$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4df948e9-ad82-3f44-add2-f972263c7980.roa File: 4df948e9-ad82-3f44-add2-f972263c7980.roa (raw, json) Hash identifier: 8hwA7U6BoDGhHuytG7YLyFZv3p6HMUC67pGob6hJpFY= Subject key identifier: 63:15:04:4F:B8:E8:72:3E:23:05:F9:75:89:15:06:D9:08:6E:9C:7E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF44CCA1825186E9ACF25CB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4df948e9-ad82-3f44-add2-f972263c7980.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.24.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ca:18:25:18:6e:9a:cf:25:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=f47eaee5-eef7-463d-a7b4-9e1e7b3b8789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:6c:62:88:2c:fb:6c:78:f1:c9:65:98:09: ec:ac:ea:ca:70:03:2f:f7:f9:7b:b6:10:22:74:50: b8:ea:30:19:d9:1c:64:92:69:df:41:a1:5a:33:08: a3:a8:1b:5c:86:92:05:05:38:cb:9b:9a:50:28:e4: fe:15:80:ef:4f:e6:93:11:b4:e3:32:5e:03:e5:a8: 53:a9:82:6c:d8:1e:98:4f:22:c1:c1:4d:fa:30:4c: 86:7e:f1:f1:d8:d3:f4:2b:33:02:ca:7b:bd:51:eb: f2:ca:a8:93:ea:df:7f:22:a6:00:ab:68:7e:0d:66: fa:85:3a:a7:9b:8b:7f:b3:77:3f:28:48:d6:7b:c7: a9:a8:55:3f:3a:c4:5f:25:c3:a4:ca:87:a6:d8:3e: dd:8d:a7:7e:83:39:f1:6b:a1:ca:03:07:dc:ed:36: 2f:85:f2:7e:4f:1c:e6:c5:b3:c6:82:ec:61:d7:c3: ad:78:63:0c:47:7d:bf:39:fa:ea:1c:0e:52:b5:91: 14:0c:80:20:97:b9:a2:a8:82:2a:e0:61:4f:48:ac: 12:51:90:b4:8b:6c:43:2e:7d:c2:07:0f:70:16:2c: 55:b6:30:f7:8d:61:9f:0a:63:e2:33:2d:96:03:ee: ff:73:33:99:0e:f8:08:fc:6c:96:34:fa:d4:2f:44: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:15:04:4F:B8:E8:72:3E:23:05:F9:75:89:15:06:D9:08:6E:9C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4df948e9-ad82-3f44-add2-f972263c7980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d5:c8:dd:87:d7:c8:66:ab:7a:0e:9d:fd:54:09:11:8c:55: 39:1f:cd:d1:07:9c:52:a5:9f:96:6c:f7:05:ae:13:a3:b9:4f: d8:24:37:3c:34:79:3e:c9:ac:81:f6:91:c5:28:08:b0:47:fd: 3a:ac:72:d9:a2:25:5b:b9:53:d5:5f:62:33:38:0b:24:e9:b5: a1:f0:4e:ec:c2:cc:43:0b:f5:f6:1a:be:25:32:2a:d7:ec:40: bd:4a:1e:d5:c1:1a:6e:78:a0:17:c6:2a:69:a7:40:55:94:75: 9b:35:59:11:bd:b0:f0:66:5e:c8:e7:d9:e2:a4:f8:46:11:7c: 74:5e:f1:b0:75:ce:b9:f7:14:0f:7e:2f:eb:ff:b7:32:d1:84: 66:27:8b:38:d1:f0:04:c7:19:48:71:85:89:0f:22:7c:46:fd: 55:71:13:9d:2a:c5:ac:ee:22:cf:3c:fa:f3:5c:77:f6:d8:f4: fc:dd:87:16:e9:3d:5c:fe:1d:b9:c1:3e:52:8f:53:15:6d:27: 60:31:84:b2:dd:5b:fa:d8:5a:b1:42:47:49:cf:73:eb:66:55: 35:b2:7c:69:c7:a8:55:dc:16:c6:e7:a3:6b:ae:5e:71:ab:2f: 30:44:21:c5:4a:2a:43:f0:79:25:fe:e9:97:9b:f6:09:9c:59: d0:a3:90:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMoYJRhums8lywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZjQ3ZWFlZTUtZWVmNy00NjNkLWE3YjQtOWUxZTdiM2I4Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00FsYogs+2x48cllmAnsrOrKcAMv9/l7thAi dFC46jAZ2RxkkmnfQaFaMwijqBtchpIFBTjLm5pQKOT+FYDvT+aTEbTjMl4D5ahT qYJs2B6YTyLBwU36MEyGfvHx2NP0KzMCynu9UevyyqiT6t9/IqYAq2h+DWb6hTqn m4t/s3c/KEjWe8epqFU/OsRfJcOkyoem2D7djad+gznxa6HKAwfc7TYvhfJ+Txzm xbPGguxh18OteGMMR32/OfrqHA5StZEUDIAgl7miqIIq4GFPSKwSUZC0i2xDLn3C Bw9wFixVtjD3jWGfCmPiMy2WA+7/czOZDvgI/GyWNPrUL0Qj9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMVBE+46HI+IwX5dYkVBtkIbpx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGRmOTQ4ZTktYWQ4Mi0z ZjQ0LWFkZDItZjk3MjI2M2M3OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3VyN2H18hmq3oOnf1UCRGMVTkfzdEHnFKln5Zs9wWuE6O5T9gkNzw0 eT7JrIH2kcUoCLBH/TqsctmiJVu5U9VfYjM4CyTptaHwTuzCzEML9fYaviUyKtfs QL1KHtXBGm54oBfGKmmnQFWUdZs1WRG9sPBmXsjn2eKk+EYRfHRe8bB1zrn3FA9+ L+v/tzLRhGYnizjR8ATHGUhxhYkPInxG/VVxE50qxazuIs88+vNcd/bY9Pzdhxbp PVz+HbnBPlKPUxVtJ2AxhLLdW/rYWrFCR0nPc+tmVTWyfGnHqFXcFsbno2uuXnGr LzBEIcVKKkPweSX+6Zeb9gmcWdCjkBY= -----END CERTIFICATE-----Generated at Sun Oct 4 17:31:21 2026 by rpki-client