$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa File: fec475c8-b7e4-3597-a983-df397380ca07.roa (raw, json) Hash identifier: 1xFjQoKY+bOHQsa7ybjhmhn0dHa2Cbah+qzKq2C/meI= Subject key identifier: 26:D5:55:61:5F:DD:91:36:FA:27:7C:41:B1:D7:1D:3B:91:1F:F9:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73E3290BBAC132A29D140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.24.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3e:32:90:bb:ac:13:2a:29:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=1e2e8589-d07a-4917-be77-4130bd0eb890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f5:b0:7c:5c:7f:ef:fb:4a:b2:1b:da:7a:6f: 5b:54:2d:fe:3f:f3:88:21:ab:15:5f:60:c7:fe:74: 79:84:83:02:3d:4b:eb:df:49:50:60:27:22:b0:b9: f7:1f:c5:fc:31:b6:18:5b:63:31:09:57:47:89:e8: 0c:40:ab:b9:34:5f:88:5e:90:3d:ef:18:c2:c9:ea: 10:4f:27:c6:bf:50:55:72:76:aa:26:06:65:e5:2b: f2:6d:d9:c9:c8:25:2a:7c:e0:0e:ea:d3:99:ac:0e: 12:a3:e5:a9:b6:4b:49:1a:20:56:8e:09:b9:0d:e4: 95:8f:fd:d2:6c:89:47:49:28:f5:83:79:71:55:ab: a6:6c:22:9a:4f:72:e6:3c:42:4b:47:74:38:7b:50: 55:74:b0:a1:b1:ca:b9:ca:9e:ff:96:f4:44:a8:8f: 02:4d:25:f8:7f:a8:05:97:09:61:77:05:fe:8d:7d: 71:c2:f4:cf:3b:e9:a7:4e:62:d4:a2:13:d6:ae:a8: 29:20:c2:c0:c6:74:60:03:f6:3b:f8:8e:c2:4b:e2: cb:67:94:03:64:a6:43:79:c9:00:9f:95:ef:88:05: 26:bc:0f:09:79:3d:a4:5c:2e:fb:8b:02:80:3c:f6: 6a:10:22:5c:73:ab:42:76:34:9c:f3:76:be:03:47: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D5:55:61:5F:DD:91:36:FA:27:7C:41:B1:D7:1D:3B:91:1F:F9:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f7:44:e7:9c:fe:a7:34:44:0e:2b:01:c0:49:a5:40:b8:2a: 15:80:a1:f8:55:dc:13:28:25:90:ab:81:45:5b:6f:fa:6b:66: 7c:df:70:50:3b:5e:bd:a9:3e:f6:1d:f1:61:a1:7f:d4:af:14: bc:01:b0:bf:e3:96:cd:de:dd:dd:ea:af:49:a4:03:74:ab:83: 48:dc:02:bc:29:32:80:89:ef:11:24:56:31:fd:44:ac:d7:9a: 32:ad:f2:8d:32:be:db:41:6d:1e:59:d9:97:8c:a2:e8:1b:31: ec:ff:c8:b6:db:24:e3:fe:93:1e:82:a0:04:06:c3:24:21:60: dd:16:76:1e:73:df:d5:93:dc:65:ea:f3:d1:84:0b:ff:55:84: 99:1c:be:68:ae:86:01:13:ec:d1:d1:ef:af:db:84:a8:8c:d2: 1b:18:db:0e:61:69:56:3b:12:c6:1c:9d:d8:da:c2:2c:9c:6d: c3:dd:a7:32:e3:13:98:f7:a9:9c:8d:7c:92:67:39:9f:8b:8d: 99:11:22:d8:8f:bf:49:12:c5:87:ea:23:c7:b4:44:c7:67:9b: 60:cc:1c:dd:f8:7e:77:eb:c4:30:44:d1:e5:ad:a1:2f:76:eb: e8:cd:3c:80:f3:3f:09:45:92:a1:d6:94:e3:82:9b:7a:98:88: 78:32:ee:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1z4ykLusEyop0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MWUyZTg1ODktZDA3YS00OTE3LWJlNzctNDEzMGJkMGViODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPWwfFx/7/tKshvaem9bVC3+P/OIIasVX2DH /nR5hIMCPUvr30lQYCcisLn3H8X8MbYYW2MxCVdHiegMQKu5NF+IXpA97xjCyeoQ TyfGv1BVcnaqJgZl5SvybdnJyCUqfOAO6tOZrA4So+WptktJGiBWjgm5DeSVj/3S bIlHSSj1g3lxVaumbCKaT3LmPEJLR3Q4e1BVdLChscq5yp7/lvREqI8CTSX4f6gF lwlhdwX+jX1xwvTPO+mnTmLUohPWrqgpIMLAxnRgA/Y7+I7CS+LLZ5QDZKZDeckA n5XviAUmvA8JeT2kXC77iwKAPPZqECJcc6tCdjSc83a+A0cuWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbVVWFf3ZE2+id8QbHXHTuRH/kzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmVjNDc1YzgtYjdlNC0z NTk3LWE5ODMtZGYzOTczODBjYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz3ROec/qc0RA4rAcBJpUC4KhWAofhV3BMoJZCrgUVbb/prZnzfcFA7 Xr2pPvYd8WGhf9SvFLwBsL/jls3e3d3qr0mkA3Srg0jcArwpMoCJ7xEkVjH9RKzX mjKt8o0yvttBbR5Z2ZeMougbMez/yLbbJOP+kx6CoAQGwyQhYN0Wdh5z39WT3GXq 89GEC/9VhJkcvmiuhgET7NHR76/bhKiM0hsY2w5haVY7EsYcndjawiycbcPdpzLj E5j3qZyNfJJnOZ+LjZkRItiPv0kSxYfqI8e0RMdnm2DMHN34fnfrxDBE0eWtoS92 6+jNPIDzPwlFkqHWlOOCm3qYiHgy7i4= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:41 2025 by rpki-client