$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa File: ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa (raw, json) Hash identifier: mfuBYH4+o4HcdvXRcc9e+DTAeMLdf+nL16Yt7DKw/Dc= Subject key identifier: D3:5D:AA:F4:C4:38:D4:69:AE:2E:E6:6B:27:9D:BA:2E:26:35:13:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4973119984D21FEA3E698A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.24.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:11:99:84:d2:1f:ea:3e:69:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eb6a209b-aa92-4e37-86f0-de01a48c2643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:bb:bf:1d:9c:b9:45:19:47:23:d8:55:86: fe:e8:a7:57:b3:6e:c3:ea:fd:03:e7:79:ed:d6:f7: e8:e7:68:25:a4:83:ef:6b:fb:36:d5:12:59:eb:41: d7:d6:9b:eb:45:b8:c6:45:67:b5:d8:91:a3:81:5e: 70:04:e8:84:d7:07:ff:d7:7b:f8:81:f9:1a:64:45: 96:b6:69:e9:26:70:56:40:1c:5b:e7:a1:90:f0:9c: 11:c2:16:5e:43:f4:99:29:f2:8e:11:55:4b:4a:b9: 02:5e:b2:ed:df:c2:83:3f:9d:d1:3f:9c:55:88:07: 85:5f:17:2e:ac:c6:80:2b:9a:af:4b:ca:4f:03:d8: 0a:db:a2:7a:35:22:71:2b:f9:2f:cf:fa:bb:3a:5a: a8:44:19:76:49:0d:3f:2e:8c:cb:61:84:fb:20:ea: c3:2c:09:6a:3b:5e:18:5c:50:18:5d:27:c0:6a:66: 82:c3:0c:4a:36:2d:44:61:f2:66:d9:8e:eb:ff:42: 84:80:fc:e8:34:f1:5f:13:98:66:f0:f3:5a:b8:00: d3:b7:a2:21:75:d8:cf:5f:b9:52:eb:e1:62:b1:88: 78:69:28:66:01:35:3c:54:d1:6b:5e:2d:9a:c9:82: 90:73:62:d1:e4:e8:3a:3f:ad:4c:59:50:db:f8:15: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5D:AA:F4:C4:38:D4:69:AE:2E:E6:6B:27:9D:BA:2E:26:35:13:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d1:7c:26:0d:74:8a:00:9b:37:bb:63:08:3a:3b:a0:ac:32: 66:72:9d:9e:01:e9:27:6c:9c:58:c8:bc:ff:02:6b:09:0b:db: b5:98:8d:80:26:6a:3b:9d:69:0c:a1:c3:0c:5b:25:92:d8:04: 25:7e:e9:b9:b6:22:ca:d6:9c:2c:7a:d6:9b:ce:3e:cd:93:55: 7c:8f:1e:09:bf:0c:ff:64:df:83:79:09:0b:3c:6d:c9:ee:e5: 01:62:2a:1f:4f:e2:78:e4:57:09:bd:ab:63:f5:11:0a:36:2f: ca:26:ba:c3:cb:74:1b:0b:59:ec:b2:27:d0:f4:20:ea:27:85: 4d:66:fb:09:0b:eb:87:7a:df:c0:89:c8:6d:4d:49:3b:a4:ec: 05:f9:78:b9:1a:0e:29:5c:4e:21:f6:0f:cd:17:83:73:48:28: 45:7d:14:de:f0:fb:b0:09:b4:13:9a:2d:f9:5b:9e:94:6f:d6: b7:1a:8b:b1:98:9a:ff:58:0f:70:05:7e:60:9f:32:69:52:e3: ff:61:b1:1c:53:ac:01:21:eb:36:9e:c9:4d:66:a3:3d:6c:cb: 5e:29:fa:49:2f:06:d4:15:7c:6b:19:27:a7:63:e8:11:5e:87: 79:ab:3b:b3:05:ba:8d:36:8f:ff:31:d3:f4:e0:a2:40:db:3a: 80:62:37:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxGZhNIf6j5pigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWI2YTIwOWItYWE5Mi00ZTM3LTg2ZjAtZGUwMWE0OGMyNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTG7vx2cuUUZRyPYVYb+6KdXs27D6v0D53nt 1vfo52glpIPva/s21RJZ60HX1pvrRbjGRWe12JGjgV5wBOiE1wf/13v4gfkaZEWW tmnpJnBWQBxb56GQ8JwRwhZeQ/SZKfKOEVVLSrkCXrLt38KDP53RP5xViAeFXxcu rMaAK5qvS8pPA9gK26J6NSJxK/kvz/q7OlqoRBl2SQ0/LozLYYT7IOrDLAlqO14Y XFAYXSfAamaCwwxKNi1EYfJm2Y7r/0KEgPzoNPFfE5hm8PNauADTt6IhddjPX7lS 6+FisYh4aShmATU8VNFrXi2ayYKQc2LR5Og6P61MWVDb+BVXYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNdqvTEONRpri7mayedui4mNRPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmY5OTk4NWYtOTVkNy0z N2YyLWIwNWItYzZiMzRmM2MxZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnRfCYNdIoAmze7Ywg6O6CsMmZynZ4B6SdsnFjIvP8CawkL27WYjYAm ajudaQyhwwxbJZLYBCV+6bm2IsrWnCx61pvOPs2TVXyPHgm/DP9k34N5CQs8bcnu 5QFiKh9P4njkVwm9q2P1EQo2L8omusPLdBsLWeyyJ9D0IOonhU1m+wkL64d638CJ yG1NSTuk7AX5eLkaDilcTiH2D80Xg3NIKEV9FN7w+7AJtBOaLflbnpRv1rcai7GY mv9YD3AFfmCfMmlS4/9hsRxTrAEh6zaeyU1moz1sy14p+kkvBtQVfGsZJ6dj6BFe h3mrO7MFuo02j/8x0/TgokDbOoBiN/M= -----END CERTIFICATE-----Generated at Fri Sep 25 05:34:22 2026 by rpki-client