$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa File: 8af8a31e-2de6-3582-8263-f79aff9c711e.roa (raw, json) Hash identifier: lqcwCkPmETRz0RnglSPjPLR8EBavrz6f2EiujxeDBo0= Subject key identifier: A3:E3:55:E6:DD:6B:A4:C6:7A:8A:65:5F:A7:EA:E1:F1:2F:60:3B:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE4B0D5BBB81D865C40030 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.24.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4b:0d:5b:bb:81:d8:65:c4:00:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b6b91b3b-10cd-40ec-8463-f1ae890bba6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:71:b6:05:16:34:b3:04:9b:3e:01:18:63:a0: 37:45:59:33:cd:81:78:59:84:41:72:42:4a:65:06: 43:13:63:66:a3:16:b4:ad:53:fd:37:1e:2d:f1:56: 83:92:58:4a:88:5f:6f:79:7d:12:a0:78:7f:d3:53: 2e:26:26:e2:14:59:cb:ca:f5:63:b5:d4:9c:e8:ff: 2f:40:82:7a:b0:e2:78:4f:a3:23:ba:97:4a:11:3c: 49:0a:1e:a3:fa:02:0f:97:c0:b0:cd:21:0d:69:9c: e9:57:ae:ca:28:ac:fe:17:88:7b:e5:9e:25:5d:b1: b4:10:cf:e4:2f:61:86:ec:71:79:4e:de:4c:9c:77: ec:77:76:05:f9:76:7e:b4:ed:c7:2d:46:07:47:2c: b9:3d:b8:d9:e8:f0:7d:fe:20:43:56:ad:87:a3:36: dc:7a:ed:19:e6:c8:f4:81:85:08:64:82:87:22:e7: d6:10:a3:b3:d8:87:85:ee:4f:a6:69:b1:44:c8:3f: ca:c9:31:bf:de:84:01:ee:ed:78:30:64:47:1c:4d: 0b:f4:7e:e2:8b:0e:2c:9b:ba:1e:34:70:17:c7:df: 9d:9f:a8:da:65:c2:38:84:af:f9:68:2f:d5:6d:c4: c3:4f:09:a0:c8:a4:65:1c:f7:8d:60:14:44:9c:dc: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E3:55:E6:DD:6B:A4:C6:7A:8A:65:5F:A7:EA:E1:F1:2F:60:3B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ba:fd:c4:3d:79:9c:18:a2:ea:50:e0:39:ce:f1:06:58:23: 66:09:c6:f9:4e:a4:ee:34:48:e4:05:f3:04:c1:5f:3c:8b:8b: 01:d6:36:40:ac:ba:38:9f:c5:3e:c2:92:75:79:64:14:ed:05: 46:99:ad:84:b7:0c:5e:fd:8a:4a:67:64:be:f4:76:99:65:64: 98:1d:d6:9b:33:ba:08:67:07:c7:26:d8:18:c9:82:54:38:e7: c4:c5:ae:e0:4d:a7:94:0a:c6:11:57:e6:0e:5c:17:72:e3:13: 13:d1:0c:80:8e:da:a3:4e:46:e3:1e:3f:13:80:b7:16:22:2f: b5:4e:5c:c0:b0:65:9f:5f:1e:d1:45:19:18:8a:84:f8:02:4c: bb:d1:4a:0f:60:5e:45:4b:83:a5:48:00:29:70:87:0b:1e:45: 5d:c1:6b:e0:a9:57:79:a4:7e:2b:a9:70:cd:58:36:e7:dd:17: d4:d5:ab:72:7d:0c:05:3c:b5:0f:d7:7a:e4:d7:09:fc:6e:a1: 88:22:cb:31:89:2c:eb:ba:1b:64:98:fd:8e:ca:19:63:58:23: 00:12:be:bb:9f:ad:18:4b:18:c2:61:57:0a:5c:bf:aa:21:f4: 04:61:e2:9e:96:23:50:a2:34:83:79:78:30:ae:aa:be:80:8a: 32:fb:db:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzksNW7uB2GXEADAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjZiOTFiM2ItMTBjZC00MGVjLTg0NjMtZjFhZTg5MGJiYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXG2BRY0swSbPgEYY6A3RVkzzYF4WYRBckJK ZQZDE2Nmoxa0rVP9Nx4t8VaDklhKiF9veX0SoHh/01MuJibiFFnLyvVjtdSc6P8v QIJ6sOJ4T6MjupdKETxJCh6j+gIPl8CwzSENaZzpV67KKKz+F4h75Z4lXbG0EM/k L2GG7HF5Tt5MnHfsd3YF+XZ+tO3HLUYHRyy5PbjZ6PB9/iBDVq2Hozbceu0Z5sj0 gYUIZIKHIufWEKOz2IeF7k+mabFEyD/KyTG/3oQB7u14MGRHHE0L9H7iiw4sm7oe NHAXx9+dn6jaZcI4hK/5aC/VbcTDTwmgyKRlHPeNYBREnNy24QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPjVebda6TGeoplX6fq4fEvYDt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmOGEzMWUtMmRlNi0z NTgyLTgyNjMtZjc5YWZmOWM3MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG6/cQ9eZwYoupQ4DnO8QZYI2YJxvlOpO40SOQF8wTBXzyLiwHWNkCs ujifxT7CknV5ZBTtBUaZrYS3DF79ikpnZL70dpllZJgd1pszughnB8cm2BjJglQ4 58TFruBNp5QKxhFX5g5cF3LjExPRDICO2qNORuMePxOAtxYiL7VOXMCwZZ9fHtFF GRiKhPgCTLvRSg9gXkVLg6VIAClwhwseRV3Ba+CpV3mkfiupcM1YNufdF9TVq3J9 DAU8tQ/XeuTXCfxuoYgiyzGJLOu6G2SY/Y7KGWNYIwASvrufrRhLGMJhVwpcv6oh 9ARh4p6WI1CiNIN5eDCuqr6AijL72yg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:40 2025 by rpki-client