$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa File: e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa (raw, json) Hash identifier: XVVsZvRy1QK6vV/p8HjCjC9rB2ocFmlX4GMnEfMruiI= Subject key identifier: 37:C7:23:BC:7C:CA:C0:15:D6:0E:27:BE:2C:2A:A1:8E:32:4F:41:BE Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584EED523EF513613E80B3496A80 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 16557 IP address blocks: 72.21.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3e:f5:13:61:3e:80:b3:49:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=8aeba6df-f52b-4401-b904-6a74aa7df21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:fa:82:39:18:e4:a5:2c:dc:7e:78:01:57: a2:82:0a:c6:a8:40:59:18:4e:14:d2:15:a7:6c:07: f2:5a:2c:51:5e:bd:65:25:63:cf:03:73:86:69:e5: 5f:99:83:09:64:e1:6f:e8:50:73:24:c9:34:2b:a8: 5f:e6:4d:af:cc:5e:18:03:67:23:f8:26:24:9b:d2: ab:df:35:e6:35:8d:cd:75:85:b3:9e:73:76:74:85: 1d:16:f9:43:6f:db:62:b6:b3:97:7e:ef:a6:78:a9: a0:38:a9:ca:ef:94:84:33:ad:51:a2:1e:d4:06:f1: 0f:18:e5:d3:62:56:77:1d:ee:e1:f9:81:0f:6e:16: 1a:99:3e:64:7c:de:e3:22:89:29:b1:7d:b6:2a:3c: 9a:d1:5a:7f:4b:d7:e4:9b:a8:91:bc:2e:b6:70:3e: 5e:7e:85:d5:96:03:30:0e:a8:76:3c:3c:62:1b:5d: 15:ea:9e:2e:bd:c2:02:42:4c:10:f7:0b:15:43:e0: f1:da:7f:65:6a:8e:43:6c:58:15:1d:2e:48:9f:d4: 1c:6f:f2:b0:b9:db:e8:b3:35:48:b8:eb:fb:b3:af: 36:ff:58:56:c7:40:1c:be:65:ab:c0:f0:f8:37:8a: 04:9c:ad:78:e4:31:3f:4a:64:d5:96:ba:b6:ae:f3: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C7:23:BC:7C:CA:C0:15:D6:0E:27:BE:2C:2A:A1:8E:32:4F:41:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:35:ac:ef:69:97:3c:f2:09:3b:5b:c5:b7:d6:fe:35:3e:d9: 95:a3:bb:7d:c4:f3:41:46:a6:c9:d3:b1:1e:d6:2c:d0:4b:c5: e3:94:67:7b:9f:d4:d6:88:85:68:97:31:5f:8b:16:3d:17:8f: 54:26:c8:9d:03:d0:3b:1f:1d:56:77:bc:4a:5e:f5:56:2a:94: 4a:5d:b2:ee:d2:56:88:00:5c:6f:f9:dd:24:b0:e3:a3:59:61: d7:c4:c8:69:a6:ad:dd:99:df:63:de:91:7e:4a:97:c3:8d:99: 99:df:0b:d9:b4:4f:b5:1a:18:6e:74:a1:85:a3:a1:99:2d:47: dd:28:bd:0b:93:65:6d:b4:e6:fe:00:c3:e0:08:84:16:ba:02: da:8e:94:3f:fa:6e:b3:27:ae:69:df:05:8f:fb:94:e9:1d:16: 19:f2:05:b9:4f:26:d2:a8:81:aa:91:7a:c6:97:60:48:ca:ee: a0:08:4d:dd:83:13:e0:eb:9c:92:ce:c7:61:31:30:a4:cf:88: b8:6b:67:51:04:c2:32:b0:32:8a:04:29:3c:4a:66:c8:d1:a6: 68:02:02:fd:cb:85:46:98:b1:ab:b1:77:a3:21:9c:32:bf:82: 02:6c:40:ee:72:4d:32:9d:72:f5:46:32:d3:cc:5e:66:30:0d: 0b:15:8c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUj71E2E+gLNJaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OGFlYmE2ZGYtZjUyYi00NDAxLWI5MDQtNmE3NGFhN2RmMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslz6gjkY5KUs3H54AVeiggrGqEBZGE4U0hWn bAfyWixRXr1lJWPPA3OGaeVfmYMJZOFv6FBzJMk0K6hf5k2vzF4YA2cj+CYkm9Kr 3zXmNY3NdYWznnN2dIUdFvlDb9titrOXfu+meKmgOKnK75SEM61Roh7UBvEPGOXT YlZ3He7h+YEPbhYamT5kfN7jIokpsX22Kjya0Vp/S9fkm6iRvC62cD5efoXVlgMw Dqh2PDxiG10V6p4uvcICQkwQ9wsVQ+Dx2n9lao5DbFgVHS5In9Qcb/KwudvoszVI uOv7s682/1hWx0AcvmWrwPD4N4oEnK145DE/SmTVlrq2rvNbuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfHI7x8ysAV1g4nviwqoY4yT0G+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvZTA4MDZiODQtM2QyZC0z NWJhLTgxZmUtZTNkMWE5MzgxZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw1rO9plzzyCTtbxbfW/jU+2ZWju33E80FGpsnTsR7WLNBLxeOUZ3uf 1NaIhWiXMV+LFj0Xj1QmyJ0D0DsfHVZ3vEpe9VYqlEpdsu7SVogAXG/53SSw46NZ YdfEyGmmrd2Z32PekX5Kl8ONmZnfC9m0T7UaGG50oYWjoZktR90ovQuTZW205v4A w+AIhBa6AtqOlD/6brMnrmnfBY/7lOkdFhnyBblPJtKogaqResaXYEjK7qAITd2D E+DrnJLOx2ExMKTPiLhrZ1EEwjKwMooEKTxKZsjRpmgCAv3LhUaYsauxd6MhnDK/ ggJsQO5yTTKdcvVGMtPMXmYwDQsVjOs= -----END CERTIFICATE-----Generated at Sun Sep 13 15:01:03 2026 by rpki-client