$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa File: a63c59ce-5a49-3f3e-8855-0d302277390e.roa (raw, json) Hash identifier: vm6U1WF2hAVcJHvE+F5fvwGXLDfsb0UkPyljWm6tTLY= Subject key identifier: 35:FE:CB:E2:86:B8:05:16:F1:94:6A:50:3C:0F:2D:29:52:4A:DA:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6202089CC9ABE199577AEEC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.24.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:08:9c:c9:ab:e1:99:57:7a:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=2ed9a15b-cfaf-4f1c-9954-b89bc0d6ea47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:a2:f8:ee:c8:17:3d:ec:c8:a9:fc:6c:30: 02:cb:7e:53:64:47:98:57:1d:45:36:64:c6:6e:29: aa:83:7e:ed:73:56:89:aa:1e:62:a6:b1:9b:e1:83: c7:db:c8:1d:bc:50:c0:ae:74:9f:04:ab:36:4e:b7: e7:ad:1e:65:14:b6:95:f8:95:b8:aa:cb:19:c7:4a: 45:10:c7:b8:cd:77:c2:1d:93:9a:b5:e4:74:fc:6f: fc:2a:2a:23:50:de:14:71:1e:b8:ec:6d:0e:7d:1e: 8e:90:45:69:6c:7a:56:51:a0:9b:2e:1b:aa:f5:51: 16:f5:28:82:ce:1f:f6:35:c9:96:89:4c:d3:a7:bf: be:b0:9c:54:be:c3:a6:80:23:c3:b8:5f:c0:f8:aa: 27:f9:d5:49:9e:28:e1:d5:bb:32:42:28:92:c0:64: 2f:bc:97:5e:f2:27:70:a9:5f:c1:da:97:a9:c3:30: 35:5a:73:68:92:c8:ad:9c:5a:2f:63:ec:05:27:fe: 1b:39:5d:64:03:61:ed:c6:46:23:87:17:e1:63:b5: c3:b6:c2:74:09:bf:96:c7:01:25:e8:b7:22:31:25: 69:20:5e:e4:2c:06:51:ad:4c:53:93:34:d3:31:91: 44:23:38:ef:80:73:4d:e9:1b:c7:2f:47:b9:de:1d: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FE:CB:E2:86:B8:05:16:F1:94:6A:50:3C:0F:2D:29:52:4A:DA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d8:8b:43:3b:7f:0c:87:56:3b:86:32:0d:37:d0:2b:1f:7d: 4c:73:30:55:a0:8f:03:33:fc:33:ab:49:c0:51:ac:c4:c2:a5: 4e:70:ed:63:7e:ca:99:11:72:62:02:9d:b3:ac:bc:33:91:64: 41:4d:2b:e1:46:98:cd:eb:5b:4a:5b:31:3e:ff:2f:9e:9f:0c: 4e:19:51:5d:16:2d:d1:64:85:6a:fa:ca:b9:f4:cb:6a:c3:47: b5:5b:e0:29:a7:78:01:f1:e9:e2:d6:13:15:af:38:d1:0b:c9: 02:a4:a0:09:51:5c:b2:f3:04:9d:cd:b6:6d:4e:5f:b8:bb:d7: 91:ae:d2:c5:3f:e0:71:32:12:d8:a4:d3:6e:75:1e:2c:51:d2: 0e:50:fa:86:75:4a:15:b7:88:9e:12:21:5f:34:b3:73:6c:a5: dc:37:ba:4e:24:c7:f5:d6:1f:0a:cc:82:5d:0c:41:c6:97:22: ed:0f:e4:1e:92:9f:92:a0:ef:f9:28:dc:fa:56:53:03:b3:34: b8:55:15:33:19:8b:68:59:6f:aa:a3:97:4a:24:72:ff:61:2a: 2c:05:64:e4:87:2b:ae:a3:96:ba:39:4d:12:a6:62:8a:8d:6b: f3:8e:78:ab:ae:b4:63:af:44:38:84:4d:e8:55:a1:00:6a:9a: fc:cf:21:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgicyavhmVd67sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmVkOWExNWItY2ZhZi00ZjFjLTk5NTQtYjg5YmMwZDZlYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOei+O7IFz3syKn8bDACy35TZEeYVx1FNmTG bimqg37tc1aJqh5iprGb4YPH28gdvFDArnSfBKs2TrfnrR5lFLaV+JW4qssZx0pF EMe4zXfCHZOateR0/G/8KiojUN4UcR647G0OfR6OkEVpbHpWUaCbLhuq9VEW9SiC zh/2NcmWiUzTp7++sJxUvsOmgCPDuF/A+Kon+dVJnijh1bsyQiiSwGQvvJde8idw qV/B2pepwzA1WnNoksitnFovY+wFJ/4bOV1kA2HtxkYjhxfhY7XDtsJ0Cb+WxwEl 6LciMSVpIF7kLAZRrUxTkzTTMZFEIzjvgHNN6RvHL0e53h3VrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX+y+KGuAUW8ZRqUDwPLSlSStoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYzYzU5Y2UtNWE0OS0z ZjNlLTg4NTUtMGQzMDIyNzczOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrYi0M7fwyHVjuGMg030CsffUxzMFWgjwMz/DOrScBRrMTCpU5w7WN+ ypkRcmICnbOsvDORZEFNK+FGmM3rW0pbMT7/L56fDE4ZUV0WLdFkhWr6yrn0y2rD R7Vb4CmneAHx6eLWExWvONELyQKkoAlRXLLzBJ3Ntm1OX7i715Gu0sU/4HEyEtik 0251HixR0g5Q+oZ1ShW3iJ4SIV80s3Nspdw3uk4kx/XWHwrMgl0MQcaXIu0P5B6S n5Kg7/ko3PpWUwOzNLhVFTMZi2hZb6qjl0okcv9hKiwFZOSHK66jlro5TRKmYoqN a/OOeKuutGOvRDiETehVoQBqmvzPIdM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:56 2025 by rpki-client