$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24743b74-fa91-3291-83c2-2f24612b5579.roa File: 24743b74-fa91-3291-83c2-2f24612b5579.roa (raw, json) Hash identifier: zVxwZIoIbml1k3Q0qX9FlvqYNjiqffDXEOfjbRfnMG4= Subject key identifier: 67:C8:4B:95:8C:DB:66:DE:CC:35:87:CF:C6:67:DF:52:5D:D0:D9:87 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C32A4E497B1761921780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24743b74-fa91-3291-83c2-2f24612b5579.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 199.84.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c3:2a:4e:49:7b:17:61:92:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c78bbec0-1c19-4b96-ae1e-a8ea0047af1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:f5:a1:02:c0:b0:93:84:7e:b7:62:35:86: 85:c5:da:b6:62:fd:0a:85:11:08:c6:01:7e:06:8a: f8:c5:7d:df:b1:91:f8:96:97:03:e9:65:95:45:55: eb:03:75:14:6c:42:63:6c:44:c1:62:38:1b:91:2e: 63:a0:6e:33:d7:d5:e1:83:10:e4:a1:42:0c:70:8a: 86:37:95:86:d3:4b:9d:6b:ae:3b:28:32:66:22:9e: 38:97:f5:9d:af:af:55:fe:a7:33:b4:10:96:ba:e4: f6:5a:68:95:27:49:cf:2c:0e:9f:61:32:54:d2:e5: 3e:e1:ca:36:98:7f:25:5c:72:4b:92:d7:44:ea:67: 89:d3:9f:7a:ac:2c:0c:e3:5c:c2:23:46:a1:5c:c8: 09:91:e3:51:78:d2:bd:30:25:de:bc:1e:36:44:2e: 07:a0:0b:26:03:d7:09:f4:9b:1e:d7:51:be:ed:d3: 01:63:2d:ec:84:9b:1e:22:72:b6:1d:90:8d:99:2d: eb:68:71:59:d5:c0:a1:89:18:eb:3d:47:8f:92:01: 29:10:1a:ce:a8:8a:b8:4d:01:11:a8:04:a0:b3:9e: 40:33:d4:26:47:3f:69:b5:ec:f2:4f:29:d9:a1:4e: 52:b0:8e:a8:3e:59:aa:c7:c7:d3:0e:e7:e0:8a:8c: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C8:4B:95:8C:DB:66:DE:CC:35:87:CF:C6:67:DF:52:5D:D0:D9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24743b74-fa91-3291-83c2-2f24612b5579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 199.84.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a0:38:e1:56:c3:4b:65:1d:b4:d6:18:a6:27:04:4f:32:23: 9d:b4:50:da:20:51:ad:0b:63:be:c9:a0:a4:5c:b6:f6:41:e6: 58:b0:96:89:71:db:fc:5b:67:af:cc:86:1f:3b:cf:c7:d6:b7: d7:2c:90:98:b9:eb:db:6e:2b:25:82:88:e6:c1:c1:91:90:f5: 7f:ea:70:1f:e5:0c:4b:6b:8c:1d:23:56:c8:20:8c:3a:b0:39: 2e:9f:91:27:83:7d:7b:10:6b:49:75:72:28:ed:c9:67:71:4a: 36:4e:ab:c4:20:44:dc:d0:fb:87:a4:6b:be:f3:1d:3b:d5:18: 76:a6:9a:4e:9e:72:7f:c0:b3:bd:89:77:f7:44:73:66:44:7c: b8:bb:08:ad:87:e2:e8:24:a9:29:84:cd:f4:b8:0d:47:fb:f7: f0:8c:01:d5:be:fa:3e:09:f9:d4:0b:0b:f0:a3:46:21:bf:26: 38:e6:28:90:e3:7c:cc:09:0d:f1:a8:b6:af:9c:88:53:d7:28: 48:f4:45:88:04:c2:7a:82:65:e0:61:09:cb:1e:01:ad:65:f5: 82:75:df:5e:fe:1b:d5:1f:68:56:da:8e:bb:05:79:5d:ad:68: fc:b0:d7:de:bc:c3:69:be:d6:fa:78:57:e1:02:21:27:9a:26: 7c:98:3c:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8MqTkl7F2GSF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzc4YmJlYzAtMWMxOS00Yjk2LWFlMWUtYThlYTAwNDdhZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopL1oQLAsJOEfrdiNYaFxdq2Yv0KhREIxgF+ Bor4xX3fsZH4lpcD6WWVRVXrA3UUbEJjbETBYjgbkS5joG4z19XhgxDkoUIMcIqG N5WG00uda647KDJmIp44l/Wdr69V/qcztBCWuuT2WmiVJ0nPLA6fYTJU0uU+4co2 mH8lXHJLktdE6meJ0596rCwM41zCI0ahXMgJkeNReNK9MCXevB42RC4HoAsmA9cJ 9Jse11G+7dMBYy3shJseInK2HZCNmS3raHFZ1cChiRjrPUePkgEpEBrOqIq4TQER qASgs55AM9QmRz9ptezyTynZoU5SsI6oPlmqx8fTDufgioycjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfIS5WM22bezDWHz8Zn31Jd0NmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjQ3NDNiNzQtZmE5MS0z MjkxLTgzYzItMmYyNDYxMmI1NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1TxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESgOOFWw0tlHbTWGKYnBE8yI520UNogUa0LY77JoKRctvZB5liwlolx 2/xbZ6/Mhh87z8fWt9cskJi569tuKyWCiObBwZGQ9X/qcB/lDEtrjB0jVsggjDqw OS6fkSeDfXsQa0l1cijtyWdxSjZOq8QgRNzQ+4eka77zHTvVGHammk6ecn/As72J d/dEc2ZEfLi7CK2H4ugkqSmEzfS4DUf79/CMAdW++j4J+dQLC/CjRiG/JjjmKJDj fMwJDfGotq+ciFPXKEj0RYgEwnqCZeBhCcseAa1l9YJ1317+G9UfaFbajrsFeV2t aPyw1968w2m+1vp4V+ECISeaJnyYPBs= -----END CERTIFICATE-----Generated at Tue Oct 6 23:23:14 2026 by rpki-client