$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa File: 8af8a31e-2de6-3582-8263-f79aff9c711e.roa (raw, json) Hash identifier: EAQD0GCInK7M1X6LaPiA3oppf0Ah/LSeFIVOCEbr4Qs= Subject key identifier: 03:07:A0:35:2C:22:31:8D:B2:20:48:74:EA:C2:6B:E5:5D:94:F9:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49891E2F55BBFABBD5AA2F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.24.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:1e:2f:55:bb:fa:bb:d5:aa:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=deee51be-de84-40ed-a2c8-92c8e426a875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:78:4b:15:22:a6:69:df:4a:bf:14:7d:cf:58: 1c:d9:26:95:8e:2d:63:33:f1:88:fe:85:63:f4:a7: 69:0c:21:b4:19:21:c8:99:b2:02:e1:ee:4e:c2:ca: 28:d0:4a:2f:e1:8d:ad:40:b7:ec:a4:d4:92:5d:d6: 0a:50:0e:9e:c0:29:25:43:f1:36:12:f4:b9:f6:85: 9c:68:08:e3:40:42:8c:26:4d:45:30:39:6b:16:f6: 3e:ad:29:5f:d9:2b:f9:35:50:3a:2c:ca:97:ae:82: 13:84:69:e2:0b:90:a7:2d:08:92:26:c6:6e:7c:39: 25:3a:0f:a9:3d:1f:8b:43:4e:f5:8b:65:4f:e2:68: aa:de:67:39:4d:58:fc:28:a4:4c:19:d5:66:d9:ce: 18:36:ea:9b:72:b7:51:8d:58:cb:e1:05:53:46:d6: c5:2a:87:55:1f:17:89:61:0d:37:59:50:bf:af:a5: 6c:4f:1e:bf:35:16:2b:46:b3:a8:de:75:62:9b:f7: 3b:cf:c3:d2:92:76:a4:7c:98:f1:c4:89:da:65:df: 80:7a:da:52:19:33:bf:de:fa:65:3a:d7:a6:63:e3: d7:dd:a8:49:61:3b:5e:60:96:09:e7:75:17:96:63: ba:50:13:a0:e2:f0:c6:6d:d7:83:c5:c6:b2:41:fa: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:A0:35:2C:22:31:8D:B2:20:48:74:EA:C2:6B:E5:5D:94:F9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b4:be:8e:66:90:94:6b:c3:84:c4:8a:47:a3:a4:2f:8f:ad: 59:32:95:7d:83:f1:13:5a:6d:79:4d:6a:a8:44:c2:d1:4e:08: a6:30:1a:53:d6:b4:1b:91:ec:ad:92:0f:0a:d8:f9:c4:41:ee: dd:8e:ed:1d:e3:d5:6e:e8:81:ef:78:09:c6:e9:d8:26:07:bc: 0d:a2:8f:6e:3d:83:54:50:0a:15:6f:26:0f:c4:ab:91:44:40: f3:26:cb:30:fa:e0:e4:f1:b4:3d:df:83:64:a3:bb:89:5e:41: d9:af:f1:f1:a9:2f:b8:cc:3f:5e:17:ee:a6:59:03:e7:e1:33: 7a:0f:25:a2:ae:4b:38:38:34:0f:11:8f:1b:ea:c7:4d:7e:4e: a1:f4:bd:e8:42:bd:6b:db:11:d1:14:7b:e8:0c:f4:ff:6f:66: 4e:a8:df:b1:35:be:79:b3:b1:31:6f:5a:d9:9b:62:76:f8:73: e9:ff:11:78:8a:2a:7e:65:92:87:29:16:ee:80:31:fd:b4:cb: b4:3c:71:64:1d:35:45:a8:71:02:1b:0f:7f:83:cc:84:a8:84: 3a:4f:d5:34:e0:5e:fe:43:b8:7a:d9:55:9c:4c:0d:f7:92:db: 51:44:d5:a8:65:0d:32:37:62:54:a2:fb:45:40:04:c9:5a:98: 19:7d:78:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiR4vVbv6u9WqLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGVlZTUxYmUtZGU4NC00MGVkLWEyYzgtOTJjOGU0MjZhODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXhLFSKmad9KvxR9z1gc2SaVji1jM/GI/oVj 9KdpDCG0GSHImbIC4e5Owsoo0Eov4Y2tQLfspNSSXdYKUA6ewCklQ/E2EvS59oWc aAjjQEKMJk1FMDlrFvY+rSlf2Sv5NVA6LMqXroIThGniC5CnLQiSJsZufDklOg+p PR+LQ071i2VP4miq3mc5TVj8KKRMGdVm2c4YNuqbcrdRjVjL4QVTRtbFKodVHxeJ YQ03WVC/r6VsTx6/NRYrRrOo3nVim/c7z8PSknakfJjxxInaZd+AetpSGTO/3vpl OtemY+PX3ahJYTteYJYJ53UXlmO6UBOg4vDGbdeDxcayQfo5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMHoDUsIjGNsiBIdOrCa+VdlPmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmOGEzMWUtMmRlNi0z NTgyLTgyNjMtZjc5YWZmOWM3MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC0vo5mkJRrw4TEikejpC+PrVkylX2D8RNabXlNaqhEwtFOCKYwGlPW tBuR7K2SDwrY+cRB7t2O7R3j1W7oge94Ccbp2CYHvA2ij249g1RQChVvJg/Eq5FE QPMmyzD64OTxtD3fg2Sju4leQdmv8fGpL7jMP14X7qZZA+fhM3oPJaKuSzg4NA8R jxvqx01+TqH0vehCvWvbEdEUe+gM9P9vZk6o37E1vnmzsTFvWtmbYnb4c+n/EXiK Kn5lkocpFu6AMf20y7Q8cWQdNUWocQIbD3+DzISohDpP1TTgXv5DuHrZVZxMDfeS 21FE1ahlDTI3YlSi+0VABMlamBl9eNs= -----END CERTIFICATE-----Generated at Thu Oct 8 13:21:14 2026 by rpki-client