$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa File: a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa (raw, json) Hash identifier: Qa1UdgBFNOvAbUGvI/MoikyOW+3WGQFONrCTRmwPnWo= Subject key identifier: E2:3C:F4:E9:F3:61:8B:6E:8F:DE:F0:92:C0:43:26:47:C9:C6:5E:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE3E60612D65F75EDB2080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.24.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3e:60:61:2d:65:f7:5e:db:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cc7cc1dc-9b24-4911-a2cb-a750c2f0f5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:23:df:f2:d3:ac:45:12:4e:97:e5:0c:c0: df:0c:91:0d:14:40:af:79:ee:1c:14:61:95:a0:58: 8f:b0:28:e2:24:7e:46:8d:ee:fc:81:6a:03:85:35: dd:bd:eb:64:46:7f:21:db:ce:3a:85:d7:5a:8a:48: 6e:39:d7:64:53:65:ad:af:b0:74:23:87:47:22:63: 3c:54:28:ac:ed:e8:1e:c2:d2:04:8b:5e:e8:11:55: f7:10:97:35:8d:fe:e2:36:45:bd:98:1c:67:11:bc: 9c:c0:3c:23:93:32:29:00:d9:ab:a1:2d:6f:20:6d: a4:7f:8c:ba:04:45:cf:d3:63:bc:a1:70:bb:21:32: 14:79:0e:49:2e:42:6b:78:bc:7d:18:cb:64:78:ce: ab:a7:2a:08:37:8e:81:5f:d5:59:a0:01:a0:4d:a5: 65:7b:e1:f7:27:6e:6f:c7:0d:7a:dc:65:54:31:71: 1c:fc:fd:7a:e7:80:f9:e0:b6:c8:1d:32:f6:12:af: 31:60:94:e4:dc:d2:0a:d8:a8:f8:c2:33:7c:ac:94: 70:fe:10:b8:63:dd:cd:3d:2c:e6:5d:e1:70:51:35: 40:84:4c:95:c8:0d:12:2e:5d:f9:90:d1:4d:6c:ed: b9:a2:be:89:e4:1d:a4:c5:a1:8d:f6:f9:b1:2b:cf: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3C:F4:E9:F3:61:8B:6E:8F:DE:F0:92:C0:43:26:47:C9:C6:5E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b5:7b:eb:a3:ea:fb:2e:c2:b8:7f:e3:1b:bb:8b:60:db:9d: 51:1b:c4:f8:77:e6:77:58:d4:a8:25:f0:28:f5:27:f3:7f:4f: 59:dc:d1:55:f1:f3:bd:4f:ef:69:f4:59:d6:7c:69:64:6e:7b: 1d:a2:d4:0e:c0:78:1c:e2:3d:a5:1f:cf:7d:bd:61:f6:a4:40: 6a:dc:96:dd:78:47:00:02:3e:01:47:56:0e:22:ee:4f:95:b9: 20:aa:12:0c:29:04:2e:fb:9e:5f:60:a0:2a:9c:30:f6:32:83: 17:7b:02:64:7c:1f:d3:ea:9e:d2:e3:9c:d1:7c:5b:25:07:58: 73:67:cf:cd:69:b8:f9:0a:cb:77:bc:87:6f:82:ae:de:ec:19: 91:65:22:57:37:bc:65:b0:0d:48:23:91:02:e6:65:ac:4b:82: 5c:1f:ee:f0:0c:93:67:1a:d5:a8:84:97:a3:78:38:d6:da:b8: 03:82:a6:89:60:47:3f:60:a0:04:45:2d:0a:d1:5f:e8:25:65: f9:07:e5:cf:86:73:73:d0:51:13:46:44:2d:05:cc:ed:15:67: 3d:1b:3f:a3:e1:46:d8:d1:02:9b:4c:3f:79:0a:45:69:ea:20: 36:7e:f6:c1:ef:63:6a:cb:28:20:eb:24:05:8e:1c:79:40:a5: f4:06:0a:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzj5gYS1l917bIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2M3Y2MxZGMtOWIyNC00OTExLWEyY2ItYTc1MGMyZjBmNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDYj3/LTrEUSTpflDMDfDJENFECvee4cFGGV oFiPsCjiJH5Gje78gWoDhTXdvetkRn8h2846hddaikhuOddkU2Wtr7B0I4dHImM8 VCis7egewtIEi17oEVX3EJc1jf7iNkW9mBxnEbycwDwjkzIpANmroS1vIG2kf4y6 BEXP02O8oXC7ITIUeQ5JLkJreLx9GMtkeM6rpyoIN46BX9VZoAGgTaVle+H3J25v xw163GVUMXEc/P1654D54LbIHTL2Eq8xYJTk3NIK2Kj4wjN8rJRw/hC4Y93NPSzm XeFwUTVAhEyVyA0SLl35kNFNbO25or6J5B2kxaGN9vmxK8+f3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI89OnzYYtuj97wksBDJkfJxl6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhM2VmYTQtNGY0ZC0z Yjk3LTk4MjAtYjBhNWE3YjI0NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS1e+uj6vsuwrh/4xu7i2DbnVEbxPh35ndY1Kgl8Cj1J/N/T1nc0VXx 871P72n0WdZ8aWRuex2i1A7AeBziPaUfz329YfakQGrclt14RwACPgFHVg4i7k+V uSCqEgwpBC77nl9goCqcMPYygxd7AmR8H9PqntLjnNF8WyUHWHNnz81puPkKy3e8 h2+Crt7sGZFlIlc3vGWwDUgjkQLmZaxLglwf7vAMk2ca1aiEl6N4ONbauAOCpolg Rz9goARFLQrRX+glZfkH5c+Gc3PQURNGRC0FzO0VZz0bP6PhRtjRAptMP3kKRWnq IDZ+9sHvY2rLKCDrJAWOHHlApfQGCq8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:43 2025 by rpki-client