$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0b3f8ab-1cd2-3672-926f-40c10a3d9207.roa File: d0b3f8ab-1cd2-3672-926f-40c10a3d9207.roa (raw, json) Hash identifier: maNRD0Jb4SBzd2Q9FK25HltISkVyJQ10v6i8UdqB4lM= Subject key identifier: A5:6E:39:A8:CE:67:80:E2:7F:17:48:84:D0:89:4F:7C:3D:D5:5C:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6202066CCB61B3D87B955AC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0b3f8ab-1cd2-3672-926f-40c10a3d9207.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.24.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:06:6c:cb:61:b3:d8:7b:95:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=a4c73e91-92a9-46a0-b489-610a6325d888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:8e:e9:bd:23:cc:2e:6f:04:72:5b:e1:31: 21:be:c9:ae:07:8f:0e:4e:9e:84:15:6b:4e:00:f2: a7:7d:0a:8c:53:b6:84:5b:90:60:c2:d6:71:68:26: 18:5a:95:7c:8d:06:3b:9f:24:b0:82:1d:33:cf:d2: 67:1b:ed:7a:00:a1:7f:0e:10:86:33:74:fd:da:13: ca:c5:28:9e:99:91:cc:c2:9e:75:0f:0a:7a:3e:dc: e7:85:1f:fb:a0:7d:d9:35:ef:08:16:5c:37:b0:f8: ad:a3:45:a3:9d:ce:0e:07:77:c9:95:c6:a5:4a:62: d3:f0:d7:30:f7:2c:b6:1a:c6:f4:14:e7:3e:9b:3a: a6:f5:16:46:51:b0:45:51:33:b5:c9:19:98:fc:36: 0f:4e:f8:ee:9f:a0:c4:e2:91:7f:a7:e8:c1:7f:e1: 65:21:d6:0d:e0:82:d3:4b:5f:e6:7e:19:a5:e3:9b: 8b:10:3d:4a:ac:85:b1:8e:af:a6:04:ef:66:b7:e2: 3c:7b:f3:cd:3f:d7:93:0d:ed:2f:9c:62:93:eb:33: 1e:c3:11:2b:51:9f:53:cb:48:af:f0:01:0d:48:b7: 3a:5a:19:5d:f3:9c:b6:d2:52:2b:cc:87:20:0a:57: 69:16:53:63:98:ab:ff:d2:fd:8b:fd:aa:c5:ea:29: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6E:39:A8:CE:67:80:E2:7F:17:48:84:D0:89:4F:7C:3D:D5:5C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0b3f8ab-1cd2-3672-926f-40c10a3d9207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cc:b3:62:d3:1e:99:19:d6:47:1a:ab:f6:93:49:e7:1b:cf: 29:31:8f:89:a6:fc:df:39:f3:a1:17:d3:eb:20:8f:21:de:1e: f0:dc:61:e6:c1:e6:3f:27:d2:fa:b7:da:c0:54:f5:a5:0e:50: 11:d7:42:28:53:1b:9c:4d:bf:e6:73:dc:22:90:ec:74:fe:f1: 3f:3a:3b:57:01:fc:b1:c7:21:43:05:0c:c6:95:db:8b:cd:d3: b9:6f:cd:c3:96:67:a7:3e:fa:3d:95:3c:cb:ad:8e:88:b1:8f: ff:dc:5a:2d:1a:00:05:2e:61:3c:7b:1b:ba:89:b0:96:09:99: a5:31:00:51:d5:d4:ed:d8:28:ec:b7:79:09:2b:6e:0b:9c:38: bd:e7:9d:af:3d:bb:d3:e7:2f:ab:99:d7:48:27:8a:9f:f0:e2: 8b:5e:a9:4b:c9:b3:ac:2f:db:61:a4:22:e4:59:71:c8:6c:0d: 26:56:da:21:5f:73:96:8d:7b:83:ec:8b:5d:ae:46:9e:ae:74: 9f:d1:8d:23:17:57:e8:d5:1d:04:f3:ee:2b:26:ab:a0:db:0c: 8c:10:01:1f:3f:7a:27:0b:15:db:0f:a2:3b:46:ec:2b:a3:5b: d1:f6:0a:54:7b:9e:60:c9:d7:ac:f2:2e:33:de:ba:03:e5:c7: 1b:a6:af:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgZsy2Gz2HuVWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTRjNzNlOTEtOTJhOS00NmEwLWI0ODktNjEwYTYzMjVkODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL2O6b0jzC5vBHJb4TEhvsmuB48OTp6EFWtO APKnfQqMU7aEW5BgwtZxaCYYWpV8jQY7nySwgh0zz9JnG+16AKF/DhCGM3T92hPK xSiemZHMwp51Dwp6PtznhR/7oH3ZNe8IFlw3sPito0Wjnc4OB3fJlcalSmLT8Ncw 9yy2Gsb0FOc+mzqm9RZGUbBFUTO1yRmY/DYPTvjun6DE4pF/p+jBf+FlIdYN4ILT S1/mfhml45uLED1KrIWxjq+mBO9mt+I8e/PNP9eTDe0vnGKT6zMewxErUZ9Ty0iv 8AENSLc6Whld85y20lIrzIcgCldpFlNjmKv/0v2L/arF6ik75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVuOajOZ4DifxdIhNCJT3w91VwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBiM2Y4YWItMWNkMi0z NjcyLTkyNmYtNDBjMTBhM2Q5MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfMs2LTHpkZ1kcaq/aTSecbzykxj4mm/N8586EX0+sgjyHeHvDcYebB 5j8n0vq32sBU9aUOUBHXQihTG5xNv+Zz3CKQ7HT+8T86O1cB/LHHIUMFDMaV24vN 07lvzcOWZ6c++j2VPMutjoixj//cWi0aAAUuYTx7G7qJsJYJmaUxAFHV1O3YKOy3 eQkrbgucOL3nna89u9PnL6uZ10gnip/w4oteqUvJs6wv22GkIuRZcchsDSZW2iFf c5aNe4Psi12uRp6udJ/RjSMXV+jVHQTz7ismq6DbDIwQAR8/eicLFdsPojtG7Cuj W9H2ClR7nmDJ16zyLjPeugPlxxumr5E= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:29 2025 by rpki-client