$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c97686c-09a8-3543-90ff-e41ee57d4d4d.roa File: 3c97686c-09a8-3543-90ff-e41ee57d4d4d.roa (raw, json) Hash identifier: M17LB++zbAgvWE86ogVgD2Ths8f50PTPHmazHIShA0M= Subject key identifier: 77:A8:16:40:F1:56:42:9C:D3:6A:0B:BD:54:53:B2:96:88:F5:D1:E9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D71A23A9D780AE7C1C2140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c97686c-09a8-3543-90ff-e41ee57d4d4d.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.24.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:1a:23:a9:d7:80:ae:7c:1c:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=fc6c4130-2826-4e6d-b918-0686dffdabe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:25:b2:07:9c:73:a2:32:97:c2:b5:58:a9: 22:ef:5f:4d:8f:74:2d:34:a9:50:f1:5d:20:90:2e: 0c:8f:8c:5a:84:be:3f:61:fa:b6:e9:b9:cc:32:f5: cf:a9:74:3f:b4:7f:6f:2c:5e:ba:ec:b3:93:be:bc: b2:48:8a:ad:c0:9a:13:46:03:82:60:6a:c8:da:90: bc:ce:26:d6:20:2b:e9:c2:4f:4a:83:13:fb:19:4d: 34:59:86:d4:db:48:7f:35:ae:f0:94:9a:31:ce:17: ed:79:fc:c6:b6:fa:4f:3c:13:26:65:83:43:a8:43: 71:6f:6d:1c:d5:f5:fa:34:ac:8f:91:69:2e:b4:9f: c7:f0:4e:3f:cf:c5:d0:5f:03:5d:49:47:42:f2:b4: 00:06:7b:ec:b6:17:e4:1d:57:fe:28:2f:7a:b7:5e: f7:d4:21:5f:2b:2d:07:7b:2b:16:e7:8d:66:f3:69: 4b:56:1b:87:4c:ac:7b:b0:d5:65:52:d0:e7:5d:65: ce:c0:5a:10:41:c8:eb:f5:d0:ad:7e:35:d4:42:35: 3c:1a:fd:c1:62:e2:0a:3b:eb:80:a3:94:4a:17:88: a8:70:23:43:86:b7:53:22:9e:66:4b:80:43:ea:64: 67:e9:87:ea:9a:b2:97:61:ba:17:d1:70:7a:97:24: 23:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A8:16:40:F1:56:42:9C:D3:6A:0B:BD:54:53:B2:96:88:F5:D1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c97686c-09a8-3543-90ff-e41ee57d4d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:51:94:8f:a0:c3:88:b0:ab:e4:c3:bb:fb:35:11:51:d6:83: ef:a7:b7:ff:82:d1:6c:11:d2:1f:b1:df:35:94:ee:4e:e8:62: 29:92:ed:9b:b0:26:31:51:ca:03:6e:26:18:08:7c:59:aa:0f: 3c:2d:fe:5b:9c:8f:59:bf:ea:8e:b7:00:8e:0e:94:4c:f9:ae: 09:3b:d9:ff:ce:e3:cd:d0:2e:e0:a2:4a:88:97:67:59:af:95: fe:d2:79:87:5b:3f:3e:b1:d8:be:11:4a:70:dc:2b:34:42:bd: d2:21:8b:46:ca:f0:ea:c5:8d:1b:86:cb:d4:01:cd:2d:ec:52: ec:a5:0b:01:9d:f6:6d:e6:95:ef:a4:f7:ae:1d:e5:cc:b4:8d: 1c:98:e0:8b:fe:f6:b5:71:0f:8b:e9:75:9a:5b:30:11:be:e9: 62:31:cc:3f:c0:15:6d:e7:a6:5d:b6:09:48:65:30:13:45:11: 77:6a:59:83:93:07:6c:42:39:75:45:5d:c6:81:86:64:3e:20: 6e:fa:69:ef:8e:9b:56:0c:ea:9a:36:a7:2a:4e:68:99:04:30: cd:1f:a8:4b:55:5e:c5:90:f3:4c:54:b1:ef:26:4f:66:8f:1d: ae:b2:9a:de:1b:e4:51:22:ce:9c:27:32:7b:e0:9c:30:cc:a7: 85:de:95:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1xojqdeArnwcIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZmM2YzQxMzAtMjgyNi00ZTZkLWI5MTgtMDY4NmRmZmRhYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiolsgecc6Iyl8K1WKki719Nj3QtNKlQ8V0g kC4Mj4xahL4/Yfq26bnMMvXPqXQ/tH9vLF667LOTvryySIqtwJoTRgOCYGrI2pC8 zibWICvpwk9KgxP7GU00WYbU20h/Na7wlJoxzhftefzGtvpPPBMmZYNDqENxb20c 1fX6NKyPkWkutJ/H8E4/z8XQXwNdSUdC8rQABnvsthfkHVf+KC96t1731CFfKy0H eysW541m82lLVhuHTKx7sNVlUtDnXWXOwFoQQcjr9dCtfjXUQjU8Gv3BYuIKO+uA o5RKF4iocCNDhrdTIp5mS4BD6mRn6YfqmrKXYboX0XB6lyQjkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeoFkDxVkKc02oLvVRTspaI9dHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2M5NzY4NmMtMDlhOC0z NTQzLTkwZmYtZTQxZWU1N2Q0ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENRlI+gw4iwq+TDu/s1EVHWg++nt/+C0WwR0h+x3zWU7k7oYimS7Zuw JjFRygNuJhgIfFmqDzwt/lucj1m/6o63AI4OlEz5rgk72f/O483QLuCiSoiXZ1mv lf7SeYdbPz6x2L4RSnDcKzRCvdIhi0bK8OrFjRuGy9QBzS3sUuylCwGd9m3mle+k 964d5cy0jRyY4Iv+9rVxD4vpdZpbMBG+6WIxzD/AFW3npl22CUhlMBNFEXdqWYOT B2xCOXVFXcaBhmQ+IG76ae+Om1YM6po2pypOaJkEMM0fqEtVXsWQ80xUse8mT2aP Ha6ymt4b5FEizpwnMnvgnDDMp4Xelf8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:37 2025 by rpki-client