$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa File: e8a4a207-02cb-31d1-9839-b150437e40a7.roa (raw, json) Hash identifier: KX7QF9PyggftPH3viL+YazbMMlPCP5Yg6GDiT2zLiGs= Subject key identifier: 94:52:70:7D:FB:48:6C:EA:E8:26:A8:EC:B4:5D:EB:8B:55:AC:04:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B60A6AFCCD4936166CE20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.24.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:60:a6:af:cc:d4:93:61:66:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=da409478-36d8-4dce-9cbc-2538a000da4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:43:29:0f:d1:99:ac:88:1a:16:34:00:ef:cc: 32:58:39:bd:d0:76:1a:1d:d0:8b:71:5a:d4:f2:3f: 6f:f0:cf:73:de:d1:0b:94:0e:8c:e8:e1:6a:1c:77: 19:e0:43:8c:c0:1d:26:2b:9a:5b:f0:3b:02:dd:40: 92:cb:9f:67:4d:c0:5d:41:a6:0f:d1:da:29:60:d8: 90:16:54:08:cd:a5:86:30:78:70:5f:28:be:06:a0: 58:b8:93:ab:88:64:47:e2:9f:da:5d:ad:31:1b:bd: 15:94:91:ec:52:01:c1:90:88:4c:f8:14:15:ca:52: 49:b4:a1:47:0f:ef:a3:44:9c:7f:2d:51:c4:d4:0e: 45:eb:f4:18:d3:05:5a:a5:0e:8d:6a:9c:ff:1b:ff: 50:70:7b:dc:f1:fc:e5:e8:69:af:3a:d7:06:b1:c4: 68:fb:8b:8d:80:0e:ae:b1:82:71:8c:f1:ec:c3:df: 60:71:c5:64:8a:f8:37:68:09:72:fe:67:4c:e2:5b: 09:c7:80:e9:fe:c9:92:e2:ba:60:2f:8c:fd:7e:cc: 94:d1:52:d6:c2:76:98:d0:7a:27:f6:8e:8d:98:7b: d3:de:19:06:e2:cb:6b:2c:a9:d8:6d:4c:66:36:ee: 9a:05:9f:d6:68:b9:58:1b:ba:8b:a9:f4:d4:34:3c: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:52:70:7D:FB:48:6C:EA:E8:26:A8:EC:B4:5D:EB:8B:55:AC:04:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:51:ea:e0:4b:bb:c5:cb:38:2b:ee:ef:f2:2e:07:e0:aa:d2: 9d:9f:ac:4c:b0:b3:57:a6:7e:61:43:94:c0:8b:5e:a1:48:36: b7:76:57:89:84:c7:ce:ba:f9:f9:e1:54:98:03:ca:a4:a4:87: b5:74:d1:48:05:c1:c4:83:5e:6f:ce:e4:05:28:e6:70:42:06: c2:d0:bb:b2:2b:e9:fb:f7:71:c4:0e:f5:8f:f1:ab:de:da:66: 0e:35:45:74:8f:fc:fd:67:17:2e:75:15:17:6b:44:11:17:77: 3e:c9:12:1d:9b:92:56:cc:41:24:ce:05:8e:e0:9a:a4:f4:16: 61:d5:bd:63:33:21:95:13:4b:90:8f:5e:f7:b8:6b:db:de:f3: 49:2e:75:3c:08:5b:97:18:28:ac:ff:44:77:93:fd:c3:68:6d: 13:61:d6:9e:78:2f:8b:b6:a0:10:46:17:7c:ef:0c:db:bf:11: f0:4c:66:64:01:cc:ce:94:ad:82:f9:ee:2d:fe:af:f7:a8:1b: 70:ac:fa:28:f3:03:5b:97:00:c2:f1:74:99:b1:9c:45:f2:51: 4c:75:81:0a:c3:ef:d9:5e:d7:8d:3f:b3:71:86:29:fc:09:ac: c6:20:bf:e1:63:67:12:8a:01:8a:76:f9:a5:2c:26:da:db:a8: d8:a5:ed:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2Cmr8zUk2FmziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGE0MDk0NzgtMzZkOC00ZGNlLTljYmMtMjUzOGEwMDBkYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kMpD9GZrIgaFjQA78wyWDm90HYaHdCLcVrU 8j9v8M9z3tELlA6M6OFqHHcZ4EOMwB0mK5pb8DsC3UCSy59nTcBdQaYP0dopYNiQ FlQIzaWGMHhwXyi+BqBYuJOriGRH4p/aXa0xG70VlJHsUgHBkIhM+BQVylJJtKFH D++jRJx/LVHE1A5F6/QY0wVapQ6Napz/G/9QcHvc8fzl6GmvOtcGscRo+4uNgA6u sYJxjPHsw99gccVkivg3aAly/mdM4lsJx4Dp/smS4rpgL4z9fsyU0VLWwnaY0Hon 9o6NmHvT3hkG4strLKnYbUxmNu6aBZ/WaLlYG7qLqfTUNDzkrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRScH37SGzq6Cao7LRd64tVrAQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZThhNGEyMDctMDJjYi0z MWQxLTk4MzktYjE1MDQzN2U0MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhR6uBLu8XLOCvu7/IuB+Cq0p2frEyws1emfmFDlMCLXqFINrd2V4mE x866+fnhVJgDyqSkh7V00UgFwcSDXm/O5AUo5nBCBsLQu7Ir6fv3ccQO9Y/xq97a Zg41RXSP/P1nFy51FRdrRBEXdz7JEh2bklbMQSTOBY7gmqT0FmHVvWMzIZUTS5CP Xve4a9ve80kudTwIW5cYKKz/RHeT/cNobRNh1p54L4u2oBBGF3zvDNu/EfBMZmQB zM6UrYL57i3+r/eoG3Cs+ijzA1uXAMLxdJmxnEXyUUx1gQrD79le140/s3GGKfwJ rMYgv+FjZxKKAYp2+aUsJtrbqNil7XM= -----END CERTIFICATE-----Generated at Fri Sep 25 14:43:52 2026 by rpki-client