$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc1e8001-3692-318c-b06a-106356b2f625.roa File: cc1e8001-3692-318c-b06a-106356b2f625.roa (raw, json) Hash identifier: hKCJLcSYAWsXjnTZyqkv3Bn2QT6bE20e853vFOtPr70= Subject key identifier: F7:53:37:77:0D:94:7C:B1:EF:E5:42:45:DA:8F:2F:28:35:A4:F0:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA797C32D1A395B948ADC5D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc1e8001-3692-318c-b06a-106356b2f625.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 173.24.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:c3:2d:1a:39:5b:94:8a:dc:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cad9ecb0-a5bc-4a54-ad32-c27b12d52445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:61:08:aa:79:30:47:74:fe:b7:d0:7d:86: 98:e8:69:d0:e6:16:9d:e1:1d:41:d5:a7:b5:6f:0e: ef:e8:70:49:57:3d:8f:c3:61:9b:d8:ec:09:7b:30: ee:2b:ee:e0:90:0b:07:85:12:bc:36:d8:24:92:47: af:55:a8:f6:cf:d2:87:85:61:dd:7c:d0:0b:a5:13: 9a:16:f5:ed:f0:02:94:ad:cf:fd:cb:e9:10:5d:31: ab:cc:9e:29:da:55:0c:23:cb:38:15:0a:1b:50:9a: e7:04:06:38:cb:39:16:81:93:9b:71:6f:a8:a4:c4: bd:8d:82:c0:25:d0:77:18:6e:64:f1:58:e1:43:8a: 14:4b:6d:50:70:fc:a0:9e:22:74:ab:ea:d7:f0:a0: 8f:56:60:ca:e2:47:f4:2d:64:00:2d:14:38:14:cb: 10:d9:5e:b1:ca:ae:1f:00:f2:b4:85:8f:0f:5f:7e: 57:7c:d3:62:ac:52:83:b7:ea:70:7b:9a:63:fa:f7: 49:95:80:43:f9:7c:6d:b0:e5:2e:ad:37:b2:dd:7d: fd:60:99:28:47:5b:6e:90:63:6e:e2:5f:27:42:df: 39:ad:50:7c:7a:66:29:c2:ea:43:23:9b:b9:ba:60: db:2a:7f:fa:50:ec:95:14:67:9c:f1:27:1d:48:31: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:53:37:77:0D:94:7C:B1:EF:E5:42:45:DA:8F:2F:28:35:A4:F0:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc1e8001-3692-318c-b06a-106356b2f625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b6:45:ed:4f:d6:07:a7:06:b8:e5:8b:59:6f:01:be:e9:76: 8e:91:34:72:7e:a1:b3:4d:01:c1:ac:a5:ff:15:94:c8:89:1f: e2:f8:89:76:80:01:92:f8:25:03:e5:19:d6:cd:34:0d:ac:d7: db:20:cd:1b:05:54:a8:8e:51:7d:e6:98:75:ad:f7:a8:2b:f5: 69:22:77:99:5e:66:c1:cc:22:ae:d2:e2:0e:06:c7:5e:e0:41: 10:a8:29:ad:56:0b:11:96:60:2b:d8:b7:ee:a0:6e:9f:17:1c: 56:3c:36:69:b2:40:c2:ad:4b:78:8a:71:21:a0:66:ea:ff:1f: a8:45:ea:ea:9f:a5:78:ab:52:35:5e:99:b7:f1:48:b5:c3:83: ba:93:3d:14:04:d9:17:61:9f:a4:81:88:f4:1f:0b:3f:fb:42: 93:62:9e:2f:bd:9e:2d:28:9a:3c:81:6e:54:92:4d:8f:27:d0: 10:16:79:57:a3:a1:5d:94:cd:77:dc:86:47:f1:c5:d1:2e:91: 19:c8:dd:fe:9c:23:54:b0:63:5e:99:07:e3:b4:10:ec:da:46: 75:ef:c4:c7:b1:69:36:ca:bd:77:c5:c9:a3:39:80:b3:03:4b: 69:2f:4a:00:13:65:14:9a:82:0e:bc:1a:07:81:8b:3d:b7:57: 9a:03:b7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl8MtGjlblIrcXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2FkOWVjYjAtYTViYy00YTU0LWFkMzItYzI3YjEyZDUyNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqphhCKp5MEd0/rfQfYaY6GnQ5had4R1B1ae1 bw7v6HBJVz2Pw2Gb2OwJezDuK+7gkAsHhRK8NtgkkkevVaj2z9KHhWHdfNALpROa FvXt8AKUrc/9y+kQXTGrzJ4p2lUMI8s4FQobUJrnBAY4yzkWgZObcW+opMS9jYLA JdB3GG5k8VjhQ4oUS21QcPygniJ0q+rX8KCPVmDK4kf0LWQALRQ4FMsQ2V6xyq4f APK0hY8PX35XfNNirFKDt+pwe5pj+vdJlYBD+XxtsOUurTey3X39YJkoR1tukGNu 4l8nQt85rVB8emYpwupDI5u5umDbKn/6UOyVFGec8ScdSDEjfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdTN3cNlHyx7+VCRdqPLyg1pPAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2MxZTgwMDEtMzY5Mi0z MThjLWIwNmEtMTA2MzU2YjJmNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK2Re1P1genBrjli1lvAb7pdo6RNHJ+obNNAcGspf8VlMiJH+L4iXaA AZL4JQPlGdbNNA2s19sgzRsFVKiOUX3mmHWt96gr9Wkid5leZsHMIq7S4g4Gx17g QRCoKa1WCxGWYCvYt+6gbp8XHFY8NmmyQMKtS3iKcSGgZur/H6hF6uqfpXirUjVe mbfxSLXDg7qTPRQE2Rdhn6SBiPQfCz/7QpNini+9ni0omjyBblSSTY8n0BAWeVej oV2UzXfchkfxxdEukRnI3f6cI1SwY16ZB+O0EOzaRnXvxMexaTbKvXfFyaM5gLMD S2kvSgATZRSagg68GgeBiz23V5oDt5Q= -----END CERTIFICATE-----Generated at Wed Jul 29 08:33:29 2026 by rpki-client