$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f31c20-9026-31b0-bc7a-18496a3d9331.roa File: c5f31c20-9026-31b0-bc7a-18496a3d9331.roa (raw, json) Hash identifier: j0Uo5SQ8K37G/g6HeDvWjah6SYOm6HUuR6vo4QrX/SM= Subject key identifier: BF:92:05:27:32:77:79:BA:51:DE:C4:87:93:DB:A7:D4:2D:00:A0:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73C982E22F92FECC9FD40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f31c20-9026-31b0-bc7a-18496a3d9331.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.24.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3c:98:2e:22:f9:2f:ec:c9:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=0b219fab-f9c1-40c6-a1a8-b7fff477294c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:7e:95:5b:dc:c1:23:e2:66:06:e9:3e:8b: 60:b5:cc:8f:a8:a6:26:38:4d:4a:d7:46:bd:a6:3d: 91:01:06:23:72:65:bc:6f:91:2a:b8:e4:65:cf:67: dc:63:1f:48:62:5c:ff:51:6c:5a:47:b1:16:80:2c: d6:ba:35:92:4d:88:80:80:b1:3f:36:65:08:8c:87: 75:33:10:7b:32:88:7c:6c:51:03:53:b7:41:37:fc: f2:6b:0f:07:e7:54:01:a8:38:15:8d:b6:7c:7b:85: a9:20:d9:68:d7:9a:46:47:e7:81:92:f5:7e:e6:3c: fd:43:6e:ed:ac:5d:3f:46:53:88:6e:ea:ed:cd:16: 3e:d4:db:8d:43:70:4e:b9:4d:70:f5:6c:42:1a:30: 6a:d8:1c:ed:fb:53:db:e6:43:48:f3:95:5f:d5:fb: 3a:7a:2c:2a:09:7d:d0:40:da:7c:f7:06:89:fa:dc: 0b:63:54:0b:3c:1c:37:00:58:1a:6e:90:11:57:0e: ba:34:af:83:f4:08:a0:49:c3:20:58:5d:ef:25:26: d6:4d:98:42:93:aa:ae:6f:e5:6e:28:3e:e7:17:ad: fd:a9:c7:e9:8a:21:9f:fa:e4:0f:8f:85:4b:a5:a5: 6b:3b:b6:0b:23:90:33:9b:1d:df:2a:bd:3f:36:e9: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:92:05:27:32:77:79:BA:51:DE:C4:87:93:DB:A7:D4:2D:00:A0:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f31c20-9026-31b0-bc7a-18496a3d9331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4b:a3:4d:39:92:a7:01:0d:2c:5d:b1:f0:fe:d7:7d:69:ee: 03:7d:7d:d9:50:b5:b6:aa:0f:cd:cb:70:a7:be:e0:f9:77:8e: e3:90:82:40:b5:8f:10:5c:45:4d:3b:a0:0b:1e:23:62:12:6c: ec:7e:e5:f6:3f:f0:96:2f:16:8a:21:fd:8e:04:48:aa:31:c1: 0f:a7:ef:86:f6:3c:7a:1a:9b:32:9a:6d:0a:cf:c9:3b:9b:75: f6:df:45:29:5c:f0:01:12:1a:5a:3d:b1:d0:a1:e5:d5:f3:2f: c2:97:66:d0:b0:9f:c0:4d:55:3a:ef:8d:6b:ce:25:bd:fb:a5: 30:70:9a:70:dc:e2:f6:76:52:9a:b0:0b:b5:bc:e4:84:1d:76: 4b:d1:bf:b7:41:b6:10:8a:17:4f:d5:7f:ec:ae:a9:22:09:90: 73:01:7f:51:4a:e3:cf:1e:de:19:2b:ed:01:6e:5d:83:ab:1e: c3:95:ce:8a:12:d5:95:ae:4a:ae:c9:b1:05:41:f4:84:ce:7a: e9:db:44:1c:af:ee:58:5f:ee:68:07:22:90:1d:50:a4:8b:bb: 7a:37:8a:a8:f4:79:bf:d5:c1:70:33:3f:55:de:b0:61:45:4e: c4:01:08:44:d5:92:9a:ec:ad:03:04:00:90:cb:a3:e2:83:48: 6d:6f:10:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zyYLiL5L+zJ/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MGIyMTlmYWItZjljMS00MGM2LWExYTgtYjdmZmY0NzcyOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcd+lVvcwSPiZgbpPotgtcyPqKYmOE1K10a9 pj2RAQYjcmW8b5EquORlz2fcYx9IYlz/UWxaR7EWgCzWujWSTYiAgLE/NmUIjId1 MxB7Moh8bFEDU7dBN/zyaw8H51QBqDgVjbZ8e4WpINlo15pGR+eBkvV+5jz9Q27t rF0/RlOIburtzRY+1NuNQ3BOuU1w9WxCGjBq2Bzt+1Pb5kNI85Vf1fs6eiwqCX3Q QNp89waJ+twLY1QLPBw3AFgabpARVw66NK+D9AigScMgWF3vJSbWTZhCk6qub+Vu KD7nF639qcfpiiGf+uQPj4VLpaVrO7YLI5Azmx3fKr0/NukPkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+SBScyd3m6Ud7Eh5Pbp9QtAKDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzVmMzFjMjAtOTAyNi0z MWIwLWJjN2EtMTg0OTZhM2Q5MzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFLo005kqcBDSxdsfD+131p7gN9fdlQtbaqD83LcKe+4Pl3juOQgkC1 jxBcRU07oAseI2ISbOx+5fY/8JYvFooh/Y4ESKoxwQ+n74b2PHoamzKabQrPyTub dfbfRSlc8AESGlo9sdCh5dXzL8KXZtCwn8BNVTrvjWvOJb37pTBwmnDc4vZ2Upqw C7W85IQddkvRv7dBthCKF0/Vf+yuqSIJkHMBf1FK488e3hkr7QFuXYOrHsOVzooS 1ZWuSq7JsQVB9ITOeunbRByv7lhf7mgHIpAdUKSLu3o3iqj0eb/VwXAzP1XesGFF TsQBCETVkprsrQMEAJDLo+KDSG1vEGo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:09 2025 by rpki-client