$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a3542d9-eb62-33bb-85a6-e2593a586314.roa File: 3a3542d9-eb62-33bb-85a6-e2593a586314.roa (raw, json) Hash identifier: wF2Ql1QH/eIszyFAjSfjrGZWfbz72pp7WF3qRnjhd7Y= Subject key identifier: F3:85:2F:95:5B:9A:75:12:91:AA:79:EE:10:33:6F:99:54:37:94:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B79CA2A5CCC66BBECE312E6C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a3542d9-eb62-33bb-85a6-e2593a586314.roa Signing time: Fri 10 Oct 2025 13:27:51 +0000 ROA not before: Fri 10 Oct 2025 13:27:51 +0000 ROA not after: Thu 08 Jan 2026 14:27:51 +0000 asID: 19905 IP address blocks: 173.24.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ca:2a:5c:cc:66:bb:ec:e3:12:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 13:27:51 2025 GMT Not After : Jan 8 14:27:51 2026 GMT Subject: CN=8be2e238-84a9-42aa-af01-b407855ff959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:67:f1:57:4d:e0:05:ae:7d:a1:a3:36:06:58: c2:d6:3d:4a:af:45:ac:9e:13:50:ca:20:8c:6c:fb: c2:d9:57:ee:75:5c:58:c9:26:3c:bf:1a:ac:cf:32: 9b:80:cd:27:1a:da:b7:f5:4f:b1:e7:40:8b:e5:4e: fe:8f:29:1f:6b:76:97:e7:36:62:1d:7b:12:9a:84: 22:4f:f7:6b:2b:fe:32:53:95:1f:6d:f3:9e:ac:7f: 01:84:89:f1:f0:52:b4:bb:47:a4:d3:8e:26:1e:76: e1:1c:43:6e:ab:43:b6:67:00:65:a5:d3:41:20:cb: c5:37:1a:4c:43:15:c5:b7:38:01:ee:3a:6c:93:83: ce:e9:3e:b8:c6:8b:56:1f:7a:db:29:7b:98:1e:3b: 57:60:67:38:b8:92:59:3d:eb:6a:78:60:ee:e4:e3: bc:11:e2:ad:22:08:0f:88:0e:ed:36:31:9e:bd:e9: 0f:f4:4c:48:70:27:40:1f:47:14:49:de:a5:66:b1: 44:66:94:6f:74:16:7b:d3:72:06:32:59:5c:af:65: ec:32:00:da:f0:0e:24:9d:4a:36:17:21:2a:3e:85: 76:2c:65:18:ad:ca:5d:53:66:7a:68:9c:f4:4a:05: 64:dd:9c:a3:7e:f8:f5:45:bb:28:c1:8d:12:83:0d: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:85:2F:95:5B:9A:75:12:91:AA:79:EE:10:33:6F:99:54:37:94:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a3542d9-eb62-33bb-85a6-e2593a586314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:52:48:4f:57:97:45:b5:21:d7:79:67:e1:1a:f0:09:a9:a6: 73:53:cc:b5:0e:7f:85:83:08:8f:a8:b0:5b:26:5a:b7:8b:5e: 05:3d:32:26:7a:63:55:9a:a9:59:e3:90:ee:93:bd:7a:29:0d: a7:0d:b0:00:66:78:04:a5:15:de:e9:2a:21:09:15:fd:7b:d0: 89:24:3d:0c:14:c6:c2:32:5a:4f:40:85:d9:12:fd:e8:6a:bd: d8:17:86:f5:6d:9a:01:59:5f:06:dc:45:54:e2:a6:ff:9a:85: b5:a8:9d:dd:a0:f3:0f:27:b8:8a:1f:d4:85:c7:cb:aa:53:b7: 03:e8:66:ef:19:d1:44:fb:f8:8b:3a:e9:11:06:00:3f:85:18: 16:dc:34:3a:b7:c6:0d:1b:6c:9e:cc:b0:01:db:08:f3:22:64: d8:8f:cd:e7:e9:6b:d5:47:e0:5a:da:80:70:08:44:dd:a9:0d: c6:4f:80:31:93:c2:d7:05:9e:7c:ce:ec:38:78:be:05:49:ce: e9:80:c1:a1:7f:2b:bb:1f:4b:d0:f4:b0:02:56:96:ed:19:bc: d6:63:c4:77:0b:ee:55:5a:90:44:0e:21:4c:08:f2:4c:3a:75: 79:13:e6:9a:a4:08:9f:27:65:24:95:b5:ca:11:bb:fb:12:20: 3a:3d:2b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5yipczGa77OMS5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDEzMjc1MVoXDTI2MDEwODE0Mjc1MVowLzEtMCsGA1UEAxMk OGJlMmUyMzgtODRhOS00MmFhLWFmMDEtYjQwNzg1NWZmOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52fxV03gBa59oaM2BljC1j1Kr0WsnhNQyiCM bPvC2VfudVxYySY8vxqszzKbgM0nGtq39U+x50CL5U7+jykfa3aX5zZiHXsSmoQi T/drK/4yU5UfbfOerH8BhInx8FK0u0ek044mHnbhHENuq0O2ZwBlpdNBIMvFNxpM QxXFtzgB7jpsk4PO6T64xotWH3rbKXuYHjtXYGc4uJJZPetqeGDu5OO8EeKtIggP iA7tNjGevekP9ExIcCdAH0cUSd6lZrFEZpRvdBZ703IGMllcr2XsMgDa8A4knUo2 FyEqPoV2LGUYrcpdU2Z6aJz0SgVk3Zyjfvj1RbsowY0Sgw2mhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOFL5VbmnUSkap57hAzb5lUN5SyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2EzNTQyZDktZWI2Mi0z M2JiLTg1YTYtZTI1OTNhNTg2MzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJSSE9Xl0W1Idd5Z+Ea8AmppnNTzLUOf4WDCI+osFsmWreLXgU9MiZ6 Y1WaqVnjkO6TvXopDacNsABmeASlFd7pKiEJFf170IkkPQwUxsIyWk9AhdkS/ehq vdgXhvVtmgFZXwbcRVTipv+ahbWond2g8w8nuIof1IXHy6pTtwPoZu8Z0UT7+Is6 6REGAD+FGBbcNDq3xg0bbJ7MsAHbCPMiZNiPzefpa9VH4FragHAIRN2pDcZPgDGT wtcFnnzO7Dh4vgVJzumAwaF/K7sfS9D0sAJWlu0ZvNZjxHcL7lVakEQOIUwI8kw6 dXkT5pqkCJ8nZSSVtcoRu/sSIDo9KzQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:28 2025 by rpki-client