$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa File: eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa (raw, json) Hash identifier: xRVoXWPGJVdC90tXM3y2m7GJF0OVet1q6WZm6XvJzoM= Subject key identifier: 7D:15:1D:DE:CF:1E:81:48:DD:0A:32:D1:F5:78:B4:85:79:D7:BC:76 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D664EE47E8EB964E82440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.24.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:66:4e:e4:7e:8e:b9:64:e8:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1e4b24cb-57d9-42b0-88ee-3d3cd2bdfab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:cf:92:27:46:3b:ae:ef:e1:9a:be:32:31: c8:9c:b5:dd:a7:bb:69:f8:29:a5:09:02:15:24:a6: 49:69:f0:59:b6:83:a2:91:fd:fe:1d:f0:e1:dd:f1: ff:36:23:6e:ff:a9:ca:13:59:50:0a:5b:b2:f9:a9: bb:d5:ff:a2:e1:1b:4f:4d:04:0c:8f:4d:b1:f5:9c: 7c:62:b6:d0:47:87:02:5b:6c:88:cf:2d:88:a7:6d: 4e:ed:c5:ef:a9:98:99:a0:4b:45:ed:65:24:75:e7: e2:2e:5e:f7:41:55:52:38:9d:44:2d:90:aa:56:4f: 72:69:61:33:4c:e6:bb:36:58:6c:d0:85:11:ad:29: bf:c7:f9:83:5e:bd:cd:ec:6e:df:2c:66:5f:f4:81: e8:83:e5:21:ef:21:d3:46:a5:f0:68:70:fd:b7:16: 7f:61:b0:63:0f:34:b5:c1:f3:83:55:2a:f9:52:e6: 46:b7:bd:98:64:2c:2e:97:4e:b2:d7:81:7a:56:3d: 9e:e2:b8:e8:76:57:ee:3b:bb:48:a3:be:ee:87:bc: 12:61:99:bc:46:1e:be:c4:32:e3:55:e1:ec:6d:ba: f5:58:17:2f:cf:7b:c7:85:bf:b6:c4:2e:d8:31:2e: cf:8e:02:30:d7:66:d2:f2:3e:99:36:f6:1d:32:7d: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:15:1D:DE:CF:1E:81:48:DD:0A:32:D1:F5:78:B4:85:79:D7:BC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:61:89:05:18:d7:10:82:e9:1f:7d:e6:69:2e:32:1b:61:04: 38:6c:e9:4d:2e:b7:5d:76:67:52:41:ba:f7:51:b5:cb:3d:70: a6:17:c9:2a:8e:ba:47:c9:b4:56:37:bf:8c:67:0d:55:60:7e: 11:80:ae:23:98:57:16:72:36:9a:78:37:e8:76:71:b6:f9:22: 3c:4a:1f:d2:a7:f2:43:1f:63:be:cb:c8:16:c5:b6:f9:b7:18: a5:02:4d:7d:78:d5:d1:84:4c:03:bd:9e:0e:83:23:fd:99:b8: 05:0f:0b:8a:f5:f5:7f:79:20:66:86:39:7b:cb:59:ba:73:d0: 48:56:c5:63:c7:5c:06:96:97:b0:5a:34:d4:41:af:99:e8:2e: 42:a5:55:e1:0e:7b:0c:77:9e:6b:ab:3c:98:69:3c:67:d2:e3: 0f:80:e5:48:b1:f0:12:4c:ee:4e:ac:ba:db:14:12:60:1a:19: bd:76:bd:b3:a1:cd:f1:58:b9:c7:a0:b8:29:b1:d9:e8:be:45: 75:f7:65:62:5e:8e:96:20:6a:4c:d6:76:c9:95:70:6a:13:76: 40:18:96:e2:f8:2d:21:3d:93:c7:8f:fd:20:e7:68:4b:bc:34: 23:b6:77:c5:51:c9:41:08:16:35:5a:a8:53:c3:ce:78:fe:d4: 4e:a6:d3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWZO5H6OuWToJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWU0YjI0Y2ItNTdkOS00MmIwLTg4ZWUtM2QzY2QyYmRmYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHHPkidGO67v4Zq+MjHInLXdp7tp+CmlCQIV JKZJafBZtoOikf3+HfDh3fH/NiNu/6nKE1lQCluy+am71f+i4RtPTQQMj02x9Zx8 YrbQR4cCW2yIzy2Ip21O7cXvqZiZoEtF7WUkdefiLl73QVVSOJ1ELZCqVk9yaWEz TOa7Nlhs0IURrSm/x/mDXr3N7G7fLGZf9IHog+Uh7yHTRqXwaHD9txZ/YbBjDzS1 wfODVSr5UuZGt72YZCwul06y14F6Vj2e4rjodlfuO7tIo77uh7wSYZm8Rh6+xDLj VeHsbbr1WBcvz3vHhb+2xC7YMS7PjgIw12bS8j6ZNvYdMn3EJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0VHd7PHoFI3Qoy0fV4tIV517x2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWI4NTFlYjAtNTRjYS0z ZTRhLWE4Y2UtMmFmNWU1YjVmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFthiQUY1xCC6R995mkuMhthBDhs6U0ut112Z1JBuvdRtcs9cKYXySqO ukfJtFY3v4xnDVVgfhGAriOYVxZyNpp4N+h2cbb5IjxKH9Kn8kMfY77LyBbFtvm3 GKUCTX141dGETAO9ng6DI/2ZuAUPC4r19X95IGaGOXvLWbpz0EhWxWPHXAaWl7Ba NNRBr5noLkKlVeEOewx3nmurPJhpPGfS4w+A5Uix8BJM7k6sutsUEmAaGb12vbOh zfFYuceguCmx2ei+RXX3ZWJejpYgakzWdsmVcGoTdkAYluL4LSE9k8eP/SDnaEu8 NCO2d8VRyUEIFjVaqFPDznj+1E6m0/0= -----END CERTIFICATE-----Generated at Sat Sep 26 06:04:24 2026 by rpki-client