$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0f0a12b-7679-3301-8b4a-08a8ee518b1a.roa File: c0f0a12b-7679-3301-8b4a-08a8ee518b1a.roa (raw, json) Hash identifier: wX3dnuRfiUb0X/jHcHf/GQhrphuBZDvXvswEGQ4CBys= Subject key identifier: DB:C3:F6:0F:D2:57:18:9C:1F:47:C7:DE:E8:53:43:E8:07:58:CD:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B004BDEE4F1729A895B2AC6C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0f0a12b-7679-3301-8b4a-08a8ee518b1a.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.24.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:de:e4:f1:72:9a:89:5b:2a:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=bbcae271-b540-4ec8-b207-d20c045a915e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:88:93:32:d3:3b:0e:53:c4:f1:f3:8f:51:03: 43:f1:5d:21:bb:5b:e5:4b:0b:99:9c:98:f6:30:be: cb:22:f2:ae:b0:b6:e4:6e:26:6f:df:67:74:d2:f9: ce:19:fd:60:9e:c7:62:d5:6e:dc:e5:03:9e:a4:5b: ca:55:e1:c8:a5:76:71:42:8f:e5:99:6f:13:46:aa: 7a:c6:b7:77:67:6d:93:a0:7a:88:82:b5:c4:aa:25: d1:9a:d4:6f:21:ac:82:7e:be:6a:61:1d:95:b3:94: bb:5f:8c:d8:31:dc:b4:ca:5e:bc:d9:cc:61:f0:c0: f9:13:c9:6e:7b:a9:e7:3e:b0:e1:0b:30:8b:44:7d: 66:62:89:64:8d:af:f5:48:90:5a:e8:a7:55:20:e4: 31:4b:1b:60:51:51:4f:af:53:4d:cb:82:43:71:0d: e6:22:4f:3e:77:74:d8:ab:39:bb:08:00:73:c5:ae: 69:41:c6:da:31:c6:9d:2c:87:25:de:a5:b7:4f:b6: 90:fd:e0:72:a2:9f:7c:0e:eb:07:f6:65:99:e0:e9: b5:e6:dc:8b:55:09:76:ef:6d:ed:43:aa:f9:2d:08: f5:98:4f:f2:11:52:74:46:a3:99:c6:c4:aa:a7:f6: bf:be:40:70:b5:18:44:e3:0c:06:ae:b1:20:a6:e7: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C3:F6:0F:D2:57:18:9C:1F:47:C7:DE:E8:53:43:E8:07:58:CD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0f0a12b-7679-3301-8b4a-08a8ee518b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e2:30:3e:64:76:d3:6a:84:ff:f5:df:ff:be:fd:d3:79:17: 79:2c:87:fd:55:c8:5a:36:c9:86:99:41:b5:ee:a8:12:32:fd: b1:be:b7:61:7f:aa:7d:f4:5c:f2:a3:ab:ba:87:96:d5:65:cb: 6d:7d:38:8f:46:17:41:9c:9f:c7:3e:4d:74:ab:45:93:83:50: 63:28:6e:0b:dd:21:8f:4c:e4:dd:e0:e7:87:1b:b2:08:78:dc: 09:61:1a:cc:bb:55:95:e8:92:b3:f6:0d:20:4e:d5:34:d5:c9: 00:5f:10:5d:32:d5:13:37:5f:ce:18:eb:40:47:7c:bc:c2:f1: fc:b3:79:92:bc:72:1b:af:58:1a:d0:23:dd:85:8e:2c:5b:98: 88:d9:8d:0c:3c:43:2c:2c:5e:1c:e6:4a:6d:de:e4:5e:bd:a8: 55:41:f9:dc:68:39:96:f2:f3:db:9d:f0:cc:07:84:f6:07:66: df:f3:59:23:17:1f:20:61:b0:72:37:1d:bc:bb:a5:dc:6f:5f: f2:13:41:69:f5:c7:1b:84:d8:d3:fd:ad:47:6c:57:67:95:eb: 96:f5:26:02:45:1f:33:c3:46:fc:c9:39:52:c6:31:d4:c9:41: b1:db:01:79:52:7a:1a:ec:f8:fe:43:d4:eb:50:22:f3:fc:57: 8b:c2:e6:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS97k8XKaiVsqxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YmJjYWUyNzEtYjU0MC00ZWM4LWIyMDctZDIwYzA0NWE5MTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIiTMtM7DlPE8fOPUQND8V0hu1vlSwuZnJj2 ML7LIvKusLbkbiZv32d00vnOGf1gnsdi1W7c5QOepFvKVeHIpXZxQo/lmW8TRqp6 xrd3Z22ToHqIgrXEqiXRmtRvIayCfr5qYR2Vs5S7X4zYMdy0yl682cxh8MD5E8lu e6nnPrDhCzCLRH1mYolkja/1SJBa6KdVIOQxSxtgUVFPr1NNy4JDcQ3mIk8+d3TY qzm7CABzxa5pQcbaMcadLIcl3qW3T7aQ/eByop98DusH9mWZ4Om15tyLVQl2723t Q6r5LQj1mE/yEVJ0RqOZxsSqp/a/vkBwtRhE4wwGrrEgpue8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvD9g/SVxicH0fH3uhTQ+gHWM1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzBmMGExMmItNzY3OS0z MzAxLThiNGEtMDhhOGVlNTE4YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3iMD5kdtNqhP/13/++/dN5F3ksh/1VyFo2yYaZQbXuqBIy/bG+t2F/ qn30XPKjq7qHltVly219OI9GF0Gcn8c+TXSrRZODUGMobgvdIY9M5N3g54cbsgh4 3AlhGsy7VZXokrP2DSBO1TTVyQBfEF0y1RM3X84Y60BHfLzC8fyzeZK8chuvWBrQ I92FjixbmIjZjQw8QywsXhzmSm3e5F69qFVB+dxoOZby89ud8MwHhPYHZt/zWSMX HyBhsHI3Hby7pdxvX/ITQWn1xxuE2NP9rUdsV2eV65b1JgJFHzPDRvzJOVLGMdTJ QbHbAXlSehrs+P5D1OtQIvP8V4vC5t8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:25 2025 by rpki-client