$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa File: 2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa (raw, json) Hash identifier: zL2mDKAEIgP/n7eJ6Zq/bWLn4ISkHGwwq7GskKptnNI= Subject key identifier: 3C:78:9A:C4:78:51:F1:57:0E:25:D6:BC:92:E3:95:07:1E:AC:5F:41 Certificate issuer: /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8 Certificate serial: 010D0C9F4328584F4988A0A3C17FCE5A03411DC0 Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11260 IP address blocks: 24.207.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:a0:a3:c1:7f:ce:5a:03:41:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=536f3402-2604-41dc-95e9-9e88b1b60ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b0:d3:e1:7a:f7:a4:9d:ef:be:d5:02:bf:2a: 26:ec:3d:ac:e3:e8:e2:44:6d:e2:3f:00:51:91:32: e6:1d:70:e7:46:ca:72:51:4d:5e:5e:08:0c:2b:b6: 5d:80:78:66:e7:3c:a0:85:98:53:88:80:bf:4d:40: fc:73:c5:98:45:e0:e9:00:75:3b:ec:64:8a:26:69: 21:05:17:d2:84:f6:4a:2a:9e:be:e6:f8:ff:1e:2c: 8f:8b:16:71:c5:f8:11:e9:9a:d4:72:6f:17:f1:19: 8d:fd:c0:8d:5e:41:03:9c:37:89:31:0d:d0:a6:10: cf:c9:8e:43:4d:17:04:a6:eb:0d:59:dd:ca:3d:b5: 7f:87:6e:3a:10:9f:6b:8a:e6:5b:75:35:c9:cf:cc: a5:ca:b5:80:4f:a5:17:62:6f:8c:5d:4f:41:c4:c6: c0:56:98:7a:19:83:ee:b1:2d:da:83:13:aa:4c:3e: c3:8a:ac:80:98:ce:2b:55:c8:52:68:57:9f:48:e4: 80:67:e2:e4:db:fa:a6:6d:a4:c2:e7:d8:16:81:29: c0:0c:d3:bb:66:ba:b0:bb:63:fb:d9:c9:0d:33:d0: cf:78:ab:f7:4c:9c:f5:58:00:03:8f:c8:46:18:4f: 95:e9:c2:5d:20:4b:65:7e:1c:f6:37:f2:14:ba:f7: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:78:9A:C4:78:51:F1:57:0E:25:D6:BC:92:E3:95:07:1E:AC:5F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl X509v3 Authority Key Identifier: keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer sbgp-ipAddrBlock: critical IPv4: 24.207.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:20:2f:7e:ca:55:d3:cf:27:72:cf:66:86:00:79:bc:7f:e0: 60:f5:34:e9:1e:a6:b1:d4:9a:f6:48:e7:00:10:62:a0:57:d3: 49:ac:b2:f8:ec:81:e3:dd:54:8d:d6:72:71:c6:5e:20:5a:a8: 38:43:b2:a4:02:ac:86:4c:d7:b1:64:28:3e:82:f0:f7:64:9a: 10:c2:60:39:57:ea:4a:af:5a:b0:4d:46:c5:e6:48:b8:a4:4c: 40:4c:d5:ee:32:43:f2:a4:1c:40:c2:90:12:79:74:58:77:9e: f9:dd:fd:eb:54:dd:71:c7:98:fa:47:53:b4:a8:02:08:28:04: 85:ad:40:94:72:cf:bc:84:f9:b1:5a:a9:f1:54:c5:9b:b5:91: fe:a1:8b:31:89:d4:f3:a6:ca:2f:f0:2c:70:96:07:7a:33:b7: ae:61:cf:8b:4c:d3:c8:f0:7b:8d:b3:50:cf:24:5a:1c:a6:34: 58:df:b1:fb:16:79:a7:69:82:32:16:4f:d5:4f:01:45:ed:65: 26:92:1b:bf:db:13:b6:a9:5d:f1:ad:f7:b3:93:3f:94:34:71: 0f:52:ed:f8:f7:45:c0:36:1f:66:d9:0b:0a:d9:7d:c9:d0:18: 36:64:43:76:f0:2b:d4:7f:8e:98:95:db:32:ac:80:ba:56:2a: 87:7d:c4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiKCjwX/OWgNBHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmZiMTg5NjgtN2FhNS00MWU1LTk2YjYtYzQ1YzI1YTU2 NmU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTM2ZjM0MDItMjYwNC00MWRjLTk1ZTktOWU4OGIxYjYwY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLDT4Xr3pJ3vvtUCvyom7D2s4+jiRG3iPwBR kTLmHXDnRspyUU1eXggMK7ZdgHhm5zyghZhTiIC/TUD8c8WYReDpAHU77GSKJmkh BRfShPZKKp6+5vj/HiyPixZxxfgR6ZrUcm8X8RmN/cCNXkEDnDeJMQ3QphDPyY5D TRcEpusNWd3KPbV/h246EJ9riuZbdTXJz8ylyrWAT6UXYm+MXU9BxMbAVph6GYPu sS3agxOqTD7DiqyAmM4rVchSaFefSOSAZ+Lk2/qmbaTC59gWgSnADNO7Zrqwu2P7 2ckNM9DPeKv3TJz1WAADj8hGGE+V6cJdIEtlfhz2N/IUuvfqcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx4msR4UfFXDiXWvJLjlQcerF9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmIx ODk2OC03YWE1LTQxZTUtOTZiNi1jNDVjMjVhNTY2ZTgvMjIyM2JmMWItNGU0OS0z YTMyLWJlOGUtZjIyMTBjZGQ3ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmZiMTg5NjgtN2FhNS00MWU1LTk2 YjYtYzQ1YzI1YTU2NmU4LzZmYjE4OTY4LTdhYTUtNDFlNS05NmI2LWM0NWMyNWE1 NjZlOC5jcmwwHwYDVR0jBBgwFoAUxp+s6nB94FGrxRuCOU0OczqioQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmIxODk2OC03YWE1LTQxZTUtOTZiNi1jNDVj MjVhNTY2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGM8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEgL37KVdPPJ3LPZoYAebx/4GD1NOkeprHUmvZI5wAQYqBX00mssvjs gePdVI3WcnHGXiBaqDhDsqQCrIZM17FkKD6C8PdkmhDCYDlX6kqvWrBNRsXmSLik TEBM1e4yQ/KkHEDCkBJ5dFh3nvnd/etU3XHHmPpHU7SoAggoBIWtQJRyz7yE+bFa qfFUxZu1kf6hizGJ1POmyi/wLHCWB3ozt65hz4tM08jwe42zUM8kWhymNFjfsfsW eadpgjIWT9VPAUXtZSaSG7/bE7apXfGt97OTP5Q0cQ9S7fj3RcA2H2bZCwrZfcnQ GDZkQ3bwK9R/jpiV2zKsgLpWKod9xFQ= -----END CERTIFICATE-----Generated at Mon Sep 28 23:41:12 2026 by rpki-client