$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df81c92b-be07-3dd4-bd43-0cbe8cd1f1ba.roa File: df81c92b-be07-3dd4-bd43-0cbe8cd1f1ba.roa (raw, json) Hash identifier: +j2d8igzXa6TFvoln7jBhqBTvDwOY/Y/HMngHAS5FLc= Subject key identifier: 9B:8B:60:7F:28:08:F4:48:0D:1B:18:95:D1:1E:2E:33:32:58:C9:DA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB4DC9C6F7FE76BC4DB30 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df81c92b-be07-3dd4-bd43-0cbe8cd1f1ba.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.24.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b4:dc:9c:6f:7f:e7:6b:c4:db:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4080c262-38e8-465e-b52d-798d643b1487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:28:a1:58:2b:65:96:39:df:0f:78:fc:f1: ef:58:29:d1:b5:a9:0d:a2:4e:56:a9:c6:24:5d:fe: 59:74:47:ee:d1:21:a6:16:22:6f:6f:83:e3:77:09: ee:2e:99:e3:d0:07:2d:8a:4e:5a:07:81:8e:e7:7d: 5f:ee:81:a7:75:53:b0:4f:e2:2c:3d:5f:c3:76:50: 5d:71:0f:91:9b:03:3b:64:97:fe:c2:3d:fc:05:1d: 20:77:6e:e8:9e:7b:d7:c4:69:53:cb:23:3c:17:e0: ee:96:b9:16:58:14:fb:3d:60:ef:f3:7d:b0:9f:75: d2:8d:f4:e4:40:7c:8a:7b:88:c1:23:78:d0:80:be: 42:a1:c5:94:82:87:3f:04:b4:43:43:a4:91:88:dd: 6f:0c:bc:13:2f:80:38:dd:99:de:53:b7:07:ac:75: 7c:51:4a:70:f0:a9:c7:40:fa:ca:a7:a5:70:98:28: 92:19:e4:41:39:24:03:7a:ec:c0:ca:1a:bd:d2:4a: 65:38:39:24:d0:b8:6d:8c:0a:26:93:4f:b8:de:e8: 19:53:91:22:fd:e2:93:f0:55:c6:3c:c8:e5:53:fe: ce:a7:07:ee:98:83:64:3e:8b:11:c6:5e:8e:91:36: 79:d5:3d:72:01:7e:07:90:c9:18:14:30:54:41:68: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:60:7F:28:08:F4:48:0D:1B:18:95:D1:1E:2E:33:32:58:C9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df81c92b-be07-3dd4-bd43-0cbe8cd1f1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b3:d0:08:16:42:8e:e6:96:7c:27:ec:1f:45:55:d6:d8:03: 24:13:6f:5d:66:64:5e:7b:b7:f5:8a:19:70:f3:9d:3b:5c:41: 75:6f:c1:df:ce:78:c7:c5:99:13:15:d4:90:06:f3:8f:40:2b: 08:9b:09:08:7d:9d:92:d5:ae:df:ca:01:76:85:84:ce:72:b3: ba:ba:c3:2e:81:45:b0:04:f6:9a:b6:a1:0a:4e:8c:c7:0c:b4: 8a:1a:dd:b5:07:9f:b2:34:38:7d:68:af:d3:c3:08:2d:62:c9: fc:a4:08:0a:e5:48:94:f2:71:fe:a3:3f:e0:65:d1:12:70:df: 86:50:ac:bc:d0:56:bf:cd:93:c9:5c:77:a8:88:48:ba:d3:83: d0:b9:e8:55:bf:1a:32:a5:8f:f3:2c:bb:68:6a:61:84:60:38: 67:f8:46:8c:b9:48:4f:1a:d4:d8:7a:47:72:4c:5b:65:b9:1e: 8e:45:ac:21:69:41:85:0b:f7:4b:41:45:b2:35:71:a1:29:93: be:24:d5:28:3d:48:b5:8a:74:3c:57:c7:e6:79:0b:69:99:f2: 8e:3b:29:86:ac:52:30:b8:d2:32:37:c5:a5:72:69:32:04:f5: 02:60:dc:1a:a5:89:f6:eb:b1:14:ab:78:e0:3c:42:fb:52:00: 7f:4b:fd:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLTcnG9/52vE2zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDA4MGMyNjItMzhlOC00NjVlLWI1MmQtNzk4ZDY0M2IxNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6kooVgrZZY53w94/PHvWCnRtakNok5WqcYk Xf5ZdEfu0SGmFiJvb4PjdwnuLpnj0Actik5aB4GO531f7oGndVOwT+IsPV/DdlBd cQ+RmwM7ZJf+wj38BR0gd27onnvXxGlTyyM8F+DulrkWWBT7PWDv832wn3XSjfTk QHyKe4jBI3jQgL5CocWUgoc/BLRDQ6SRiN1vDLwTL4A43ZneU7cHrHV8UUpw8KnH QPrKp6VwmCiSGeRBOSQDeuzAyhq90kplODkk0LhtjAomk0+43ugZU5Ei/eKT8FXG PMjlU/7OpwfumINkPosRxl6OkTZ51T1yAX4HkMkYFDBUQWiOwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuLYH8oCPRIDRsYldEeLjMyWMnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGY4MWM5MmItYmUwNy0z ZGQ0LWJkNDMtMGNiZThjZDFmMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOz0AgWQo7mlnwn7B9FVdbYAyQTb11mZF57t/WKGXDznTtcQXVvwd/O eMfFmRMV1JAG849AKwibCQh9nZLVrt/KAXaFhM5ys7q6wy6BRbAE9pq2oQpOjMcM tIoa3bUHn7I0OH1or9PDCC1iyfykCArlSJTycf6jP+Bl0RJw34ZQrLzQVr/Nk8lc d6iISLrTg9C56FW/GjKlj/Msu2hqYYRgOGf4Roy5SE8a1Nh6R3JMW2W5Ho5FrCFp QYUL90tBRbI1caEpk74k1Sg9SLWKdDxXx+Z5C2mZ8o47KYasUjC40jI3xaVyaTIE 9QJg3BqlifbrsRSreOA8QvtSAH9L/dA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:36 2025 by rpki-client