$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa File: fec475c8-b7e4-3597-a983-df397380ca07.roa (raw, json) Hash identifier: YKcuv7e4Y66baH08sCVqc7JYGnSDlMT9ESIHJkOx14g= Subject key identifier: 08:E7:F8:1E:99:7E:C1:F4:66:07:32:FA:4E:77:30:95:89:F0:C5:05 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987F704649C30D6EA1AA540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.24.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:f7:04:64:9c:30:d6:ea:1a:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f32d624f-fec5-4a0d-a78f-9444e4934763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:d2:f4:87:9b:3a:79:cb:64:91:24:31:5a: 0b:11:eb:84:4a:33:3d:8b:e9:71:de:83:3b:17:ff: 6b:aa:60:ab:ad:db:66:1e:b7:cf:3b:99:e7:5f:75: 09:77:fe:35:39:85:85:82:ba:ef:c7:0f:df:8c:d8: 5d:f5:f5:54:c0:fc:7e:24:ec:a7:77:23:2a:05:c2: 54:62:ac:30:cf:6a:12:43:1e:00:72:c5:51:00:b8: 51:c3:79:a5:5f:e1:bb:e2:78:fd:24:cb:a8:36:1c: ef:28:b7:54:ec:d5:fa:ad:23:62:7d:1a:31:a2:dd: 70:29:f0:5a:ac:e9:e7:24:a9:c4:c9:b1:f6:fa:dd: 18:98:b4:28:16:e5:a1:30:1b:06:e1:e8:d6:63:44: a7:6a:28:d1:5e:e7:de:94:83:ed:6b:c3:51:ea:ba: ca:e2:88:23:1b:8d:12:52:40:0f:91:73:37:8a:03: 60:ee:ae:4a:ff:ab:fd:b3:08:5a:45:b4:1e:89:af: 00:91:71:ac:a0:93:d8:f8:71:9a:21:9b:0c:3f:d7: 90:ec:1a:d0:08:e8:3c:e6:a5:26:24:b9:98:96:32: ed:58:d2:6a:41:1c:02:00:46:42:7a:67:f7:77:a4: 9f:4b:18:eb:b8:7e:4d:83:93:4d:10:b2:a6:80:fc: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E7:F8:1E:99:7E:C1:F4:66:07:32:FA:4E:77:30:95:89:F0:C5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:94:85:3f:aa:c9:ae:c0:da:14:51:5d:21:7c:95:31:1e:2b: c7:8c:f7:10:24:69:62:78:4f:0b:0d:42:a8:8c:d6:81:62:9a: ad:4b:df:c4:0f:78:64:04:4c:b1:89:31:38:10:a4:bc:a2:e9: ac:8c:3c:a8:ca:d8:ad:f5:74:00:e6:a7:0e:4d:82:3d:2b:5e: 3c:91:c1:70:05:ed:51:32:14:a0:9b:cb:34:a9:fb:6a:49:be: 09:68:78:ee:92:4c:1f:c2:9e:e7:6b:36:b4:20:34:3c:ec:3b: cd:3e:9d:ce:de:57:88:2f:e9:6b:48:a9:64:07:22:78:d6:cc: 3f:e0:86:af:d2:6a:04:f8:12:a1:33:5f:78:3e:c3:cd:8a:6f: c2:d2:1b:0d:b9:2e:16:06:42:92:87:5f:44:d4:69:14:93:de: 97:1b:53:ac:ce:94:8d:82:85:56:c9:a7:23:2a:53:d9:e9:4c: 6f:61:ad:c0:6d:0a:95:0a:3b:16:c3:5d:49:e4:95:23:b0:52: 84:14:8d:25:f3:e9:eb:d0:2a:ed:3e:16:cc:12:73:1f:cd:3e: 8f:9e:d2:4a:c6:5a:91:7d:95:db:37:b8:4b:ee:dc:1b:cc:78: 45:90:14:90:59:d3:47:a8:e7:28:c3:55:f5:b9:76:52:e8:32: 67:37:77:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh/cEZJww1uoapUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjMyZDYyNGYtZmVjNS00YTBkLWE3OGYtOTQ0NGU0OTM0NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpnS9IebOnnLZJEkMVoLEeuESjM9i+lx3oM7 F/9rqmCrrdtmHrfPO5nnX3UJd/41OYWFgrrvxw/fjNhd9fVUwPx+JOyndyMqBcJU Yqwwz2oSQx4AcsVRALhRw3mlX+G74nj9JMuoNhzvKLdU7NX6rSNifRoxot1wKfBa rOnnJKnEybH2+t0YmLQoFuWhMBsG4ejWY0SnaijRXufelIPta8NR6rrK4ogjG40S UkAPkXM3igNg7q5K/6v9swhaRbQeia8AkXGsoJPY+HGaIZsMP9eQ7BrQCOg85qUm JLmYljLtWNJqQRwCAEZCemf3d6SfSxjruH5Ng5NNELKmgPza4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjn+B6ZfsH0Zgcy+k53MJWJ8MUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmVjNDc1YzgtYjdlNC0z NTk3LWE5ODMtZGYzOTczODBjYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiUhT+qya7A2hRRXSF8lTEeK8eM9xAkaWJ4TwsNQqiM1oFimq1L38QP eGQETLGJMTgQpLyi6ayMPKjK2K31dADmpw5Ngj0rXjyRwXAF7VEyFKCbyzSp+2pJ vgloeO6STB/CnudrNrQgNDzsO80+nc7eV4gv6WtIqWQHInjWzD/ghq/SagT4EqEz X3g+w82Kb8LSGw25LhYGQpKHX0TUaRST3pcbU6zOlI2ChVbJpyMqU9npTG9hrcBt CpUKOxbDXUnklSOwUoQUjSXz6evQKu0+FswScx/NPo+e0krGWpF9lds3uEvu3BvM eEWQFJBZ00eo5yjDVfW5dlLoMmc3dyU= -----END CERTIFICATE-----Generated at Tue Sep 29 06:08:35 2026 by rpki-client