$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f48f7d0-f512-3a80-a750-9efbad2c2024.roa File: 5f48f7d0-f512-3a80-a750-9efbad2c2024.roa (raw, json) Hash identifier: kKvAg9cMYBhdDDg+DoMC51E70p8rwfd0206nHnJFX7w= Subject key identifier: 79:5F:EE:E2:9C:9B:B7:AA:E4:BC:9F:87:40:FD:88:44:10:70:04:50 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974C44C8F825DC391A31500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f48f7d0-f512-3a80-a750-9efbad2c2024.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c4:4c:8f:82:5d:c3:91:a3:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5f94c05f-0434-4f90-8f83-0170b77e4aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d4:33:32:b2:9f:c5:79:df:64:a3:0c:b3:b0: db:c4:07:0d:0b:cf:07:26:9a:fd:8c:41:35:aa:c8: bf:98:68:d7:cf:79:f1:08:63:05:b5:64:6d:50:07: 2e:d5:e9:79:f7:8a:02:ef:54:42:1f:b2:e4:d3:0e: 05:7e:13:13:ed:47:db:97:fd:9a:ed:0a:36:00:3c: b7:1b:17:dd:96:fe:b7:ea:ee:65:e6:a0:9e:b8:96: 42:a0:55:fe:de:45:29:e7:b5:28:49:fe:84:2e:cf: 0b:45:bb:15:6d:ba:42:eb:e7:88:96:57:23:9f:6a: 82:c4:ec:b5:16:60:06:63:c1:e0:53:ac:95:8e:86: 78:a4:2b:5c:9d:4c:77:72:03:ec:a7:a4:d7:4c:75: 02:7c:49:9a:7c:0e:35:d3:83:96:49:04:1b:e0:7c: 10:ee:45:d5:a7:6f:7c:a7:30:f7:47:a1:4c:11:81: 22:ef:cf:14:a7:c0:93:f4:c5:c2:8c:a5:62:5a:93: 1d:fc:02:eb:b7:79:59:17:b0:7a:7a:a6:de:43:02: d4:0b:e9:9d:98:e2:12:08:f0:6e:0b:79:df:67:de: ed:84:c8:85:9f:14:76:46:e8:73:3c:bf:de:81:f4: d0:ea:02:4f:02:ad:5e:bf:c5:95:3b:ca:73:4b:6f: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:EE:E2:9C:9B:B7:AA:E4:BC:9F:87:40:FD:88:44:10:70:04:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f48f7d0-f512-3a80-a750-9efbad2c2024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:88:fa:58:ec:ab:86:63:ca:3f:6d:a2:3c:30:16:90:5e:f8: d6:e9:7c:eb:c2:ca:a4:22:08:b9:58:c4:05:34:ad:3b:8e:32: 47:9d:26:fd:40:7d:e8:32:63:39:1c:25:3b:29:09:f5:a4:99: 66:80:53:93:1b:3c:67:c0:a1:df:b5:c0:2a:37:d7:77:77:4c: 70:75:6a:fb:1c:e9:1f:74:ed:8e:ec:87:c4:da:45:ce:fb:a4: 8f:9b:4d:87:52:a0:09:33:15:2d:fd:e6:f4:83:49:37:dc:07: 89:87:21:78:04:2c:7e:a3:4a:70:69:d7:d3:39:79:7c:9e:95: aa:c5:3a:11:44:45:96:73:e8:c6:f7:ba:c2:a2:90:69:31:b1: c8:4c:95:22:5d:61:d9:b4:c3:91:b7:20:9c:17:82:4c:c0:02: 2e:85:0f:fb:41:76:fa:1f:28:f0:55:90:b4:4a:57:ad:73:aa: 56:76:15:4f:56:2d:1d:d8:1f:b5:3c:08:86:c9:b9:6d:16:58: b2:a9:34:5d:42:fb:d7:86:28:10:e3:21:53:63:f8:97:6f:d1: 33:4d:ca:23:15:bb:b8:60:35:d9:62:77:e0:c3:a9:de:ef:53: d6:d9:7e:78:16:85:ac:c1:07:40:f3:f1:0a:5e:c7:e3:d3:3a: 67:a6:5c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMRMj4Jdw5GjFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWY5NGMwNWYtMDQzNC00ZjkwLThmODMtMDE3MGI3N2U0YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9QzMrKfxXnfZKMMs7DbxAcNC88HJpr9jEE1 qsi/mGjXz3nxCGMFtWRtUAcu1el594oC71RCH7Lk0w4FfhMT7Ufbl/2a7Qo2ADy3 Gxfdlv636u5l5qCeuJZCoFX+3kUp57UoSf6ELs8LRbsVbbpC6+eIllcjn2qCxOy1 FmAGY8HgU6yVjoZ4pCtcnUx3cgPsp6TXTHUCfEmafA4104OWSQQb4HwQ7kXVp298 pzD3R6FMEYEi788Up8CT9MXCjKViWpMd/ALrt3lZF7B6eqbeQwLUC+mdmOISCPBu C3nfZ97thMiFnxR2RuhzPL/egfTQ6gJPAq1ev8WVO8pzS29lawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlf7uKcm7eq5Lyfh0D9iEQQcARQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWY0OGY3ZDAtZjUxMi0z YTgwLWE3NTAtOWVmYmFkMmMyMDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuI+ljsq4Zjyj9tojwwFpBe+NbpfOvCyqQiCLlYxAU0rTuOMkedJv1A fegyYzkcJTspCfWkmWaAU5MbPGfAod+1wCo313d3THB1avsc6R907Y7sh8TaRc77 pI+bTYdSoAkzFS395vSDSTfcB4mHIXgELH6jSnBp19M5eXyelarFOhFERZZz6Mb3 usKikGkxschMlSJdYdm0w5G3IJwXgkzAAi6FD/tBdvofKPBVkLRKV61zqlZ2FU9W LR3YH7U8CIbJuW0WWLKpNF1C+9eGKBDjIVNj+Jdv0TNNyiMVu7hgNdlid+DDqd7v U9bZfngWhazBB0Dz8Qpex+PTOmemXAY= -----END CERTIFICATE-----Generated at Sun Sep 27 03:55:26 2026 by rpki-client