$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baa7c211-d066-3cd8-a889-95a604c1e7cd.roa File: baa7c211-d066-3cd8-a889-95a604c1e7cd.roa (raw, json) Hash identifier: ecmIFF9joOPewaDdDElkoSW/iyhrQ391w+NYm1wuvIo= Subject key identifier: 31:FD:45:3E:78:04:4D:82:B6:BB:94:A7:E4:40:45:29:B6:07:AF:CA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF44CCB90F2EFB1A83386C100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baa7c211-d066-3cd8-a889-95a604c1e7cd.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.24.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:cb:90:f2:ef:b1:a8:33:86:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=bb6814c2-ee88-466b-b1e9-03d8e878b6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:23:0a:26:6c:f6:41:d7:cb:95:e2:15:b6: a1:1e:bb:e8:ce:b2:32:3b:06:10:06:90:15:64:cc: ee:40:f0:9a:7e:45:58:bf:a2:ac:3d:7c:46:8e:6c: b9:45:00:c0:dc:9f:d8:0e:de:90:c4:57:53:34:c7: 46:d6:ed:29:02:6f:39:c6:8a:2b:a0:9e:7b:32:06: 5f:8c:1a:81:e0:4b:a4:7a:ec:50:15:dc:71:71:b9: ea:b2:74:35:c1:51:ef:38:05:6d:01:cc:78:9d:07: c1:ca:0c:cd:8b:4c:62:d8:ce:bd:d6:5a:9d:8a:a5: 05:f0:26:77:28:f4:70:7b:d7:66:59:a4:7d:6f:30: 5c:55:26:28:22:8c:ba:ba:4f:11:4f:a4:45:48:48: 41:93:dc:09:35:bd:38:f4:cb:f3:bd:ec:05:e5:20: 39:48:51:33:09:72:05:bc:85:39:05:01:4b:f7:c8: 02:f7:8b:84:44:55:14:5e:31:10:89:62:cf:88:a6: 07:1b:fe:39:e5:16:a6:a6:fe:b4:4b:04:ae:14:94: 92:d6:54:8a:69:65:fe:91:9f:9a:cd:5f:d2:2f:b4: 5a:7e:8c:21:7d:bb:77:f1:94:7d:c0:7f:5c:5d:b6: d7:01:60:15:85:78:41:0d:db:a5:2e:30:69:77:8c: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FD:45:3E:78:04:4D:82:B6:BB:94:A7:E4:40:45:29:B6:07:AF:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baa7c211-d066-3cd8-a889-95a604c1e7cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c9:f3:1a:ec:7b:82:41:2c:71:86:18:23:8a:b0:c1:f3:02: f0:3f:03:f9:07:5e:0c:ee:7a:16:04:91:73:14:c9:1c:96:41: 8a:47:71:b8:84:e5:f0:e0:56:99:99:12:65:9c:13:fa:5e:70: e2:02:bf:b6:2a:9c:53:91:d9:d8:f7:71:1f:2a:04:ce:89:0e: 16:51:75:e1:22:41:77:83:cc:64:fc:3d:a0:0a:b0:9f:c8:43: 33:a2:b1:45:ec:8f:f4:69:d2:ef:c3:ba:75:8a:7e:d1:bb:a5: a0:01:dc:f2:68:64:f9:bb:0c:b0:ee:fd:cd:fd:58:e3:34:21: e9:94:b8:51:82:a9:38:cc:82:11:26:06:e1:6b:51:80:5b:39: 50:1a:02:00:4b:32:be:e0:3b:af:d8:3d:a3:2a:14:d4:69:81: d0:a6:2b:b4:66:ea:a5:ea:82:f1:b0:3d:69:c1:8c:c4:e4:39: 6a:40:60:9e:d9:d0:88:46:6e:41:f4:d4:9d:44:9e:30:c6:08: 73:dc:c5:b5:ef:14:2f:b8:4c:c0:e7:a7:31:73:6a:f3:70:46: a7:45:77:14:1f:94:72:78:80:36:46:fb:52:42:2b:ca:cf:3d: 13:c6:39:b8:80:b4:e5:96:31:27:29:81:ca:08:f3:28:56:c0: fe:0c:46:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMuQ8u+xqDOGwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YmI2ODE0YzItZWU4OC00NjZiLWIxZTktMDNkOGU4NzhiNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU0jCiZs9kHXy5XiFbahHrvozrIyOwYQBpAV ZMzuQPCafkVYv6KsPXxGjmy5RQDA3J/YDt6QxFdTNMdG1u0pAm85xooroJ57MgZf jBqB4EukeuxQFdxxcbnqsnQ1wVHvOAVtAcx4nQfBygzNi0xi2M691lqdiqUF8CZ3 KPRwe9dmWaR9bzBcVSYoIoy6uk8RT6RFSEhBk9wJNb049MvzvewF5SA5SFEzCXIF vIU5BQFL98gC94uERFUUXjEQiWLPiKYHG/455Rampv60SwSuFJSS1lSKaWX+kZ+a zV/SL7Rafowhfbt38ZR9wH9cXbbXAWAVhXhBDdulLjBpd4z/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH9RT54BE2CtruUp+RARSm2B6/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFhN2MyMTEtZDA2Ni0z Y2Q4LWE4ODktOTVhNjA0YzFlN2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXJ8xrse4JBLHGGGCOKsMHzAvA/A/kHXgzuehYEkXMUyRyWQYpHcbiE 5fDgVpmZEmWcE/pecOICv7YqnFOR2dj3cR8qBM6JDhZRdeEiQXeDzGT8PaAKsJ/I QzOisUXsj/Rp0u/DunWKftG7paAB3PJoZPm7DLDu/c39WOM0IemUuFGCqTjMghEm BuFrUYBbOVAaAgBLMr7gO6/YPaMqFNRpgdCmK7Rm6qXqgvGwPWnBjMTkOWpAYJ7Z 0IhGbkH01J1EnjDGCHPcxbXvFC+4TMDnpzFzavNwRqdFdxQflHJ4gDZG+1JCK8rP PRPGObiAtOWWMScpgcoI8yhWwP4MRnY= -----END CERTIFICATE-----Generated at Wed Sep 23 08:08:15 2026 by rpki-client