$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/858db485-c9f2-370f-9faa-a1e08f5270b0.roa File: 858db485-c9f2-370f-9faa-a1e08f5270b0.roa (raw, json) Hash identifier: lKEsxzjmIFCjHucutJl06eiHeZNi2c8ykJif+xqF9UM= Subject key identifier: 90:E9:2D:7E:33:E3:F5:E3:56:56:22:A9:AE:3B:90:61:84:EB:C5:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498C0D3090E4AC93C5CA0A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/858db485-c9f2-370f-9faa-a1e08f5270b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.24.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:0d:30:90:e4:ac:93:c5:ca:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=02fbf40b-9273-4181-bbaa-6f28e26dc705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:4e:03:83:f4:af:b6:e7:5f:0e:33:2c:0d: eb:ba:ae:36:4d:74:80:5d:54:14:d5:08:8e:a6:a4: b3:aa:4f:86:a3:6f:8b:3a:b2:96:6d:2d:15:b9:e1: 6a:80:62:45:e7:2e:d5:39:8a:9d:15:43:34:5d:d9: a6:af:c2:6c:5b:0d:5e:aa:79:74:db:cb:f5:b2:8a: 40:a1:3f:4c:1f:e8:3f:48:10:48:44:71:e2:95:85: b1:c2:d2:4e:83:0a:6a:36:5f:f7:e1:0a:a3:36:35: 17:cf:39:d2:6a:70:81:9a:38:5c:9f:00:f7:f1:31: 47:83:05:23:30:d0:d7:56:4e:42:b8:ca:ea:41:3a: 30:f3:43:51:dc:ac:76:c3:93:01:0d:dc:d2:08:08: 33:62:2f:b6:d0:ea:99:17:29:78:28:0c:5b:28:45: 7b:05:89:61:ec:9c:e6:f0:02:68:f1:31:26:97:0c: 17:ee:44:8b:05:79:ed:d2:87:f3:87:18:e1:c3:29: 88:ef:fa:10:0d:cb:82:3e:52:58:65:c9:cf:be:1b: 5b:47:32:0f:8c:ee:83:17:81:80:09:2d:f1:5c:50: e9:6f:a0:af:2c:bf:81:1f:19:8c:f2:27:bf:46:9f: fb:00:02:8f:78:84:a4:a0:a7:91:b3:10:10:57:f4: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:2D:7E:33:E3:F5:E3:56:56:22:A9:AE:3B:90:61:84:EB:C5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/858db485-c9f2-370f-9faa-a1e08f5270b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:46:c1:28:50:a5:dc:d2:35:1f:1c:1d:4b:d5:bd:53:6c:ed: d5:73:1d:f1:05:3d:26:c7:0e:d5:8b:0e:19:83:e8:79:88:86: d4:61:d9:ce:1d:58:9a:77:a0:1c:a7:d4:f9:23:89:81:35:80: 54:c1:a9:c9:02:ab:be:f0:82:2b:12:95:f3:2b:5d:1d:82:5e: 41:e0:e4:0f:ee:d2:6c:c7:49:fe:64:d7:a3:8f:06:f6:2f:a0: 5d:4a:89:5a:b3:9f:66:b3:71:1f:ea:a0:ec:d2:e4:57:b9:7e: 7e:42:eb:ed:a5:ec:72:26:6c:a8:69:9a:81:87:8e:6b:51:eb: 73:fa:06:16:e5:5c:f6:5c:d6:70:e2:1f:06:8b:77:e6:a6:9a: 4a:a2:00:16:99:b9:a8:10:73:aa:33:01:00:e0:ee:df:3f:a0: e2:61:90:7b:c8:55:f0:e5:a9:71:4d:64:61:e8:de:fb:6c:23: 3d:61:5c:94:7e:af:48:55:49:61:62:e3:0a:a1:e6:3a:50:59: bf:97:39:0c:c0:ed:ae:d4:50:ec:2e:f5:4d:64:7a:a5:c1:e6: 9e:6a:75:00:0b:09:ef:43:7e:65:36:4f:21:08:ed:0d:1b:7b: 58:94:f3:83:b7:5f:f9:57:57:5e:e4:7c:16:c1:f4:b4:a4:d4: 84:08:bf:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjA0wkOSsk8XKCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDJmYmY0MGItOTI3My00MTgxLWJiYWEtNmYyOGUyNmRjNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmBOA4P0r7bnXw4zLA3ruq42TXSAXVQU1QiO pqSzqk+Go2+LOrKWbS0VueFqgGJF5y7VOYqdFUM0Xdmmr8JsWw1eqnl028v1sopA oT9MH+g/SBBIRHHilYWxwtJOgwpqNl/34QqjNjUXzznSanCBmjhcnwD38TFHgwUj MNDXVk5CuMrqQTow80NR3Kx2w5MBDdzSCAgzYi+20OqZFyl4KAxbKEV7BYlh7Jzm 8AJo8TEmlwwX7kSLBXnt0ofzhxjhwymI7/oQDcuCPlJYZcnPvhtbRzIPjO6DF4GA CS3xXFDpb6CvLL+BHxmM8ie/Rp/7AAKPeISkoKeRsxAQV/Rt4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDpLX4z4/XjVlYiqa47kGGE68UmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODU4ZGI0ODUtYzlmMi0z NzBmLTlmYWEtYTFlMDhmNTI3MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRiiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1GwShQpdzSNR8cHUvVvVNs7dVzHfEFPSbHDtWLDhmD6HmIhtRh2c4d WJp3oByn1PkjiYE1gFTBqckCq77wgisSlfMrXR2CXkHg5A/u0mzHSf5k16OPBvYv oF1KiVqzn2azcR/qoOzS5Fe5fn5C6+2l7HImbKhpmoGHjmtR63P6BhblXPZc1nDi HwaLd+ammkqiABaZuagQc6ozAQDg7t8/oOJhkHvIVfDlqXFNZGHo3vtsIz1hXJR+ r0hVSWFi4wqh5jpQWb+XOQzA7a7UUOwu9U1keqXB5p5qdQALCe9DfmU2TyEI7Q0b e1iU84O3X/lXV17kfBbB9LSk1IQIv80= -----END CERTIFICATE-----Generated at Sat Sep 26 17:05:14 2026 by rpki-client