$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa File: 9b9b9c14-7c59-311c-b7c4-f4928230b433.roa (raw, json) Hash identifier: nqwX+7TGeo+hq9kTymf0t9v9f0REaTmqIKpgVNAeoEE= Subject key identifier: 09:54:3B:40:9A:01:34:B3:3F:DF:8D:89:21:88:FA:5D:9F:33:1C:32 Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F4328584EAE81A5F04791E7E370459D00 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 8075 IP address blocks: 167.21.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:a5:f0:47:91:e7:e3:70:45:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=c6ba6217-d009-4235-b44a-22fec00dfb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:33:02:f9:9a:1e:ec:dd:fb:c9:cf:0b:5c: 5e:03:2e:5b:b3:e9:27:46:05:46:5e:7e:e5:b8:c4: 3b:db:5a:58:33:95:8a:77:e5:a8:b6:c4:20:bc:b7: 75:80:6e:8c:9a:77:51:0f:7b:86:ac:64:c8:62:ec: 51:99:c1:2e:ca:ab:31:91:c7:63:90:04:86:1d:5e: 1d:55:be:ca:83:fd:d8:db:0b:4e:13:a5:f2:9d:a2: 69:33:8c:23:92:0f:81:c1:8b:ac:d6:1f:f4:30:93: 2f:5a:1b:ff:d9:ee:d6:78:9f:64:6e:bc:6d:f8:d8: 3b:e6:c3:b0:43:68:d8:17:40:0a:b3:bc:fa:11:84: 98:55:82:33:04:b5:1a:8b:a2:46:01:7c:51:0a:03: 2c:cd:b4:ca:59:de:82:56:b0:fd:7b:47:5a:11:92: b9:be:80:52:75:bc:8f:ee:44:40:78:3c:64:bb:d0: 13:2c:40:63:de:3e:62:c1:e1:1f:24:6f:15:49:83: 96:cf:c0:62:c2:a3:78:44:36:23:75:ed:ed:e1:8b: 84:cd:50:00:0d:ac:4e:41:e0:0c:d9:4b:8e:da:02: f6:d5:13:bb:40:a8:d9:91:ab:ee:25:ca:f4:01:bb: 6b:a5:3e:6d:72:5e:37:8c:ab:16:e7:87:6d:d1:5b: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:54:3B:40:9A:01:34:B3:3F:DF:8D:89:21:88:FA:5D:9F:33:1C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bc:15:69:62:67:2d:13:e6:7c:1a:40:17:7d:d6:9e:25:d4: 73:56:94:ce:01:45:08:63:92:be:51:92:28:d2:c2:6d:c0:59: 38:bd:8c:7d:cb:15:16:cf:55:f7:4c:a8:03:72:73:24:5c:f6: e4:29:37:03:f2:76:38:09:1b:15:e5:b1:a5:73:ad:f4:ef:f6: 49:3b:8e:b2:91:d6:20:c0:d1:ec:da:73:53:94:38:ae:d3:3a: 37:29:96:46:81:78:6c:94:1f:cf:32:78:61:29:1f:c9:79:64: fa:da:9f:e3:98:7f:69:92:64:64:3d:cb:02:12:e4:f4:bd:85: 0e:1c:72:32:d2:93:6b:ac:06:71:94:3d:fd:96:b3:89:6a:f8: f1:00:f2:fd:60:89:7e:e2:0a:c0:4b:8d:25:21:4e:ae:5f:4d: 99:18:cb:91:e0:c7:f4:c7:a5:b9:0b:c6:ac:44:66:fe:d9:41: 6a:0b:a6:a5:27:10:74:78:54:25:c4:78:ab:7f:c8:c7:92:1a: 30:8f:38:db:b1:8f:40:9b:2d:76:eb:39:80:36:b4:30:22:db: a1:cd:19:c7:b9:bb:f9:88:f4:37:7f:95:b7:03:09:00:2c:9c: b5:56:0b:4c:63:a6:b7:ec:ac:9c:76:12:c8:20:19:26:50:5f: 96:85:58:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugaXwR5Hn43BFnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YzZiYTYyMTctZDAwOS00MjM1LWI0NGEtMjJmZWMwMGRmYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUgzAvmaHuzd+8nPC1xeAy5bs+knRgVGXn7l uMQ721pYM5WKd+WotsQgvLd1gG6MmndRD3uGrGTIYuxRmcEuyqsxkcdjkASGHV4d Vb7Kg/3Y2wtOE6XynaJpM4wjkg+BwYus1h/0MJMvWhv/2e7WeJ9kbrxt+Ng75sOw Q2jYF0AKs7z6EYSYVYIzBLUai6JGAXxRCgMszbTKWd6CVrD9e0daEZK5voBSdbyP 7kRAeDxku9ATLEBj3j5iweEfJG8VSYOWz8BiwqN4RDYjde3t4YuEzVAADaxOQeAM 2UuO2gL21RO7QKjZkavuJcr0AbtrpT5tcl43jKsW54dt0Vv94QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlUO0CaATSzP9+NiSGI+l2fMxwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvOWI5YjljMTQtN2M1OS0z MTFjLWI3YzQtZjQ5MjgyMzBiNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe8FWliZy0T5nwaQBd91p4l1HNWlM4BRQhjkr5RkijSwm3AWTi9jH3L FRbPVfdMqANycyRc9uQpNwPydjgJGxXlsaVzrfTv9kk7jrKR1iDA0ezac1OUOK7T OjcplkaBeGyUH88yeGEpH8l5ZPran+OYf2mSZGQ9ywIS5PS9hQ4ccjLSk2usBnGU Pf2Ws4lq+PEA8v1giX7iCsBLjSUhTq5fTZkYy5Hgx/THpbkLxqxEZv7ZQWoLpqUn EHR4VCXEeKt/yMeSGjCPONuxj0CbLXbrOYA2tDAi26HNGce5u/mI9Dd/lbcDCQAs nLVWC0xjprfsrJx2EsggGSZQX5aFWFs= -----END CERTIFICATE-----Generated at Fri Sep 4 22:41:44 2026 by rpki-client