$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85078378-65c6-33f8-b313-20476a6d9935.roa File: 85078378-65c6-33f8-b313-20476a6d9935.roa (raw, json) Hash identifier: BUGFWgagOmJ6Cr63jHVmFHa2OMkg6AkQv5dFesOE5qQ= Subject key identifier: 84:B5:67:03:91:57:4D:AF:F9:D7:21:50:F1:9D:DA:AD:68:F9:4A:0F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49738C3159F1AEEF4D70A680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85078378-65c6-33f8-b313-20476a6d9935.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.24.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:8c:31:59:f1:ae:ef:4d:70:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2b3a08d4-6468-4671-839b-534a93a65a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:2f:0d:6a:94:b9:0e:b4:c3:a5:ac:20:69: ff:94:68:19:5a:ee:fd:10:86:f8:c0:b2:33:ef:d5: 16:be:92:ff:b1:c6:b3:20:11:df:59:05:28:97:2a: b7:ca:4d:7d:24:f0:02:13:e5:3b:06:04:f9:34:83: 51:60:7b:73:15:63:9a:98:dc:8e:35:92:1d:df:5e: 89:23:33:7c:d9:4a:45:cc:5f:31:d8:12:72:da:68: 0c:7f:8b:9e:3f:23:c8:04:b5:23:90:f6:9e:46:09: 4e:be:5b:12:09:9a:5d:f1:d6:00:1a:f6:bb:51:0e: d6:68:dd:47:9d:6d:71:f6:ab:6b:3a:93:7e:c8:88: 64:2b:4d:74:05:7a:91:5f:f9:e7:e8:8f:ca:58:81: 90:61:56:5c:4c:b2:ff:80:a4:86:ed:0b:51:30:4e: e9:13:7a:ac:a4:c7:18:36:bd:8a:8e:3e:dd:71:a6: 67:c7:c1:be:a5:e5:fa:21:8b:2e:95:e5:7e:29:92: d7:9a:72:15:e5:35:0d:b3:fa:ba:c6:b3:02:49:74: 84:82:d2:09:5c:d5:d8:fc:18:65:4b:47:69:f1:99: 85:6d:bd:a6:8b:c6:5c:bf:c3:84:ee:dc:9e:ef:78: 21:4b:2b:41:c7:5d:65:9c:dc:93:d4:de:01:6a:61: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:67:03:91:57:4D:AF:F9:D7:21:50:F1:9D:DA:AD:68:F9:4A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85078378-65c6-33f8-b313-20476a6d9935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:da:93:5b:8c:ad:b9:39:f2:40:a1:11:4c:d4:a5:d4:93:9a: a4:2b:35:ac:3e:b2:dd:c4:f6:21:2d:db:25:a4:c8:fd:58:76: fa:e8:0d:84:40:17:47:e3:70:aa:cb:62:41:10:19:16:a0:3a: 3b:c9:dd:c6:2b:e4:16:66:20:b0:56:6e:5b:9e:d4:e6:a4:a0: 0e:3a:2c:b1:ff:07:83:d1:a0:99:e4:bd:b0:b6:50:56:e6:cd: 91:dc:da:4b:a9:fd:d5:60:3e:86:d1:b3:a9:50:2b:a4:3b:cf: eb:88:a9:89:aa:f8:ba:c7:1a:40:e5:b4:2a:86:d5:9d:22:f2: e1:12:1d:aa:63:bf:dd:cd:15:70:dc:60:03:5b:d9:80:6b:af: 87:2e:91:e9:6f:5f:85:1a:ae:49:d2:19:98:37:4d:e6:52:9d: 20:cd:0c:b1:94:e8:71:89:34:31:d4:1f:8e:2d:a1:b9:d9:db: 6f:f3:0b:a1:03:94:8c:df:b7:6d:6d:b7:7f:44:3e:7a:11:b5: 62:87:24:59:10:36:c3:3f:b4:a7:9c:c9:b6:51:56:fa:cc:d5: b2:e6:2b:6c:34:63:a4:1d:c7:66:cf:4d:60:0d:eb:91:96:cc: 24:42:89:ac:51:79:9a:de:f3:51:72:14:2a:1d:77:70:da:20: 5a:5b:3e:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4wxWfGu701wpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmIzYTA4ZDQtNjQ2OC00NjcxLTgzOWItNTM0YTkzYTY1YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJUvDWqUuQ60w6WsIGn/lGgZWu79EIb4wLIz 79UWvpL/scazIBHfWQUolyq3yk19JPACE+U7BgT5NINRYHtzFWOamNyONZId316J IzN82UpFzF8x2BJy2mgMf4uePyPIBLUjkPaeRglOvlsSCZpd8dYAGva7UQ7WaN1H nW1x9qtrOpN+yIhkK010BXqRX/nn6I/KWIGQYVZcTLL/gKSG7QtRME7pE3qspMcY Nr2Kjj7dcaZnx8G+peX6IYsuleV+KZLXmnIV5TUNs/q6xrMCSXSEgtIJXNXY/Bhl S0dp8ZmFbb2mi8Zcv8OE7tye73ghSytBx11lnNyT1N4BamGMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS1ZwORV02v+dchUPGd2q1o+UoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODUwNzgzNzgtNjVjNi0z M2Y4LWIzMTMtMjA0NzZhNmQ5OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7ak1uMrbk58kChEUzUpdSTmqQrNaw+st3E9iEt2yWkyP1YdvroDYRA F0fjcKrLYkEQGRagOjvJ3cYr5BZmILBWblue1OakoA46LLH/B4PRoJnkvbC2UFbm zZHc2kup/dVgPobRs6lQK6Q7z+uIqYmq+LrHGkDltCqG1Z0i8uESHapjv93NFXDc YANb2YBrr4cukelvX4UarknSGZg3TeZSnSDNDLGU6HGJNDHUH44tobnZ22/zC6ED lIzft21tt39EPnoRtWKHJFkQNsM/tKecybZRVvrM1bLmK2w0Y6Qdx2bPTWAN65GW zCRCiaxReZre81FyFCodd3DaIFpbPrE= -----END CERTIFICATE-----Generated at Tue Oct 6 23:01:57 2026 by rpki-client