$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa File: cf80f08c-152d-3bb2-b48b-341b799003f6.roa (raw, json) Hash identifier: eHpYJwBvzqmFLlaYyzNalLlCfAE9cAJgiiVKq3xz5jQ= Subject key identifier: 3F:4D:45:C8:A7:B0:32:F8:8F:36:65:7E:41:6B:08:89:F3:42:C5:A7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497487AA9403BB1D5517A600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.24.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:87:aa:94:03:bb:1d:55:17:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7b0f1753-55c4-48b6-9c26-933f17c1e81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:0b:b5:3d:0f:07:56:a3:01:86:73:6f:a2: 0d:db:1c:f7:4b:04:34:44:1c:ff:79:e6:57:94:5e: 49:6b:30:6b:e0:1b:97:50:23:8f:d4:14:77:89:d9: 30:76:cf:1c:b2:69:5b:75:a7:4a:f7:19:dc:75:3e: 7c:09:84:8b:cc:ac:02:b4:fa:63:3c:08:ee:a3:5d: af:98:10:dd:4f:e4:15:40:2c:b8:a3:50:94:c7:21: dd:4d:28:ee:40:cc:9a:80:16:d9:7f:9b:95:ac:91: 17:59:d2:77:49:ca:35:29:31:b0:56:7e:b9:c9:a3: fe:4f:53:1f:e8:5f:c3:72:61:57:68:08:6c:72:c6: 7b:00:1a:d1:39:8a:77:73:9e:ed:f5:53:09:13:b3: a4:34:64:c0:60:36:97:fc:35:c5:14:90:b1:1d:9a: 6b:72:cb:a0:d1:9a:97:97:c8:57:09:a7:f3:6b:71: 78:39:1f:ca:d1:f9:c3:3d:aa:ab:8e:34:7f:8e:b3: ef:7d:65:c5:f6:5a:b6:ef:a2:69:00:49:e1:fd:fb: 22:9b:b0:00:4f:48:cb:c5:f9:de:10:42:d6:9a:90: f5:bf:f2:35:df:c0:8c:28:d0:2c:49:35:84:92:8e: f5:24:02:a5:73:68:50:d9:8c:f0:3d:53:c1:24:e3: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4D:45:C8:A7:B0:32:F8:8F:36:65:7E:41:6B:08:89:F3:42:C5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:76:0e:46:0e:a2:59:a7:31:d1:e3:e4:33:3d:d5:3e:87:4f: 85:27:91:f5:d5:36:72:d6:2f:58:02:cc:9c:8b:ff:9e:55:0c: 9b:8b:84:b5:ea:07:21:45:0f:70:2b:67:ca:c5:b4:87:de:d9: a0:c8:50:09:ae:62:84:95:86:58:01:d2:7f:a9:84:93:42:7c: a2:a6:f7:dd:04:70:35:6b:de:3f:86:9f:77:86:7f:89:44:15: d2:e4:6c:59:e3:84:5f:73:5a:8d:17:fa:f5:1d:df:1e:ad:45: 61:f6:5a:36:59:01:e0:b7:e8:a7:bd:53:5a:44:fa:b3:6c:c7: 92:32:dc:bf:3a:ae:eb:f7:78:8b:e1:76:66:38:3c:0d:b1:ab: a3:ac:be:9d:dd:06:ad:b2:a0:c5:a5:47:52:52:26:cf:5d:55: 30:56:3b:4a:30:9d:d7:8a:b9:b1:1e:32:72:38:ab:94:0f:a1: 95:8a:c4:e3:6a:e8:e8:92:01:68:ae:0f:a8:74:dc:88:8d:fd: c2:2d:eb:e8:95:b7:d5:dd:41:61:62:9c:06:8f:62:db:02:70: 8e:34:a1:02:18:49:36:74:02:52:7e:1c:84:b4:41:0e:28:63: ef:4e:f2:bb:0d:3b:77:29:4a:f2:a7:f3:2d:2d:2c:90:6b:86: cf:a0:73:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIeqlAO7HVUXpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2IwZjE3NTMtNTVjNC00OGI2LTljMjYtOTMzZjE3YzFlODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/wLtT0PB1ajAYZzb6IN2xz3SwQ0RBz/eeZX lF5JazBr4BuXUCOP1BR3idkwds8csmlbdadK9xncdT58CYSLzKwCtPpjPAjuo12v mBDdT+QVQCy4o1CUxyHdTSjuQMyagBbZf5uVrJEXWdJ3Sco1KTGwVn65yaP+T1Mf 6F/DcmFXaAhscsZ7ABrROYp3c57t9VMJE7OkNGTAYDaX/DXFFJCxHZprcsug0ZqX l8hXCafza3F4OR/K0fnDPaqrjjR/jrPvfWXF9lq276JpAEnh/fsim7AAT0jLxfne EELWmpD1v/I138CMKNAsSTWEko71JAKlc2hQ2YzwPVPBJOMqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9NRcinsDL4jzZlfkFrCInzQsWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y4MGYwOGMtMTUyZC0z YmIyLWI0OGItMzQxYjc5OTAwM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA52DkYOolmnMdHj5DM91T6HT4UnkfXVNnLWL1gCzJyL/55VDJuLhLXq ByFFD3ArZ8rFtIfe2aDIUAmuYoSVhlgB0n+phJNCfKKm990EcDVr3j+Gn3eGf4lE FdLkbFnjhF9zWo0X+vUd3x6tRWH2WjZZAeC36Ke9U1pE+rNsx5Iy3L86ruv3eIvh dmY4PA2xq6Osvp3dBq2yoMWlR1JSJs9dVTBWO0owndeKubEeMnI4q5QPoZWKxONq 6OiSAWiuD6h03IiN/cIt6+iVt9XdQWFinAaPYtsCcI40oQIYSTZ0AlJ+HIS0QQ4o Y+9O8rsNO3cpSvKn8y0tLJBrhs+gc8c= -----END CERTIFICATE-----Generated at Mon Sep 28 01:09:45 2026 by rpki-client