$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cff48c16-5a55-3f3d-b053-d15fe3ad335d.roa File: cff48c16-5a55-3f3d-b053-d15fe3ad335d.roa (raw, json) Hash identifier: tM0LBGqxxKwf1QMWEu5/wE53zczbfvi+W1NpEsrgMkA= Subject key identifier: CB:A8:03:74:2A:C6:1F:EA:99:E7:6F:AF:2A:64:62:C0:18:19:10:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B3C51A63A1F979610D18B1700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cff48c16-5a55-3f3d-b053-d15fe3ad335d.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 173.24.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:a6:3a:1f:97:96:10:d1:8b:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=278f5400-b31c-45c9-9209-6f15eaf6b0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:b0:a1:05:7a:50:d0:b2:e1:16:20:14:d7: c7:d6:50:ae:67:69:6c:68:47:12:96:0f:46:56:3f: c9:fb:7f:2d:ec:84:88:c0:22:4d:09:89:c4:74:74: 56:c3:66:d7:e1:d3:ec:4f:65:2f:06:12:76:a1:c5: e1:42:36:ed:38:86:88:94:ff:d9:4c:4e:5f:63:50: 28:08:8c:f3:7b:7f:cd:0f:3d:7b:f8:88:ed:77:a4: 4d:ad:04:a2:49:ca:e5:a8:a0:0c:ea:fe:4b:54:fe: 72:ce:b3:60:72:cb:93:96:c9:2c:8a:a2:0c:e6:18: d3:d2:92:1b:68:23:17:eb:f8:c3:35:0e:42:61:23: 5c:b7:e6:b1:a4:f4:23:fe:b5:ec:06:3e:25:62:89: 8b:48:21:5b:c4:5c:50:40:7e:d5:08:c1:6b:1e:c4: 81:b8:8e:5b:74:a3:d5:43:b8:ee:06:c7:2c:f2:bc: 96:4a:4a:d3:4d:11:a5:52:b5:5f:47:63:f3:94:87: ed:3f:c1:de:7f:97:6b:6f:63:48:1a:1a:82:43:2c: f5:95:6e:88:ee:54:92:0f:2e:b9:72:f3:d5:9c:c1: c1:9b:ef:66:5e:a0:12:1a:ce:45:6b:33:03:73:27: 25:49:1c:9c:3b:29:14:7d:e7:ea:07:6a:fa:82:75: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A8:03:74:2A:C6:1F:EA:99:E7:6F:AF:2A:64:62:C0:18:19:10:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cff48c16-5a55-3f3d-b053-d15fe3ad335d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:34:0d:57:e3:6b:ce:7c:bf:22:55:72:5d:6f:20:1a:76:c7: 29:c9:cb:33:4f:66:bf:5f:b0:ad:dd:84:be:4d:98:b1:5b:0a: e3:8c:af:15:7e:83:b7:ee:41:16:d8:37:20:e1:81:ee:5d:95: 2f:3a:2b:22:a3:d0:70:89:f0:ee:72:d6:12:be:2b:d4:1c:8e: 98:e3:3a:6c:23:dd:00:67:0f:08:2e:d1:46:6d:08:1e:98:39: d1:b5:cb:53:1a:dd:c9:cf:2d:85:3d:9e:18:37:c9:0c:37:5d: 5a:c5:8f:03:3c:37:94:6d:84:4a:f8:10:90:cd:1a:f5:1f:72: 30:31:e2:d6:de:45:47:89:8c:b0:65:e4:22:51:eb:bd:1c:74: 2b:98:56:0d:02:ec:56:98:5f:93:55:e9:69:1f:89:ec:cd:f2: b8:76:56:b4:89:17:5e:da:2c:54:9f:67:0a:6c:eb:42:05:82: 62:eb:b8:69:e5:37:73:b2:93:2a:5d:be:ee:5f:af:dd:39:04: 06:82:a8:4e:60:ba:bb:30:39:d6:9d:0d:25:40:5c:24:73:74: ce:65:91:cd:7f:b0:38:cb:f3:27:02:96:0a:49:63:41:6d:d8: ff:20:97:5b:1c:cc:8b:f0:7d:4a:20:ff:ad:ea:e0:16:9e:f4: d9:28:aa:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UaY6H5eWENGLFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk Mjc4ZjU0MDAtYjMxYy00NWM5LTkyMDktNmYxNWVhZjZiMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXuwoQV6UNCy4RYgFNfH1lCuZ2lsaEcSlg9G Vj/J+38t7ISIwCJNCYnEdHRWw2bX4dPsT2UvBhJ2ocXhQjbtOIaIlP/ZTE5fY1Ao CIzze3/NDz17+Ijtd6RNrQSiScrlqKAM6v5LVP5yzrNgcsuTlsksiqIM5hjT0pIb aCMX6/jDNQ5CYSNct+axpPQj/rXsBj4lYomLSCFbxFxQQH7VCMFrHsSBuI5bdKPV Q7juBscs8ryWSkrTTRGlUrVfR2PzlIftP8Hef5drb2NIGhqCQyz1lW6I7lSSDy65 cvPVnMHBm+9mXqASGs5FazMDcyclSRycOykUfefqB2r6gnXMfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuoA3Qqxh/qmedvrypkYsAYGRBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZmNDhjMTYtNWE1NS0z ZjNkLWIwNTMtZDE1ZmUzYWQzMzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG80DVfja858vyJVcl1vIBp2xynJyzNPZr9fsK3dhL5NmLFbCuOMrxV+ g7fuQRbYNyDhge5dlS86KyKj0HCJ8O5y1hK+K9QcjpjjOmwj3QBnDwgu0UZtCB6Y OdG1y1Ma3cnPLYU9nhg3yQw3XVrFjwM8N5RthEr4EJDNGvUfcjAx4tbeRUeJjLBl 5CJR670cdCuYVg0C7FaYX5NV6WkfiezN8rh2VrSJF17aLFSfZwps60IFgmLruGnl N3Oykypdvu5fr905BAaCqE5gurswOdadDSVAXCRzdM5lkc1/sDjL8ycClgpJY0Ft 2P8gl1sczIvwfUog/63q4Bae9NkoqtQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:01 2025 by rpki-client