$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa File: 844d9a05-ea0e-3347-8704-50962309673e.roa (raw, json) Hash identifier: iC/MXUCTA8o9I/ALyeA6NE9XwYA5AUsACSfyajQupa0= Subject key identifier: 62:13:8B:DE:15:0F:02:02:59:15:9B:FF:1C:A5:53:6F:8E:8F:9D:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D70FDC891D193417D5F20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.24.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:70:fd:c8:91:d1:93:41:7d:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=fc32cfd2-1230-431d-aa56-99ec62449d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:44:11:ba:65:84:17:b2:0a:06:48:56:08:f4: 31:45:f0:86:a6:c3:1d:b4:3a:35:d5:f6:40:3f:f5: 2b:d4:64:c2:84:59:3f:54:58:d4:36:fa:18:9e:87: f8:7b:0b:41:f1:7a:5b:b1:58:0a:b5:7d:ef:f9:0d: b9:94:4e:fc:c3:a9:1d:ee:5c:47:c4:bd:2c:47:f7: f3:a7:64:b7:f0:48:0e:3a:df:35:0e:b6:75:06:6f: a3:1e:c2:4b:98:84:1a:d0:08:0f:46:7e:57:d0:20: f8:90:2e:2b:6c:78:f5:e8:cb:79:0e:14:b0:19:00: ee:25:3e:f4:8f:b3:6c:2d:e0:d7:20:80:05:85:c1: 13:47:53:fa:d4:cb:79:b8:75:46:02:1c:f4:50:d9: 3a:dd:72:a4:33:dc:2b:2a:a0:9e:65:36:38:4d:42: 8f:47:03:63:61:76:0b:64:a8:86:c1:11:06:f3:30: 7f:48:6a:c6:97:a5:68:08:b8:d9:b0:43:04:35:cf: 88:e7:8e:f3:46:14:cc:d5:23:6a:11:5c:51:a5:c5: 38:d5:a7:2a:3c:6b:45:07:42:37:b9:1f:a0:c7:29: e3:88:b6:37:2e:ed:28:5a:b7:4b:d9:30:28:57:16: cb:de:be:1e:27:9b:34:a8:84:63:48:c6:04:9f:33: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:13:8B:DE:15:0F:02:02:59:15:9B:FF:1C:A5:53:6F:8E:8F:9D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ec:47:68:45:c1:b4:cc:bd:3b:f9:4f:c0:65:15:54:66:94: 6f:7f:df:e5:94:34:b5:fd:0e:78:e5:56:80:b9:36:9e:a6:d6: 1b:ba:1f:43:9f:9e:86:0b:10:30:9a:2a:6d:6d:30:82:db:77: 45:70:93:0e:03:8a:28:8b:1c:60:04:82:4f:09:33:18:f8:47: 1a:78:b0:4e:e3:14:26:f9:02:0e:68:b7:c4:19:60:a3:76:d8: 49:de:35:66:b4:1a:2e:a1:62:ea:24:9b:ed:40:9d:8d:02:7c: 01:bb:a4:17:e8:51:89:99:cc:bb:2c:f1:71:71:4e:06:cb:53: 39:72:fe:71:18:01:ca:0b:62:2a:99:a3:4f:cf:da:8a:e2:82: 5f:44:ba:a4:bb:39:dc:4d:42:bb:73:c0:b6:f4:44:7a:70:04: d0:c3:93:2a:93:bf:8c:42:e5:12:25:2f:1d:82:0a:05:12:50: 10:06:43:34:06:60:4f:aa:fe:7f:86:8f:79:fd:23:65:63:b3: ad:0a:03:56:69:60:ae:5b:fa:29:60:10:c4:1f:c5:b3:96:8c: 93:45:e2:61:1c:77:48:5b:67:fb:fe:aa:ac:db:c9:63:e6:8f: a6:d5:c9:6a:e0:82:56:94:79:ce:43:96:b7:8e:09:59:67:d5: 2f:5a:c6:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXD9yJHRk0F9XyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZmMzMmNmZDItMTIzMC00MzFkLWFhNTYtOTllYzYyNDQ5ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUQRumWEF7IKBkhWCPQxRfCGpsMdtDo11fZA P/Ur1GTChFk/VFjUNvoYnof4ewtB8XpbsVgKtX3v+Q25lE78w6kd7lxHxL0sR/fz p2S38EgOOt81DrZ1Bm+jHsJLmIQa0AgPRn5X0CD4kC4rbHj16Mt5DhSwGQDuJT70 j7NsLeDXIIAFhcETR1P61Mt5uHVGAhz0UNk63XKkM9wrKqCeZTY4TUKPRwNjYXYL ZKiGwREG8zB/SGrGl6VoCLjZsEMENc+I547zRhTM1SNqEVxRpcU41acqPGtFB0I3 uR+gxynjiLY3Lu0oWrdL2TAoVxbL3r4eJ5s0qIRjSMYEnzOBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGITi94VDwICWRWb/xylU2+Oj51YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ0ZDlhMDUtZWEwZS0z MzQ3LTg3MDQtNTA5NjIzMDk2NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTsR2hFwbTMvTv5T8BlFVRmlG9/3+WUNLX9DnjlVoC5Np6m1hu6H0Of noYLEDCaKm1tMILbd0Vwkw4DiiiLHGAEgk8JMxj4Rxp4sE7jFCb5Ag5ot8QZYKN2 2EneNWa0Gi6hYuokm+1AnY0CfAG7pBfoUYmZzLss8XFxTgbLUzly/nEYAcoLYiqZ o0/P2origl9EuqS7OdxNQrtzwLb0RHpwBNDDkyqTv4xC5RIlLx2CCgUSUBAGQzQG YE+q/n+Gj3n9I2Vjs60KA1ZpYK5b+ilgEMQfxbOWjJNF4mEcd0hbZ/v+qqzbyWPm j6bVyWrgglaUec5DlreOCVln1S9axnE= -----END CERTIFICATE-----Generated at Sun Oct 4 03:42:54 2026 by rpki-client