$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa File: 87cb3f57-1853-385b-b56a-5fdf16ff959e.roa (raw, json) Hash identifier: 5f2YPrVCRqsohygu8IFzP24e2Vmo+Nif6lpSiV+J+r8= Subject key identifier: 26:AB:DE:DD:F7:03:52:5A:F1:3F:A4:83:B0:A5:85:EA:97:F0:B1:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974BECF6B2DA6CA93885E50 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.24.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:be:cf:6b:2d:a6:ca:93:88:5e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c24ae596-ce29-4b97-b47d-3ec38b1b0407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:53:a4:63:2b:bc:c3:9e:6a:b5:43:a5:d4: 6f:94:93:b9:25:ae:a7:71:5f:8c:98:de:24:0c:82: c5:ed:76:d7:ed:1b:6e:a9:76:f0:99:c0:5e:c4:f4: d1:c7:ef:72:4f:9a:dd:c1:f8:cf:50:05:e6:0f:d5: 9a:e4:99:a7:a4:46:78:40:2d:fb:85:7c:80:60:17: 04:50:de:21:a6:e8:99:35:8e:be:f2:9b:0a:aa:66: 9b:1a:e6:54:bd:f1:f1:a1:33:f9:00:77:07:95:ae: 13:4d:18:dc:94:12:1f:05:f0:bb:29:d9:e0:80:0f: 96:2d:39:45:5e:53:91:9e:00:2d:fb:c3:f3:9a:8c: c3:d0:a8:10:99:ad:8b:94:72:f7:4b:68:18:26:a1: 28:6f:3a:c6:a7:8a:25:40:9d:2f:5f:28:33:b7:95: 67:1e:7b:db:3d:6d:77:45:e3:6e:18:fc:96:6a:51: 16:45:a9:8d:4d:f0:45:d1:e9:32:68:ab:83:c0:9d: 5e:31:10:e3:97:60:b8:13:26:99:b6:d3:0e:f7:46: f3:d6:46:f3:06:8e:41:ab:cb:11:b3:07:5b:b0:57: ee:d0:de:99:4d:f8:30:33:12:62:f8:82:0f:66:a9: 33:fa:15:a7:3a:37:41:b4:3f:65:03:2e:da:ef:48: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AB:DE:DD:F7:03:52:5A:F1:3F:A4:83:B0:A5:85:EA:97:F0:B1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fb:66:30:53:48:1b:5d:1e:a8:37:b4:a9:1f:e8:22:f6:b2: a7:df:e5:b4:b7:aa:b5:43:35:11:c5:4e:96:25:37:26:0c:ce: 25:23:3e:dd:fa:c4:92:2b:21:96:ec:8e:b6:54:ca:48:eb:9f: de:c4:d4:3c:89:ac:3e:2b:4c:80:be:34:ca:b9:59:7b:64:5c: fc:fb:5c:33:47:ac:f8:dd:78:79:52:98:a8:1b:4d:bc:a5:3b: 01:a7:8a:b1:9c:2b:84:db:b1:76:1e:25:98:a3:e9:95:09:5f: e6:21:4f:de:8a:75:bb:d6:6f:65:73:33:6e:18:c8:35:2e:5e: 2e:41:78:97:88:3a:b7:82:72:b3:11:98:84:72:57:e9:df:ff: 0a:7b:b5:ad:1e:dc:02:10:ff:2b:80:73:5b:32:18:15:fc:17: 56:eb:78:f0:24:29:71:e1:a6:5b:46:89:7e:85:41:7b:8b:be: 22:cc:9c:6f:b9:f3:7e:54:c3:fe:2f:40:d9:cb:ec:f5:49:0b: 85:a3:d6:46:d9:38:36:bc:e4:38:66:88:69:d4:7b:1f:be:12: b6:ae:d4:ae:4e:c2:49:1b:4b:0b:77:e9:82:1c:c6:6c:81:87: 96:7f:bd:09:05:ec:2c:73:f0:81:94:2a:6a:3b:04:31:2e:d6: ba:cc:7f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdL7Pay2mypOIXlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzI0YWU1OTYtY2UyOS00Yjk3LWI0N2QtM2VjMzhiMWIwNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVlTpGMrvMOearVDpdRvlJO5Ja6ncV+MmN4k DILF7XbX7RtuqXbwmcBexPTRx+9yT5rdwfjPUAXmD9Wa5JmnpEZ4QC37hXyAYBcE UN4hpuiZNY6+8psKqmabGuZUvfHxoTP5AHcHla4TTRjclBIfBfC7KdnggA+WLTlF XlORngAt+8PzmozD0KgQma2LlHL3S2gYJqEobzrGp4olQJ0vXygzt5VnHnvbPW13 ReNuGPyWalEWRamNTfBF0ekyaKuDwJ1eMRDjl2C4EyaZttMO90bz1kbzBo5Bq8sR swdbsFfu0N6ZTfgwMxJi+IIPZqkz+hWnOjdBtD9lAy7a70ijvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCar3t33A1Ja8T+kg7ClheqX8LGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODdjYjNmNTctMTg1My0z ODViLWI1NmEtNWZkZjE2ZmY5NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT7ZjBTSBtdHqg3tKkf6CL2sqff5bS3qrVDNRHFTpYlNyYMziUjPt36 xJIrIZbsjrZUykjrn97E1DyJrD4rTIC+NMq5WXtkXPz7XDNHrPjdeHlSmKgbTbyl OwGnirGcK4TbsXYeJZij6ZUJX+YhT96KdbvWb2VzM24YyDUuXi5BeJeIOreCcrMR mIRyV+nf/wp7ta0e3AIQ/yuAc1syGBX8F1brePAkKXHhpltGiX6FQXuLviLMnG+5 835Uw/4vQNnL7PVJC4Wj1kbZODa85DhmiGnUex++Erau1K5OwkkbSwt36YIcxmyB h5Z/vQkF7Cxz8IGUKmo7BDEu1rrMf5k= -----END CERTIFICATE-----Generated at Sat Sep 26 04:20:59 2026 by rpki-client