$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa File: e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa (raw, json) Hash identifier: e3MvbjaBcIVKLJO2q2pyzVKo94oODVTLh2+k/nkvdiU= Subject key identifier: FD:EC:F5:00:65:24:20:8E:4D:81:32:0F:1F:17:12:00:34:03:63:A9 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584F8F3DEC3B19C716AFE661FFC0 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 16557 IP address blocks: 72.21.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:ec:3b:19:c7:16:af:e6:61:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=667fd23d-caf0-4ecc-8af6-70b6583a5144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:65:25:b4:12:75:86:22:99:07:c6:f7:c1: 21:46:fa:de:a8:96:a8:97:8a:07:b6:5d:10:41:82: bc:74:e5:19:ed:f6:9c:e4:15:81:ac:8d:51:b3:65: 9c:4e:e7:c7:15:bf:75:f2:5c:b5:3c:49:18:81:c3: c6:d6:63:5a:bf:b2:be:1e:ca:8d:2c:ba:58:97:be: 19:fc:c0:fb:8d:8b:97:2e:0b:0e:76:30:9a:3b:68: c7:75:b3:45:31:c8:59:b4:09:67:03:d7:96:00:ba: 5b:3c:46:cd:b6:d1:f1:61:30:ac:93:4b:a2:bb:20: e4:43:7e:f0:89:06:0a:b2:05:ad:2b:9d:cb:0c:71: f3:a1:d8:fe:79:0c:93:79:c6:86:00:28:22:35:54: 3d:a3:f8:72:39:7d:3f:87:37:b6:0d:81:76:7e:07: a1:69:bd:a6:e7:8b:91:4b:eb:a9:4c:92:8a:be:ff: 3f:53:9e:72:08:9b:dd:b8:08:4d:da:e5:1b:14:31: 83:08:8b:0e:36:d7:2a:52:fc:f7:cc:83:1d:8c:f4: 18:b0:44:e8:4e:ec:c8:26:3a:2d:db:96:bb:2e:3b: e0:4c:99:08:c3:e1:44:77:9d:4c:53:a4:c1:11:f6: a2:f2:01:81:7f:25:c5:11:bf:60:89:93:84:a3:69: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EC:F5:00:65:24:20:8E:4D:81:32:0F:1F:17:12:00:34:03:63:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:02:6c:25:7c:03:73:dd:59:77:23:2a:12:af:9c:1a:28:fa: 32:c3:e6:35:35:7e:80:38:e8:d7:59:3d:ab:a1:dc:23:f7:f0: 14:41:63:2d:23:85:9e:3c:28:1f:64:4f:f1:07:db:49:e4:9f: f6:d7:52:7a:f7:45:e3:d0:ec:20:68:84:12:cd:52:9b:a6:15: 1f:86:0f:b9:f5:f4:61:42:46:19:c2:57:ab:c0:a0:4e:29:28: 9f:96:cb:ba:bf:ca:aa:82:cb:d1:ea:47:94:23:42:cd:c5:50: 77:0f:b6:9c:3b:1f:ca:e8:8e:93:77:8b:da:85:cd:ca:8f:22: 9b:8a:f3:fb:c7:cf:59:6e:62:26:c9:39:4b:2b:23:3f:d2:e7: 4a:14:16:2f:30:c9:8a:2b:35:99:38:c7:09:ce:89:c6:dd:3c: d3:8f:5b:21:8a:62:c9:ed:79:c6:57:47:2d:28:aa:1d:74:20: c4:cd:f6:ca:0d:b8:5e:91:1c:33:63:c4:0f:8f:c2:f8:5e:b7: de:62:09:3c:32:89:81:d4:50:24:fc:8e:0e:59:58:1e:9e:a0: 73:36:0b:e9:ee:e7:aa:20:82:84:9e:39:78:10:88:91:c6:5c: 98:b1:97:62:8f:8f:a1:60:ae:cb:6b:e0:bb:c8:2d:35:49:ac: c9:fc:cc:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPew7GccWr+Zh/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NjY3ZmQyM2QtY2FmMC00ZWNjLThhZjYtNzBiNjU4M2E1MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sVlJbQSdYYimQfG98EhRvreqJaol4oHtl0Q QYK8dOUZ7fac5BWBrI1Rs2WcTufHFb918ly1PEkYgcPG1mNav7K+HsqNLLpYl74Z /MD7jYuXLgsOdjCaO2jHdbNFMchZtAlnA9eWALpbPEbNttHxYTCsk0uiuyDkQ37w iQYKsgWtK53LDHHzodj+eQyTecaGACgiNVQ9o/hyOX0/hze2DYF2fgehab2m54uR S+upTJKKvv8/U55yCJvduAhN2uUbFDGDCIsONtcqUvz3zIMdjPQYsEToTuzIJjot 25a7LjvgTJkIw+FEd51MU6TBEfai8gGBfyXFEb9giZOEo2kpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3s9QBlJCCOTYEyDx8XEgA0A2OpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvZTA4MDZiODQtM2QyZC0z NWJhLTgxZmUtZTNkMWE5MzgxZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwCbCV8A3PdWXcjKhKvnBoo+jLD5jU1foA46NdZPauh3CP38BRBYy0j hZ48KB9kT/EH20nkn/bXUnr3RePQ7CBohBLNUpumFR+GD7n19GFCRhnCV6vAoE4p KJ+Wy7q/yqqCy9HqR5QjQs3FUHcPtpw7H8rojpN3i9qFzcqPIpuK8/vHz1luYibJ OUsrIz/S50oUFi8wyYorNZk4xwnOicbdPNOPWyGKYsntecZXRy0oqh10IMTN9soN uF6RHDNjxA+Pwvhet95iCTwyiYHUUCT8jg5ZWB6eoHM2C+nu56oggoSeOXgQiJHG XJixl2KPj6Fgrstr4LvILTVJrMn8zKY= -----END CERTIFICATE-----Generated at Sun Nov 1 14:38:40 2026 by rpki-client