$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/24f1c8ff-1818-30be-99fe-9c8f30228477.roa File: 24f1c8ff-1818-30be-99fe-9c8f30228477.roa (raw, json) Hash identifier: U5ox3H7ZM2FUawLMOuWa5jcQellnMkZUFSusE3OSARw= Subject key identifier: B0:1E:B6:05:03:FB:32:95:D3:ED:1F:DC:76:F8:5C:D2:EC:FE:2F:D1 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F4972EE2A876D3BC7C55711C0 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/24f1c8ff-1818-30be-99fe-9c8f30228477.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1403 IP address blocks: 72.12.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ee:2a:87:6d:3b:c7:c5:57:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=989f936b-66ac-422e-a578-1feb1341c319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:63:bc:f6:f4:32:13:ae:03:80:51:84:a0: 85:c8:c4:98:8a:ca:bd:72:40:be:1e:5d:81:3d:90: 8f:78:5a:47:5a:83:91:9b:bd:ae:e3:81:ab:25:ed: 2a:41:8e:85:e3:06:5a:28:c1:de:50:3c:4e:bc:c2: f1:44:f5:fd:a0:83:ac:92:53:9a:40:0d:70:b1:fb: 87:53:09:bc:04:98:21:fc:e6:c7:86:4d:87:37:bc: 13:9e:78:7f:e1:f5:39:71:6f:39:75:0e:2d:a2:fa: 28:42:3c:1f:89:a5:97:3d:25:d9:49:e6:a2:55:8f: 39:42:c9:94:9f:66:b3:9b:8a:98:a3:10:81:4a:34: 68:a4:99:66:3b:20:b5:ee:8b:b3:64:f1:20:38:94: 18:31:ff:2f:cc:89:cc:be:a4:ca:3c:ab:04:41:9b: 8b:5c:c6:f2:b3:39:a0:17:4c:7b:36:5e:a9:c2:6e: 01:48:82:f8:17:01:f0:b3:bd:1e:33:50:33:d3:bf: 6d:ef:91:0e:34:d6:f1:eb:4d:70:de:8c:f8:56:ee: 9a:2d:51:13:62:b0:40:bc:15:b4:30:2d:b4:f8:43: 2b:9d:83:a7:8d:c1:1f:08:4d:05:90:ed:76:f5:82: d6:3e:de:1d:23:6b:c8:e0:65:09:d1:2b:d0:6f:5d: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1E:B6:05:03:FB:32:95:D3:ED:1F:DC:76:F8:5C:D2:EC:FE:2F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/24f1c8ff-1818-30be-99fe-9c8f30228477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 72.12.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:54:97:bc:fe:56:f5:51:4b:d2:78:a9:63:f2:47:dd:fd:b5: 99:f3:34:b8:4c:a2:2f:fa:38:25:71:f9:c4:16:22:0e:5c:c0: c2:16:c0:57:93:b4:4f:39:7c:7e:90:14:f9:57:db:75:8b:83: 74:60:1d:7e:da:6a:57:e7:e8:e0:6e:a2:54:31:59:39:1f:8f: 34:7f:91:84:a7:a3:01:93:c3:16:0d:47:6f:ca:f7:be:ad:78: 75:c8:09:97:55:45:f0:ba:96:4f:79:01:7e:96:11:67:6a:d4: 4d:09:dc:8e:70:bc:17:39:6b:3e:60:9d:76:c4:b2:1a:3b:c0: a3:08:80:e6:8c:de:e8:38:fc:36:c4:e3:93:e3:6c:9d:81:18: 79:45:32:85:d5:62:2d:ac:6e:cd:98:ce:cd:39:0f:c9:5f:7d: 30:04:10:5d:37:19:88:ea:61:79:64:95:61:d2:58:e6:0c:94: 58:f9:c7:8f:9e:13:e4:f1:44:29:5d:fc:11:66:93:9f:36:e1: dc:04:ba:cb:1a:a1:6b:f5:d3:0c:fc:ae:42:a5:8a:25:dc:e3: 62:f4:d4:c1:2a:36:7f:13:c4:87:4c:19:86:1d:1b:9c:e1:88: a7:7a:9f:5c:92:2b:55:09:e0:da:1c:99:e8:66:be:c3:d9:ff: 2c:80:23:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcu4qh207x8VXEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTg5ZjkzNmItNjZhYy00MjJlLWE1NzgtMWZlYjEzNDFjMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt1jvPb0MhOuA4BRhKCFyMSYisq9ckC+Hl2B PZCPeFpHWoORm72u44GrJe0qQY6F4wZaKMHeUDxOvMLxRPX9oIOsklOaQA1wsfuH Uwm8BJgh/ObHhk2HN7wTnnh/4fU5cW85dQ4tovooQjwfiaWXPSXZSeaiVY85QsmU n2azm4qYoxCBSjRopJlmOyC17ouzZPEgOJQYMf8vzInMvqTKPKsEQZuLXMbyszmg F0x7Nl6pwm4BSIL4FwHws70eM1Az079t75EONNbx601w3oz4Vu6aLVETYrBAvBW0 MC20+EMrnYOnjcEfCE0FkO129YLWPt4dI2vI4GUJ0SvQb10wsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAetgUD+zKV0+0f3Hb4XNLs/i/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMjRmMWM4ZmYtMTgxOC0z MGJlLTk5ZmUtOWM4ZjMwMjI4NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1Ul7z+VvVRS9J4qWPyR939tZnzNLhMoi/6OCVx+cQWIg5cwMIWwFeT tE85fH6QFPlX23WLg3RgHX7aalfn6OBuolQxWTkfjzR/kYSnowGTwxYNR2/K976t eHXICZdVRfC6lk95AX6WEWdq1E0J3I5wvBc5az5gnXbEsho7wKMIgOaM3ug4/DbE 45PjbJ2BGHlFMoXVYi2sbs2Yzs05D8lffTAEEF03GYjqYXlklWHSWOYMlFj5x4+e E+TxRCld/BFmk5824dwEussaoWv10wz8rkKliiXc42L01MEqNn8TxIdMGYYdG5zh iKd6n1ySK1UJ4NocmehmvsPZ/yyAI8g= -----END CERTIFICATE-----Generated at Tue Sep 29 13:03:39 2026 by rpki-client