$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa File: 67520c87-041c-3548-bd97-ae4c3f09e00e.roa (raw, json) Hash identifier: 37KxyYJih+6OsaBgcqPbEPBAo/5ORpqOGhmPe5WRKkQ= Subject key identifier: FF:F8:8E:50:94:A0:77:8B:69:82:E0:6B:4F:92:50:69:9F:7C:01:FC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EAA520F2F30B5EEC21B95EC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 173.21.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:52:0f:2f:30:b5:ee:c2:1b:95:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=8fe23fb4-6b9f-42f0-ba11-e86c74a14310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9d:c8:e5:31:ea:97:5c:81:ba:0b:12:b6:cd: 91:58:3a:b0:f2:87:62:36:01:1b:dd:23:fc:33:c6: 24:27:32:65:01:d0:17:b2:ed:d6:32:9a:22:cf:61: 98:f1:82:c8:9c:31:0f:75:ba:66:d6:e4:22:e8:9f: a8:3c:c2:62:db:81:83:c9:6c:c9:67:23:cd:f7:5c: 42:a6:1f:f2:72:b9:e9:e8:df:6d:17:13:4d:f6:0f: ea:7b:21:fd:30:52:15:be:82:f4:13:5b:dc:20:fa: 1c:0e:b0:c9:09:16:48:88:35:cd:8d:3f:ac:0d:01: 64:a4:1e:76:44:ed:57:17:19:73:14:18:45:6c:96: 3b:23:e5:12:f4:88:96:77:e3:01:3e:a9:ae:3b:78: 1d:dd:82:0e:b9:f9:88:3b:56:1f:8d:41:96:f8:a4: e1:5b:eb:8a:46:6f:c3:c6:00:9b:4b:b8:33:ac:7e: 3c:09:f2:39:c1:49:ae:a1:0b:fc:24:e1:81:0b:38: ec:d7:1e:00:a3:33:38:24:45:4d:a0:f8:22:68:89: ef:89:72:24:f0:48:3c:5c:c1:5f:f6:ab:31:15:f1: 4c:a6:f5:04:83:6d:ae:8d:46:95:ae:00:60:40:f8: 34:4f:8d:3a:36:fe:87:5f:43:19:1a:79:ce:3c:db: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F8:8E:50:94:A0:77:8B:69:82:E0:6B:4F:92:50:69:9F:7C:01:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67520c87-041c-3548-bd97-ae4c3f09e00e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:95:fb:12:5b:1e:e6:59:2c:b6:cb:61:f9:ac:d9:54:3a:c5: b9:82:c6:1d:ce:94:d6:90:0a:0f:bf:ba:9d:27:56:ac:3c:39: ae:35:fb:96:21:67:22:f9:de:c7:40:23:76:b5:86:6d:38:1a: cc:88:b0:e0:64:5e:26:55:f7:c9:14:64:9c:de:e4:4d:9c:a8: 05:5a:53:16:67:e7:4c:8d:90:b9:25:bc:78:80:d0:3b:10:47: 67:24:b7:02:14:db:49:79:6e:c3:ab:7c:e7:56:e1:f4:a0:56: 4b:98:b7:d7:ec:8f:ee:67:2c:84:4b:b4:be:66:df:bb:29:cd: 73:2d:35:6e:3f:d7:a5:6d:61:2f:77:de:c4:84:ef:da:24:5b: b5:d0:98:7f:da:df:74:0c:0d:92:c3:64:24:ed:6e:40:82:8d: d6:31:6d:52:c4:81:bb:da:59:38:6a:12:2a:c1:e9:6f:ec:80: 1c:d9:64:0f:fb:56:51:dc:13:6e:6e:04:21:d4:b1:42:93:68: 1b:28:3b:5d:c8:b0:91:01:32:d1:cd:75:c6:77:75:80:21:3d: 05:1d:e5:c0:50:d6:e8:1a:26:01:8a:83:1e:48:00:fd:e1:15: bd:fc:47:e2:66:65:2e:ac:e3:b1:de:0f:3c:c3:38:42:f4:75: b4:7e:81:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUg8vMLXuwhuV7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk OGZlMjNmYjQtNmI5Zi00MmYwLWJhMTEtZTg2Yzc0YTE0MzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ3I5THql1yBugsSts2RWDqw8odiNgEb3SP8 M8YkJzJlAdAXsu3WMpoiz2GY8YLInDEPdbpm1uQi6J+oPMJi24GDyWzJZyPN91xC ph/ycrnp6N9tFxNN9g/qeyH9MFIVvoL0E1vcIPocDrDJCRZIiDXNjT+sDQFkpB52 RO1XFxlzFBhFbJY7I+US9IiWd+MBPqmuO3gd3YIOufmIO1YfjUGW+KThW+uKRm/D xgCbS7gzrH48CfI5wUmuoQv8JOGBCzjs1x4AozM4JEVNoPgiaInviXIk8Eg8XMFf 9qsxFfFMpvUEg22ujUaVrgBgQPg0T406Nv6HX0MZGnnOPNtfhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/4jlCUoHeLaYLga0+SUGmffAH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjc1MjBjODctMDQxYy0z NTQ4LWJkOTctYWU0YzNmMDllMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCV+xJbHuZZLLbLYfms2VQ6xbmCxh3OlNaQCg+/up0nVqw8Oa41+5Yh ZyL53sdAI3a1hm04GsyIsOBkXiZV98kUZJze5E2cqAVaUxZn50yNkLklvHiA0DsQ R2cktwIU20l5bsOrfOdW4fSgVkuYt9fsj+5nLIRLtL5m37spzXMtNW4/16VtYS93 3sSE79okW7XQmH/a33QMDZLDZCTtbkCCjdYxbVLEgbvaWThqEirB6W/sgBzZZA/7 VlHcE25uBCHUsUKTaBsoO13IsJEBMtHNdcZ3dYAhPQUd5cBQ1ugaJgGKgx5IAP3h Fb38R+JmZS6s47HeDzzDOEL0dbR+gbc= -----END CERTIFICATE-----Generated at Fri Aug 21 01:46:34 2026 by rpki-client