$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c92d1267-975c-36fc-a9d6-0f3ca34e7228.roa File: c92d1267-975c-36fc-a9d6-0f3ca34e7228.roa (raw, json) Hash identifier: FX6J7/gM+YqB5fzc9gNbnOD1Pqv4rvrMukWwFPp8dcw= Subject key identifier: D3:7D:77:05:6E:08:3B:EB:5F:19:27:45:43:C6:25:6C:C6:6B:98:4E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972F3565EC9D936431BDF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c92d1267-975c-36fc-a9d6-0f3ca34e7228.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.24.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:f3:56:5e:c9:d9:36:43:1b:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f464eb1b-e8ec-4c99-9cee-e80917df5ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:63:2b:49:9e:30:ee:f7:88:ef:03:78:ae: 1b:ed:0f:4f:30:32:34:53:0f:ad:2d:91:0d:d9:ca: 3f:be:0e:6f:ab:8e:23:58:18:29:87:26:89:48:64: 8b:51:43:fd:fe:36:25:82:9a:95:62:79:23:15:7b: 92:c7:df:7b:39:57:f6:0c:b3:00:ba:45:e6:57:f0: 86:f0:a5:91:f9:53:f7:1a:65:38:f5:b3:e2:29:b0: 3c:59:2d:72:f1:8f:f0:04:f6:53:c6:85:db:89:7d: 88:05:69:cc:80:75:d9:2b:2a:b9:90:34:d8:1b:e2: e2:ee:28:94:da:e4:d2:c6:96:e5:aa:95:ee:f9:cb: 13:9f:a4:f6:54:06:74:07:a3:ef:1a:13:f7:bb:4b: 57:5f:70:a9:8a:84:02:49:57:a8:54:a3:f2:bd:5a: c4:80:5a:cc:a5:da:44:1b:da:ff:c9:10:d1:7a:84: 6b:ac:11:d7:e4:7f:4b:40:1c:c6:9f:c3:c3:57:b3: c5:e1:26:98:4a:14:09:53:c9:07:14:a1:8a:27:d8: d5:42:36:ae:51:2e:56:0f:af:69:56:e8:ee:2d:c2: 31:e1:59:2e:c2:69:23:1d:e0:7e:96:f4:55:b0:88: 08:67:e9:67:b3:7c:16:18:2c:b1:52:82:83:2e:6a: c0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7D:77:05:6E:08:3B:EB:5F:19:27:45:43:C6:25:6C:C6:6B:98:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c92d1267-975c-36fc-a9d6-0f3ca34e7228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e3:a3:d1:38:f8:45:8a:3e:d1:a6:dd:5a:f3:29:dd:43:69: 3c:ad:a9:55:11:3b:0f:11:41:19:ae:dc:3e:7e:a3:e1:a2:72: a7:92:48:41:f3:d7:40:1d:6f:61:ae:64:20:44:34:c3:0f:b5: e8:cf:7f:0d:91:9e:db:4c:d1:9a:28:2c:fa:4c:76:89:47:3c: 82:19:64:68:2e:12:97:f0:32:b4:bb:11:dd:da:37:e3:21:a8: c3:75:cd:03:95:bb:4d:4a:da:21:58:fa:24:0e:7f:08:5e:61: b3:9d:90:18:74:f5:e2:de:33:cf:e3:1e:bb:6d:2e:79:bc:d1: 6d:03:c6:91:6a:87:d2:b0:b0:fa:ad:ed:7b:de:62:12:41:6f: b8:77:5b:82:e3:93:b6:86:94:5f:f7:78:5e:91:fa:90:42:17: 1f:fc:a5:31:19:90:0e:d5:cb:a2:01:dc:c8:d8:81:b2:34:19: b3:c9:0f:49:a7:83:dd:07:b5:45:a6:c5:27:9f:41:ca:3b:c1: c9:c9:c0:4b:da:cd:68:2d:4e:96:e9:e5:6e:05:84:88:81:9d: c4:f0:fb:bb:42:4e:85:71:9c:10:bb:0e:78:f9:a7:b6:99:79: e9:39:d9:21:40:1c:53:32:51:c5:e1:c4:58:79:c3:94:68:e3: e3:f0:a7:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvNWXsnZNkMb3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ2NGViMWItZThlYy00Yzk5LTljZWUtZTgwOTE3ZGY1ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RZjK0meMO73iO8DeK4b7Q9PMDI0Uw+tLZEN 2co/vg5vq44jWBgphyaJSGSLUUP9/jYlgpqVYnkjFXuSx997OVf2DLMAukXmV/CG 8KWR+VP3GmU49bPiKbA8WS1y8Y/wBPZTxoXbiX2IBWnMgHXZKyq5kDTYG+Li7iiU 2uTSxpblqpXu+csTn6T2VAZ0B6PvGhP3u0tXX3CpioQCSVeoVKPyvVrEgFrMpdpE G9r/yRDReoRrrBHX5H9LQBzGn8PDV7PF4SaYShQJU8kHFKGKJ9jVQjauUS5WD69p VujuLcIx4VkuwmkjHeB+lvRVsIgIZ+lns3wWGCyxUoKDLmrAJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNN9dwVuCDvrXxknRUPGJWzGa5hOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzkyZDEyNjctOTc1Yy0z NmZjLWE5ZDYtMGYzY2EzNGU3MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPjo9E4+EWKPtGm3VrzKd1DaTytqVUROw8RQRmu3D5+o+GicqeSSEHz 10Adb2GuZCBENMMPtejPfw2RnttM0ZooLPpMdolHPIIZZGguEpfwMrS7Ed3aN+Mh qMN1zQOVu01K2iFY+iQOfwheYbOdkBh09eLeM8/jHrttLnm80W0DxpFqh9KwsPqt 7XveYhJBb7h3W4Ljk7aGlF/3eF6R+pBCFx/8pTEZkA7Vy6IB3MjYgbI0GbPJD0mn g90HtUWmxSefQco7wcnJwEvazWgtTpbp5W4FhIiBncTw+7tCToVxnBC7Dnj5p7aZ eek52SFAHFMyUcXhxFh5w5Ro4+Pwp6g= -----END CERTIFICATE-----Generated at Fri Sep 25 15:28:22 2026 by rpki-client