$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa File: 35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa (raw, json) Hash identifier: awjiQNOH7SfKDJVvv//xZzXGPIez7cbbVvbanpsSE1M= Subject key identifier: FA:C0:D3:F7:ED:E5:37:3A:0E:A3:5C:EC:AD:07:6E:64:01:10:9C:C3 Certificate issuer: /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Certificate serial: 010D0C9F4328584ED431ECC154F05B04A12773F0 Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 53316 IP address blocks: 173.213.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:ec:c1:54:f0:5b:04:a1:27:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=3dc289b5-c479-4d54-b058-d4192a5e7ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:92:6d:39:ac:4f:e7:d0:9b:58:ba:99:8c:df: f8:e0:a8:5b:cc:8a:69:a2:e3:75:5b:e1:38:46:7c: 4b:4c:a3:78:ca:29:a5:37:6c:de:7a:cd:d4:9b:7a: e6:12:1c:ca:06:b2:52:75:36:84:97:7b:2c:e7:93: 8b:9f:2d:c6:a4:82:09:c4:a7:1b:02:e8:e9:2a:8a: 05:17:b0:d2:0a:97:60:e0:4b:2a:31:d4:14:c1:51: 2d:9d:61:77:45:6d:f8:b7:18:76:22:41:36:c4:04: f1:3c:4b:fb:11:b8:54:a1:b0:24:29:de:88:3f:6e: f3:f6:86:a0:c7:ea:50:16:74:b3:7c:6f:f2:a1:02: 01:d6:e9:89:26:6a:fc:fe:0f:0f:fb:f1:01:6e:44: e9:a0:b5:52:25:2b:42:d4:59:fa:b6:c0:ee:ca:a1: ff:a6:57:1c:f6:ae:a9:17:cc:8a:dc:ac:7c:ec:63: 30:f9:9a:a9:4d:e3:f1:2d:92:92:16:66:73:e1:a1: e1:3c:50:12:99:6d:68:83:e5:c1:f5:7a:82:26:5e: 16:d2:ab:22:69:b9:d1:d5:36:72:92:d5:88:c9:cd: 56:22:c8:15:68:96:7b:95:d6:70:cb:93:a8:04:b7: 58:fc:d2:d5:24:70:1c:02:75:a6:29:91:07:6a:a2: e3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C0:D3:F7:ED:E5:37:3A:0E:A3:5C:EC:AD:07:6E:64:01:10:9C:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl X509v3 Authority Key Identifier: keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer sbgp-ipAddrBlock: critical IPv4: 173.213.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9c:28:31:cd:c0:b4:0d:4d:3e:2d:a4:50:86:a5:05:47:cf: 58:23:da:54:77:21:01:95:1e:53:82:62:08:d7:e5:4f:37:7f: 1b:a5:25:2f:0c:ad:6a:da:5b:67:a9:35:f4:20:26:29:42:1e: df:6b:be:b3:5c:11:aa:f9:75:b7:b6:10:a0:2e:96:52:4f:10: 52:74:fa:b7:cb:45:a6:d2:bc:52:ee:cb:a1:93:86:bd:f5:1b: 45:65:0d:e0:3b:20:91:cc:40:fc:4e:ed:3b:26:be:a0:56:fe: c5:78:12:94:56:2c:81:c9:d6:f5:27:a5:45:cb:c6:3b:c7:14: ae:c0:9a:c2:c9:7b:0e:8c:9b:eb:99:ec:ec:c5:b6:a6:3d:94: ea:0c:df:74:dd:c8:39:8f:38:d5:82:05:99:09:7d:3b:c9:ed: f6:82:6e:0e:c4:88:7a:e2:21:b6:5f:5f:ff:1d:a0:e5:33:ca: 01:b7:48:d6:f4:06:61:aa:3d:45:ee:29:37:39:1f:aa:fd:0f: 32:ca:e8:f9:7c:96:2c:58:f3:da:2b:cf:39:ee:d7:f8:bf:53: a8:a5:5f:c8:32:51:55:b8:a5:15:d4:47:e9:dd:30:56:45:23: 34:0a:ae:51:19:29:c5:42:c3:ab:95:21:fd:9b:d6:04:92:5e: 3b:f6:38:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMezBVPBbBKEnc/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy ZTQxMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk M2RjMjg5YjUtYzQ3OS00ZDU0LWIwNTgtZDQxOTJhNWU3ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5JtOaxP59CbWLqZjN/44KhbzIppouN1W+E4 RnxLTKN4yimlN2zees3Um3rmEhzKBrJSdTaEl3ss55OLny3GpIIJxKcbAujpKooF F7DSCpdg4EsqMdQUwVEtnWF3RW34txh2IkE2xATxPEv7EbhUobAkKd6IP27z9oag x+pQFnSzfG/yoQIB1umJJmr8/g8P+/EBbkTpoLVSJStC1Fn6tsDuyqH/plcc9q6p F8yK3Kx87GMw+ZqpTePxLZKSFmZz4aHhPFASmW1og+XB9XqCJl4W0qsiabnR1TZy ktWIyc1WIsgVaJZ7ldZwy5OoBLdY/NLVJHAcAnWmKZEHaqLjPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrA0/ft5Tc6DqNc7K0HbmQBEJzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvMzVlYzVmMjMtMTFhYy0z Y2U1LWJmYjctNTM1YTJhNzNmMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2 MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqcKDHNwLQNTT4tpFCGpQVHz1gj2lR3IQGVHlOCYgjX5U83fxulJS8M rWraW2epNfQgJilCHt9rvrNcEar5dbe2EKAullJPEFJ0+rfLRabSvFLuy6GThr31 G0VlDeA7IJHMQPxO7TsmvqBW/sV4EpRWLIHJ1vUnpUXLxjvHFK7AmsLJew6Mm+uZ 7OzFtqY9lOoM33TdyDmPONWCBZkJfTvJ7faCbg7EiHriIbZfX/8doOUzygG3SNb0 BmGqPUXuKTc5H6r9DzLK6Pl8lixY89orzznu1/i/U6ilX8gyUVW4pRXUR+ndMFZF IzQKrlEZKcVCw6uVIf2b1gSSXjv2OPA= -----END CERTIFICATE-----Generated at Fri Sep 11 01:12:36 2026 by rpki-client