$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c834b3e-e46c-3687-a3e5-ce0abb44cc48.roa File: 3c834b3e-e46c-3687-a3e5-ce0abb44cc48.roa (raw, json) Hash identifier: /gXAWfimMFEVOlamuCksToJxiINCxoHuxmE9C+kwMk4= Subject key identifier: 2B:C1:30:2D:18:C4:E1:D1:63:C6:7C:8A:C1:E8:DE:A0:3A:30:8D:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CC53A533C7BA92F00D5A8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c834b3e-e46c-3687-a3e5-ce0abb44cc48.roa Signing time: Mon 22 Sep 2025 11:57:01 +0000 ROA not before: Mon 22 Sep 2025 11:57:01 +0000 ROA not after: Sun 21 Dec 2025 12:57:01 +0000 asID: 19905 IP address blocks: 173.24.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:c5:3a:53:3c:7b:a9:2f:00:d5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:57:01 2025 GMT Not After : Dec 21 12:57:01 2025 GMT Subject: CN=63281e2c-35d8-498f-8e28-c1677f9effe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:b6:67:b2:26:78:fa:0a:34:35:5c:92:cb: 75:00:7e:22:20:1d:4f:a1:b4:7e:6c:b4:12:35:ad: e0:be:be:83:51:e5:8e:69:97:b7:17:de:e2:71:c3: f6:f8:ef:48:07:4a:fb:ea:95:99:c3:44:13:f9:30: f3:14:c5:f9:31:39:04:b0:c7:7e:ec:fa:c0:fa:5c: 24:97:f6:0a:da:0b:bc:68:b2:e6:27:b7:6d:2b:c9: 1e:02:5f:1a:f3:d2:2a:99:71:78:b3:c4:a7:81:0b: 4c:d2:c4:56:bb:08:94:f2:93:6c:91:04:88:95:c8: 4f:7c:97:74:ba:10:d6:e4:d4:aa:64:08:31:d2:9e: 01:64:5d:f9:be:27:d5:27:b5:76:43:cf:31:95:7d: 26:57:b5:19:61:d2:e8:e9:0b:36:52:50:46:f1:50: 40:9c:20:33:c5:3e:a3:00:71:ed:22:d0:3c:7a:14: ca:f7:bd:29:e0:24:62:f4:11:e3:9c:24:21:fb:d9: da:29:b5:05:38:5c:d5:be:31:06:15:48:dc:b1:11: 09:e1:25:a4:72:1f:bd:8d:ba:fb:f6:6b:fa:ff:c7: 34:9b:ec:70:39:68:4a:f7:08:7c:4c:ac:22:a5:1a: 1b:13:2f:2e:6c:0c:02:a9:80:69:1d:91:a7:fc:be: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C1:30:2D:18:C4:E1:D1:63:C6:7C:8A:C1:E8:DE:A0:3A:30:8D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c834b3e-e46c-3687-a3e5-ce0abb44cc48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:29:4e:c2:cd:5b:13:61:38:cf:7f:8c:14:17:77:14:62:f0: ea:9a:c1:7c:39:1d:19:52:0d:b2:a7:41:39:6d:bf:ae:d2:bc: e7:34:f7:58:53:99:8d:1b:9f:6f:0e:29:17:29:0f:ea:39:88: c1:ed:d2:35:60:33:34:9f:30:cc:38:30:7e:67:48:5a:e6:af: b0:17:ca:ee:f2:3d:08:73:9d:ed:98:b3:86:37:44:5a:18:f8: 5c:89:84:f9:5a:9e:9d:a3:3f:12:d2:a0:48:55:b8:04:65:20: 8c:3f:ae:d5:8c:93:46:6d:67:1a:54:26:c7:7a:66:4f:2e:23: c9:c2:76:1d:a2:90:9e:2b:cf:e0:82:e4:03:46:46:c4:93:92: 0c:0f:22:d4:77:f2:d8:73:b2:d4:b0:68:82:b7:ea:c3:af:f6: e9:b3:16:44:ce:57:71:82:0b:bd:d8:40:d2:85:9b:71:a2:61: cf:12:d9:87:a8:66:6d:40:94:0f:b3:73:fa:6f:fa:60:18:ed: f3:10:4b:1b:08:f3:d3:a1:26:a3:74:f7:f4:62:93:b6:72:c8: 27:24:1f:4e:96:3a:ed:d4:af:fe:ae:7e:94:c2:68:bc:7d:eb: 7d:53:3f:42:93:11:99:f5:8f:e8:93:fa:68:cb:53:9b:a2:a8: 66:27:63:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXMU6Uzx7qS8A1agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTcwMVoXDTI1MTIyMTEyNTcwMVowLzEtMCsGA1UEAxMk NjMyODFlMmMtMzVkOC00OThmLThlMjgtYzE2NzdmOWVmZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV22Z7ImePoKNDVckst1AH4iIB1PobR+bLQS Na3gvr6DUeWOaZe3F97iccP2+O9IB0r76pWZw0QT+TDzFMX5MTkEsMd+7PrA+lwk l/YK2gu8aLLmJ7dtK8keAl8a89IqmXF4s8SngQtM0sRWuwiU8pNskQSIlchPfJd0 uhDW5NSqZAgx0p4BZF35vifVJ7V2Q88xlX0mV7UZYdLo6Qs2UlBG8VBAnCAzxT6j AHHtItA8ehTK970p4CRi9BHjnCQh+9naKbUFOFzVvjEGFUjcsREJ4SWkch+9jbr7 9mv6/8c0m+xwOWhK9wh8TKwipRobEy8ubAwCqYBpHZGn/L7PaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvBMC0YxOHRY8Z8isHo3qA6MI2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2M4MzRiM2UtZTQ2Yy0z Njg3LWEzZTUtY2UwYWJiNDRjYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYpTsLNWxNhOM9/jBQXdxRi8OqawXw5HRlSDbKnQTltv67SvOc091hT mY0bn28OKRcpD+o5iMHt0jVgMzSfMMw4MH5nSFrmr7AXyu7yPQhzne2Ys4Y3RFoY +FyJhPlanp2jPxLSoEhVuARlIIw/rtWMk0ZtZxpUJsd6Zk8uI8nCdh2ikJ4rz+CC 5ANGRsSTkgwPItR38thzstSwaIK36sOv9umzFkTOV3GCC73YQNKFm3GiYc8S2Yeo Zm1AlA+zc/pv+mAY7fMQSxsI89OhJqN09/Rik7ZyyCckH06WOu3Ur/6ufpTCaLx9 631TP0KTEZn1j+iT+mjLU5uiqGYnY08= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:30 2025 by rpki-client