$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa File: 3c659425-4a42-3ef9-8a3f-c568097ff599.roa (raw, json) Hash identifier: xVZB8bncyVXFvyeyBQhP4ZwngRiMKJ/nh1ndFB2046I= Subject key identifier: 24:AF:44:03:CC:40:A5:3B:B7:09:02:4D:2B:2A:2F:B3:63:A2:57:7D Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584F2C225F7437EF00C012B85680 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 395383 IP address blocks: 70.34.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5f:74:37:ef:00:c0:12:b8:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=439bb704-77da-4a2b-9b0e-6926dd2206e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4f:bc:75:92:27:a3:9f:5d:48:22:96:e5:c9: 72:de:dc:ed:8d:aa:22:c0:08:76:35:0c:59:c4:4c: c1:ec:38:ef:4b:27:78:6d:a3:a8:2c:d4:43:fb:f4: 1c:79:73:70:e4:c4:92:87:21:22:ef:52:fa:6b:25: d8:e0:e6:89:ad:82:d2:4d:17:e4:66:c3:d8:d2:f6: f2:28:52:62:ad:16:60:2e:0a:14:5a:ce:cc:7c:cb: e3:00:7a:d3:08:84:06:f6:bf:7c:b0:1e:79:37:08: 2e:1f:c0:3e:a8:06:b3:c1:ae:40:fb:1a:c7:34:d6: 82:43:35:f4:e9:1f:69:d8:3b:59:03:5f:5c:27:a6: 74:57:7c:e1:af:d7:37:7d:3e:ae:78:0a:f5:c9:a4: 92:3c:42:44:30:66:15:ef:63:ce:b7:8c:f0:93:1a: 9f:ef:a1:73:e9:c3:66:01:5d:e3:c8:83:99:f8:ec: e1:15:05:42:a4:e2:c6:7e:09:20:f9:f5:6e:a4:aa: 4d:9f:03:98:8e:a8:03:3a:60:a7:ba:14:31:71:3c: 20:4f:2a:cc:32:16:e8:0e:35:c5:4b:17:2b:7b:c6: 01:82:69:16:f2:6d:58:18:6b:48:da:62:a1:6d:f9: e8:42:27:aa:75:32:36:55:77:dc:b0:5c:5d:30:7a: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AF:44:03:CC:40:A5:3B:B7:09:02:4D:2B:2A:2F:B3:63:A2:57:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:40:10:34:64:ef:1d:ff:20:85:37:63:13:f5:4a:d1:23:c6: 72:35:c8:22:50:e4:a2:8b:3d:79:66:b2:32:09:22:5a:1b:89: 16:ba:a3:a5:9d:cc:24:93:2b:fa:61:6a:cf:66:ab:83:9e:df: 1f:c4:3e:ba:33:92:d4:14:e3:9b:47:b9:17:c6:81:2e:73:24: 77:6a:2d:bd:f4:3c:c9:74:e9:b8:ba:42:28:5e:f8:37:91:d1: 13:59:9f:f6:13:12:f5:74:04:19:66:a5:4e:77:61:85:cb:7a: c7:2c:c6:80:e4:08:b6:d9:19:f2:c8:41:9e:c8:24:a2:8d:93: 9c:7c:d3:b0:aa:42:3a:7c:b8:37:2e:e5:7e:8a:ec:11:22:9c: 16:7c:6b:89:48:54:53:61:60:ec:75:32:46:6d:79:0f:29:f0: 96:05:e4:3b:30:b9:ac:e3:54:44:9c:a1:24:98:eb:73:99:9b: 6e:c9:06:7d:03:de:69:9e:dc:32:79:02:7b:19:02:77:26:3f: a4:96:d2:63:9c:47:00:2c:f8:6a:dc:52:29:7b:66:01:b9:37: 04:90:67:a8:02:a4:fb:e9:c2:dc:0e:6e:8e:1c:7f:5e:fb:42: 10:83:4d:82:17:45:a6:ab:6e:23:32:da:36:fe:9a:0c:1e:cf: ab:b6:53:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIl90N+8AwBK4VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk NDM5YmI3MDQtNzdkYS00YTJiLTliMGUtNjkyNmRkMjIwNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0+8dZIno59dSCKW5cly3tztjaoiwAh2NQxZ xEzB7DjvSyd4baOoLNRD+/QceXNw5MSShyEi71L6ayXY4OaJrYLSTRfkZsPY0vby KFJirRZgLgoUWs7MfMvjAHrTCIQG9r98sB55NwguH8A+qAazwa5A+xrHNNaCQzX0 6R9p2DtZA19cJ6Z0V3zhr9c3fT6ueAr1yaSSPEJEMGYV72POt4zwkxqf76Fz6cNm AV3jyIOZ+OzhFQVCpOLGfgkg+fVupKpNnwOYjqgDOmCnuhQxcTwgTyrMMhboDjXF Sxcre8YBgmkW8m1YGGtI2mKhbfnoQieqdTI2VXfcsFxdMHqu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSvRAPMQKU7twkCTSsqL7Njold9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvM2M2NTk0MjUtNGE0Mi0z ZWY5LThhM2YtYzU2ODA5N2ZmNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVAEDRk7x3/IIU3YxP1StEjxnI1yCJQ5KKLPXlmsjIJIlobiRa6o6Wd zCSTK/phas9mq4Oe3x/EProzktQU45tHuRfGgS5zJHdqLb30PMl06bi6Qihe+DeR 0RNZn/YTEvV0BBlmpU53YYXLescsxoDkCLbZGfLIQZ7IJKKNk5x807CqQjp8uDcu 5X6K7BEinBZ8a4lIVFNhYOx1MkZteQ8p8JYF5DswuazjVEScoSSY63OZm27JBn0D 3mme3DJ5AnsZAncmP6SW0mOcRwAs+GrcUil7ZgG5NwSQZ6gCpPvpwtwObo4cf177 QhCDTYIXRaarbiMy2jb+mgwez6u2U8o= -----END CERTIFICATE-----Generated at Mon Sep 21 19:31:34 2026 by rpki-client