$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa File: 24927ac0-57fd-3657-99af-1a39e1c9e829.roa (raw, json) Hash identifier: XzY+0+O8MzL4r45UWq43KKlm7PuV3BO/iAI/vLopmTc= Subject key identifier: B0:A5:36:FD:25:18:06:70:44:62:14:2C:E5:CE:20:3A:5B:D7:E5:71 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B004BE032578104DF7447A000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e0:32:57:81:04:df:74:47:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=bcbbbf87-4abd-4736-8c64-34212c57e752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:64:22:c0:48:a4:89:17:2c:f4:ac:8e:2b: 55:21:67:a0:03:a4:90:46:99:46:06:c1:ac:4b:26: c0:91:63:2e:f0:f6:1a:e4:05:eb:71:b9:5e:de:b5: e6:2a:5d:bc:c0:50:c6:f9:e7:67:1c:28:db:03:93: cd:7f:a5:4b:5b:ec:4e:57:69:a1:a5:5d:61:12:f8: 10:15:56:4a:a0:fe:9d:a8:a9:3e:27:6a:2b:08:be: 68:3d:29:6f:34:7a:55:bf:db:81:da:77:f0:c8:b9: 05:2e:cc:c7:40:d9:99:07:07:cb:41:e6:c9:77:28: 41:e6:b2:f7:0f:42:c8:68:7a:e8:1a:a6:ea:19:3d: 4a:e0:d8:da:44:6e:75:db:5c:41:8e:12:4a:c6:b6: 04:16:d4:ad:dc:a4:50:b3:b5:42:ba:f1:0f:bf:1f: 1d:9b:b2:2d:f1:db:33:26:ad:8b:c9:af:f0:03:d2: 17:81:2e:dc:8d:f7:2e:5e:e6:78:ff:e3:c7:16:f0: 64:69:6d:e1:7a:dd:63:56:1b:e3:e5:5d:d2:a4:4b: 70:64:d5:b7:66:63:3b:1c:5d:c2:b1:18:9e:7d:76: b0:63:65:45:25:9c:25:cc:fd:58:04:6b:08:c4:07: f6:f1:8e:4a:ee:99:43:e4:ac:d5:e6:04:86:3e:b3: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A5:36:FD:25:18:06:70:44:62:14:2C:E5:CE:20:3A:5B:D7:E5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:27:3a:c4:45:17:71:1c:1e:ca:5f:c7:10:33:e5:87:bd:69: d5:c4:c8:b3:36:ea:12:10:58:7c:a0:f9:a1:7d:c7:bd:45:47: 8e:22:ca:1f:c6:12:ff:22:81:a2:34:83:af:d8:57:b7:aa:a8: a7:8f:42:24:de:b3:4b:65:ed:ff:b0:3b:c3:1c:92:68:ab:0c: 61:71:ca:51:2e:de:35:cf:36:e8:ed:10:f6:0c:f6:f7:8c:ec: 4e:f9:77:f7:ea:57:4b:e3:f1:67:9e:31:ee:1b:ef:28:17:97: f3:53:df:37:b2:1c:4a:db:aa:7e:d9:25:25:0d:c3:e1:a1:34: c6:98:e4:80:d3:7e:78:6c:90:0f:8e:2a:3e:d3:90:64:a7:05: 7a:84:99:82:bd:79:92:32:42:41:61:f7:af:0d:e4:06:c9:2c: be:ab:fd:e8:46:2b:1f:f4:4d:25:9e:10:74:85:f8:35:74:30: d8:e6:bc:cd:3a:80:01:4f:10:d8:0b:d8:44:1f:b1:93:67:c6: e2:2f:ab:9a:8f:43:e5:48:28:a5:07:71:8f:9d:ef:7d:cd:d8: b8:68:76:5f:5a:3c:b7:a7:71:cd:4c:a5:05:13:99:de:50:c2: f4:37:d8:fe:3f:96:d7:e6:0f:be:c4:bf:98:9d:58:fb:b0:bd: 20:9c:8f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+AyV4EE33RHoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YmNiYmJmODctNGFiZC00NzM2LThjNjQtMzQyMTJjNTdlNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrxkIsBIpIkXLPSsjitVIWegA6SQRplGBsGs SybAkWMu8PYa5AXrcble3rXmKl28wFDG+ednHCjbA5PNf6VLW+xOV2mhpV1hEvgQ FVZKoP6dqKk+J2orCL5oPSlvNHpVv9uB2nfwyLkFLszHQNmZBwfLQebJdyhB5rL3 D0LIaHroGqbqGT1K4NjaRG5121xBjhJKxrYEFtSt3KRQs7VCuvEPvx8dm7It8dsz Jq2Lya/wA9IXgS7cjfcuXuZ4/+PHFvBkaW3het1jVhvj5V3SpEtwZNW3ZmM7HF3C sRiefXawY2VFJZwlzP1YBGsIxAf28Y5K7plD5KzV5gSGPrPiFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLClNv0lGAZwRGIULOXOIDpb1+VxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQ5MjdhYzAtNTdmZC0z NjU3LTk5YWYtMWEzOWUxYzllODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAnOsRFF3EcHspfxxAz5Ye9adXEyLM26hIQWHyg+aF9x71FR44iyh/G Ev8igaI0g6/YV7eqqKePQiTes0tl7f+wO8MckmirDGFxylEu3jXPNujtEPYM9veM 7E75d/fqV0vj8WeeMe4b7ygXl/NT3zeyHErbqn7ZJSUNw+GhNMaY5IDTfnhskA+O Kj7TkGSnBXqEmYK9eZIyQkFh968N5AbJLL6r/ehGKx/0TSWeEHSF+DV0MNjmvM06 gAFPENgL2EQfsZNnxuIvq5qPQ+VIKKUHcY+d733N2Lhodl9aPLencc1MpQUTmd5Q wvQ32P4/ltfmD77Ev5idWPuwvSCcj3U= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:29 2025 by rpki-client