44:4c:cb:82:90:34:37:02:80:7a:f8:0b:76:30:0c:6f:03:dc: f2:4b:b6:88:7b:02:82:23:71:f2:75:ef:c3:58:f9:f3:60:b0: dd:82:e0:01:59:99:da:af:5d:bb:06:d5:de:11:1c:12:70:49: d3:d8:22:03:da:84:f4:67:c9:05:d2:bc:87:26:69:d4:27:ba: 9b:21:da:51:51:77:68:9c:79:db:1a:fa:00:77:a8:27:64:a1: fd:74:3b:62:db:03:6b:3b:e5:49:92:17:38:1a:3a:09:9e:e6: d1:ff:76:c7:1e:23:cb:f0:db:7f:d9:b6:c7:e9:4a:8d:3a:c4: 8f:31:48:28:6f:f9:f0:b4:3f:9b:fc:b0:9b:c8:04:a2:6d:7c: ed:a7:b6:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNo150Yj4j5NMjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NDAzYzIwMGYtMmQ1MS00ZWQzLTk0NTctMzhlYTM1OTE0ZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXpVzBJz24RHqPeBwDUNeuYcHC4MA0A+ZpgM tQ4wd/hE3E3qsp/lwpkdaclIJOg7htCR++hgfqUoua5tboLt7scp4EUIh/p+Aa/H lku5YJ7kZBYrQYCKynsqF859J9cW0HQ4V0tI32jjlYPWP1HobyBCXozgI9gP2WlP aJG4T3TJ6BNSCLXgVstes50ghQtwwrIfLMFvHnunbxxSbY1/4218Lzgs+rSd2KQz WBQ3S0vz+VmU4+8fADKu0nh+D/JBEHvN498R0lTWBVNshFUK2mQcIs1/YTd3C3/+ 2+wb/Fki9JMSg15lHlwbQDsq6KzJuMZe6L0DCZVW5MDVljEOKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmOXGDS/wEQrEwT4e4YfjD3TrSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvYWI4YWVkNzItMDNkOS0z MzM2LTg5MWMtYmVhZjUwMGMwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHPZXiB9dsElV0fDbdf0HAU3JV/DTJvVopRpg/0VegD/W78djFSAHXR IxaB/6zxeMP1ndclPeK5AJkrhuBAnRw/9nr6Meb+1EJT2ta6RpvMTMdjRLFnXELe 80WyMtvX5v2B3NxKHptc5ayEhkRMy4KQNDcCgHr4C3YwDG8D3PJLtoh7AoIjcfJ1 78NY+fNgsN2C4AFZmdqvXbsG1d4RHBJwSdPYIgPahPRnyQXSvIcmadQnupsh2lFR d2icedsa+gB3qCdkof10O2LbA2s75UmSFzgaOgme5tH/dsceI8vw23/ZtsfpSo06 xI8xSChv+fC0P5v8sJvIBKJtfO2ntuE= -----END CERTIFICATE-----Generated at Fri Oct 9 03:05:58 2026 by rpki-client