$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/b4363080-9456-3a3d-976f-99d803e806ca.roa File: b4363080-9456-3a3d-976f-99d803e806ca.roa (raw, json) Hash identifier: rFRcapJbnlkbdELO88yc9LxSgcw2QDhpGKOPeHWhMYY= Subject key identifier: C0:46:7A:E0:C7:5A:EF:C4:FE:1B:B8:F2:0B:38:1F:04:92:65:BD:70 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584F4976CD1261A0ECA4673A5A80 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/b4363080-9456-3a3d-976f-99d803e806ca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400977 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:cd:12:61:a0:ec:a4:67:3a:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1db46931-8c24-479f-b093-a773f4203a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:e2:3d:22:b8:6f:79:8f:c4:de:bd:e4:81: f8:9f:7a:eb:0b:fa:99:50:e7:24:9c:f2:fe:6f:a0: cd:e3:bf:50:86:40:a4:5f:d3:0c:26:b0:51:6a:09: f9:a0:8e:dd:05:d7:4b:bc:dc:4f:8b:0d:17:74:07: 1a:5f:94:54:7e:9d:3d:47:36:e7:5c:b8:71:65:94: 64:f8:26:27:5c:3e:ae:c6:54:91:50:f4:ac:4d:a5: 6d:93:e6:34:e5:ed:e8:15:f1:20:ee:c3:5f:45:37: 6b:93:23:b0:1a:e0:fc:ba:a4:c8:2a:1c:ad:8f:62: c9:7c:6d:ce:2d:f1:6e:95:7d:bd:0b:74:c1:e8:bb: c4:99:e5:97:ae:fd:e5:65:10:9c:39:a6:ab:f4:6a: 8b:0c:df:78:d7:2e:b4:31:8e:3a:0e:33:4b:72:b3: 52:2c:95:0c:07:25:4c:ae:3d:47:0e:e1:02:ff:5e: e2:e5:69:95:95:ad:35:d2:32:ef:59:18:c9:83:34: 23:5b:73:57:a3:9f:40:52:42:53:5a:65:bb:f0:01: b2:30:83:93:52:43:f1:b0:37:98:be:a4:40:c4:1b: 0f:e2:e6:b0:fb:7b:85:48:f8:c9:2f:1c:60:1d:be: fa:7e:94:36:c4:be:65:18:12:91:77:90:30:bd:41: 9c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:46:7A:E0:C7:5A:EF:C4:FE:1B:B8:F2:0B:38:1F:04:92:65:BD:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/b4363080-9456-3a3d-976f-99d803e806ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4f:65:a4:97:82:a6:11:37:af:31:d2:aa:1c:19:b3:c4:cf: 94:e8:80:ee:80:b1:64:b3:b6:6d:e5:ad:50:01:48:b9:9c:c1: d7:3f:68:29:8d:a4:e1:99:61:26:8e:0a:bc:b2:0f:38:1a:ae: af:6c:0d:13:29:85:96:c0:d4:98:9d:7d:48:ef:00:35:f3:98: 3c:eb:fd:95:5e:70:90:b7:62:fd:da:75:4e:80:a3:e0:5a:7f: 7a:ba:24:6e:db:dd:84:00:ab:5e:df:51:c2:2e:9f:53:6c:ce: 14:c3:3a:d6:24:7f:78:bb:2e:08:f0:4e:9b:2a:52:1b:c2:69: 81:05:03:85:3a:8b:7e:af:76:33:33:b3:cf:3e:14:0a:e5:ee: 80:43:e2:54:41:8a:6c:1b:77:e2:db:bf:02:72:b6:5f:32:a1: 70:8b:1c:01:9c:14:05:d6:3d:4d:36:c9:5c:47:6d:98:97:1f: 38:33:96:99:96:f4:b9:06:3d:77:70:63:06:83:cb:6c:dd:19: b2:4b:9c:96:bc:68:c6:da:d3:7b:03:54:48:4a:7b:99:09:05: d4:20:34:b2:88:37:b9:49:67:05:81:78:a1:50:b3:b4:58:52: fa:97:70:d9:d3:18:10:3a:f6:97:cb:48:09:24:51:ed:15:73: 4e:a2:2c:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jds0SYaDspGc6WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWRiNDY5MzEtOGMyNC00NzlmLWIwOTMtYTc3M2Y0MjAzYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZHiPSK4b3mPxN695IH4n3rrC/qZUOcknPL+ b6DN479QhkCkX9MMJrBRagn5oI7dBddLvNxPiw0XdAcaX5RUfp09RzbnXLhxZZRk +CYnXD6uxlSRUPSsTaVtk+Y05e3oFfEg7sNfRTdrkyOwGuD8uqTIKhytj2LJfG3O LfFulX29C3TB6LvEmeWXrv3lZRCcOaar9GqLDN941y60MY46DjNLcrNSLJUMByVM rj1HDuEC/17i5WmVla010jLvWRjJgzQjW3NXo59AUkJTWmW78AGyMIOTUkPxsDeY vqRAxBsP4uaw+3uFSPjJLxxgHb76fpQ2xL5lGBKRd5AwvUGcgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBGeuDHWu/E/hu48gs4HwSSZb1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvYjQzNjMwODAtOTQ1Ni0z YTNkLTk3NmYtOTlkODAzZTgwNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpPZaSXgqYRN68x0qocGbPEz5TogO6AsWSztm3lrVABSLmcwdc/aCmN pOGZYSaOCryyDzgarq9sDRMphZbA1JidfUjvADXzmDzr/ZVecJC3Yv3adU6Ao+Ba f3q6JG7b3YQAq17fUcIun1NszhTDOtYkf3i7LgjwTpsqUhvCaYEFA4U6i36vdjMz s88+FArl7oBD4lRBimwbd+LbvwJytl8yoXCLHAGcFAXWPU02yVxHbZiXHzgzlpmW 9LkGPXdwYwaDy2zdGbJLnJa8aMba03sDVEhKe5kJBdQgNLKIN7lJZwWBeKFQs7RY UvqXcNnTGBA69pfLSAkkUe0Vc06iLKs= -----END CERTIFICATE-----Generated at Sat Sep 26 14:29:49 2026 by rpki-client