$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa File: 3f00cacd-1911-391d-9237-784128c92e0a.roa (raw, json) Hash identifier: 8Hyaht8bV6nn08iT/UajFSF9Ao5j8D9ew+FJWXYA/2c= Subject key identifier: 7A:88:6A:76:B0:08:50:F9:20:AA:8B:14:A3:DA:F4:17:02:B8:96:BC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497503F0DCAC206827FD48C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 24.129.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:03:f0:dc:ac:20:68:27:fd:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d39d9f2a-99d4-46f2-98d1-acc6a2ab89fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:4e:39:f0:1d:cf:8c:08:56:13:c0:65:6b: 9a:77:e4:b5:54:05:dc:cd:b7:6f:cf:6e:bf:79:e6: 34:02:be:5b:35:90:34:ea:b8:0c:3d:ab:84:9b:95: fc:05:d3:75:26:f1:79:92:2b:23:77:37:1b:c1:d7: f5:1b:fa:9e:2c:e0:fe:3a:c1:32:6f:5d:60:80:4f: 02:32:4c:03:c6:b4:1d:e2:c5:f7:8d:43:5a:dc:33: 7a:4f:fc:ab:fa:39:e4:90:97:3c:b0:86:c1:47:62: 32:78:0b:52:21:a9:a8:04:e2:1e:a4:59:10:40:90: 47:bf:b3:a4:df:06:20:44:8a:95:0c:1a:3f:a2:c9: 24:2e:02:4a:17:e3:11:67:6a:94:d6:81:d0:d8:5c: c4:59:75:01:45:09:77:d5:d1:f4:d7:97:5e:fa:90: 73:9c:ea:de:e1:38:e5:79:cf:3d:d2:30:c6:3c:02: 69:3d:22:c1:22:2b:33:f7:43:87:ba:c8:93:ed:9c: 2c:8a:89:be:89:9d:95:40:e1:17:90:2d:2c:ff:46: 46:8b:9e:14:26:f2:4e:6d:57:00:7b:38:27:0f:5d: 29:fd:bb:e5:75:07:2f:91:83:98:56:a8:36:58:8c: 8e:ad:12:91:a3:44:78:5e:bc:2d:f0:b0:57:4c:d7: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:88:6A:76:B0:08:50:F9:20:AA:8B:14:A3:DA:F4:17:02:B8:96:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 24.129.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:26:2a:01:00:6b:84:ae:be:0c:41:ac:a2:d6:ea:e9:56:c7: 57:10:92:6c:0f:a1:9e:f3:dc:03:e8:c0:36:88:9d:40:d4:a4: a2:3c:db:8e:91:b8:df:e1:ce:32:f2:ca:da:fb:3c:c7:f8:46: cb:fa:b9:88:8c:b6:4e:46:ec:2a:48:10:36:92:73:0e:88:c4: 0a:c5:89:1a:93:54:a9:4d:21:99:3c:11:07:68:54:38:9e:3a: 10:50:05:76:42:40:ac:57:4a:0d:7c:6e:cb:9f:43:70:60:e2: e1:eb:83:66:9e:72:b4:6b:6d:0f:0d:87:c2:89:0f:2b:15:1a: 45:f3:33:ac:70:78:97:59:40:e4:16:8d:d8:86:23:71:bd:32: 06:c9:01:72:61:fd:07:df:5d:fb:43:3a:63:66:a6:eb:04:d4: 24:76:a1:2b:0d:4c:8b:29:7e:c1:f0:c7:d0:f0:bc:62:bf:9e: 61:95:f8:c1:be:ef:6f:61:d6:66:7f:05:9d:08:e7:1a:97:1b: 0f:0a:59:73:a3:43:2f:d9:5c:7f:e4:e2:84:25:9c:bd:57:6c: 56:fc:ea:aa:77:46:18:76:73:9f:00:e9:47:0d:d9:e2:9e:a1: 1d:cc:6c:bc:12:00:d9:ac:30:3f:14:c6:5d:1f:3c:68:76:44: 26:b2:86:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdQPw3KwgaCf9SMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDM5ZDlmMmEtOTlkNC00NmYyLTk4ZDEtYWNjNmEyYWI4OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbpOOfAdz4wIVhPAZWuad+S1VAXczbdvz26/ eeY0Ar5bNZA06rgMPauEm5X8BdN1JvF5kisjdzcbwdf1G/qeLOD+OsEyb11ggE8C MkwDxrQd4sX3jUNa3DN6T/yr+jnkkJc8sIbBR2IyeAtSIamoBOIepFkQQJBHv7Ok 3wYgRIqVDBo/oskkLgJKF+MRZ2qU1oHQ2FzEWXUBRQl31dH015de+pBznOre4Tjl ec890jDGPAJpPSLBIisz90OHusiT7Zwsiom+iZ2VQOEXkC0s/0ZGi54UJvJObVcA ezgnD10p/bvldQcvkYOYVqg2WIyOrRKRo0R4Xrwt8LBXTNefzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqIanawCFD5IKqLFKPa9BcCuJa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2YwMGNhY2QtMTkxMS0z OTFkLTkyMzctNzg0MTI4YzkyZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8mKgEAa4SuvgxBrKLW6ulWx1cQkmwPoZ7z3APowDaInUDUpKI8246R uN/hzjLyytr7PMf4Rsv6uYiMtk5G7CpIEDaScw6IxArFiRqTVKlNIZk8EQdoVDie OhBQBXZCQKxXSg18bsufQ3Bg4uHrg2aecrRrbQ8Nh8KJDysVGkXzM6xweJdZQOQW jdiGI3G9MgbJAXJh/QffXftDOmNmpusE1CR2oSsNTIspfsHwx9DwvGK/nmGV+MG+ 729h1mZ/BZ0I5xqXGw8KWXOjQy/ZXH/k4oQlnL1XbFb86qp3Rhh2c58A6UcN2eKe oR3MbLwSANmsMD8Uxl0fPGh2RCayhpA= -----END CERTIFICATE-----Generated at Sat Sep 26 10:31:10 2026 by rpki-client