$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa File: c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa (raw, json) Hash identifier: MKsTqPyWHpH22VJ9zQV6L69r2az6wSCilIkwVOIwnr0= Subject key identifier: FC:43:89:DD:B1:4F:8B:B6:BB:DB:15:F0:DF:37:00:93:13:E7:A1:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE019D694F52CCDAF3C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.21.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e0:19:d6:94:f5:2c:cd:af:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=408f8185-85dc-4c7d-9b2e-9c074f445811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:55:5b:e0:e0:45:3e:a3:88:f8:52:7d:ca: 34:dd:da:76:14:54:8f:9d:3c:13:16:86:88:33:da: 9b:e2:28:97:55:7e:71:91:81:7b:61:b0:90:c7:25: b2:cd:dc:19:10:1d:6a:ca:2f:06:76:d0:a2:7a:2d: 07:8d:35:f5:f7:d9:00:07:aa:29:e1:23:0a:f7:3f: cd:48:04:86:19:56:1c:13:d4:58:f8:54:8e:7b:eb: f2:28:35:77:84:00:d6:91:36:44:17:23:0e:d9:52: 51:0a:50:5c:b8:c2:63:b9:8d:f5:02:ca:6d:43:ca: 54:a1:88:1e:7a:67:ab:eb:4b:d3:c4:9e:2d:9d:ee: 26:63:a7:92:f9:ba:d2:8f:5c:8b:7d:ce:a5:1f:74: a2:40:68:2f:eb:5e:fa:08:ba:56:4b:fd:2a:9e:58: 76:6e:d7:43:1b:db:1e:30:49:01:8f:73:83:fe:85: da:c3:b6:6a:d0:05:4f:4d:bd:c8:e9:c6:5e:77:2a: 32:99:f6:08:55:8d:00:a9:bf:97:97:55:2f:b2:bc: e2:05:40:3a:51:19:21:ca:a3:3c:06:19:83:42:7f: 58:74:b8:fa:25:8a:1b:f1:1a:9b:f3:db:a3:09:a5: 33:58:c8:59:3a:bf:bb:27:a4:e1:da:5c:c0:c3:13: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:89:DD:B1:4F:8B:B6:BB:DB:15:F0:DF:37:00:93:13:E7:A1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fc:4d:b1:10:93:54:cd:97:d4:96:a3:7b:a3:86:53:6e:a1: 56:f7:64:c0:dc:2b:6b:bf:4d:ab:9f:a2:f8:fb:a5:09:be:c9: a7:5d:5c:13:be:e5:ff:66:c5:8f:c5:d8:66:f2:ef:fc:d5:fa: aa:42:37:46:5b:95:84:be:3f:f3:af:d9:a5:fa:cf:08:33:46: 3b:1a:a8:d2:73:d7:b7:56:9d:3b:03:f1:ef:bc:41:4a:a4:4e: b8:3b:a5:91:6f:b5:27:7e:c2:76:5f:c5:2d:a0:96:e8:4a:de: 60:e3:a0:3b:8b:f6:15:32:51:5f:89:4a:ce:c9:b0:0f:17:64: e3:81:97:26:ac:3e:b0:3c:49:2e:58:59:60:66:37:4b:ea:47: fa:96:51:56:0d:d4:42:13:0a:98:fe:9f:95:0b:22:27:7a:bd: 49:a6:61:9f:e3:d9:7a:ea:ba:a2:af:9e:5e:3f:f6:1e:aa:07: 09:7c:64:ef:cd:d0:48:8a:7a:bd:14:31:2c:de:6c:73:80:b9: 81:38:3d:7b:75:ec:9d:74:34:e6:9b:80:d1:bf:db:38:b7:20: 16:22:d0:fd:1a:cf:ae:06:e8:2a:21:25:90:f5:91:4f:ed:5f: 4f:85:0a:9a:15:d8:52:45:d7:bc:54:c6:8d:39:15:ab:ed:fd: 92:b9:09:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeAZ1pT1LM2vPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDA4ZjgxODUtODVkYy00YzdkLTliMmUtOWMwNzRmNDQ1ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR5VW+DgRT6jiPhSfco03dp2FFSPnTwTFoaI M9qb4iiXVX5xkYF7YbCQxyWyzdwZEB1qyi8GdtCiei0HjTX199kAB6op4SMK9z/N SASGGVYcE9RY+FSOe+vyKDV3hADWkTZEFyMO2VJRClBcuMJjuY31AsptQ8pUoYge emer60vTxJ4tne4mY6eS+brSj1yLfc6lH3SiQGgv6176CLpWS/0qnlh2btdDG9se MEkBj3OD/oXaw7Zq0AVPTb3I6cZedyoymfYIVY0Aqb+Xl1UvsrziBUA6URkhyqM8 BhmDQn9YdLj6JYob8Rqb89ujCaUzWMhZOr+7J6Th2lzAwxP3XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxDid2xT4u2u9sV8N83AJMT56FgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMzZjNhMmUtNmIxYS0z NmNjLWE4NzktN2ViZTA4NTY4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr8TbEQk1TNl9SWo3ujhlNuoVb3ZMDcK2u/Taufovj7pQm+yaddXBO+ 5f9mxY/F2Gby7/zV+qpCN0ZblYS+P/Ov2aX6zwgzRjsaqNJz17dWnTsD8e+8QUqk Trg7pZFvtSd+wnZfxS2gluhK3mDjoDuL9hUyUV+JSs7JsA8XZOOBlyasPrA8SS5Y WWBmN0vqR/qWUVYN1EITCpj+n5ULIid6vUmmYZ/j2XrquqKvnl4/9h6qBwl8ZO/N 0EiKer0UMSzebHOAuYE4PXt17J10NOabgNG/2zi3IBYi0P0az64G6CohJZD1kU/t X0+FCpoV2FJF17xUxo05Favt/ZK5CQ8= -----END CERTIFICATE-----Generated at Sun Oct 11 13:43:36 2026 by rpki-client