$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bc33d22-57cb-3b57-b758-8ea587cff2af.roa File: 4bc33d22-57cb-3b57-b758-8ea587cff2af.roa (raw, json) Hash identifier: VfI0urMzcp8vbWbmZ/vvKIEyHE75Fl/UaSZ76dUd6+E= Subject key identifier: 4B:A3:D7:14:2D:03:88:98:BA:E1:1F:D5:A1:A8:CB:94:FE:8A:19:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475C2D7A4856D280D1F7B2E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bc33d22-57cb-3b57-b758-8ea587cff2af.roa Signing time: Mon 22 Sep 2025 11:55:49 +0000 ROA not before: Mon 22 Sep 2025 11:55:49 +0000 ROA not after: Sun 21 Dec 2025 12:55:49 +0000 asID: 19905 IP address blocks: 173.24.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:2d:7a:48:56:d2:80:d1:f7:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:55:49 2025 GMT Not After : Dec 21 12:55:49 2025 GMT Subject: CN=3486fd51-8fe7-4ea0-bdf8-6fd337928263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:b3:76:39:b1:9f:0f:2b:11:3f:7e:94:19: e0:54:3d:f5:c2:35:92:e8:4a:a6:0e:0c:af:9e:d2: f0:82:4f:0c:c0:a4:ad:0f:10:10:7f:67:8a:26:52: f8:57:dc:7c:7c:92:0f:26:e9:74:6a:36:6c:7a:51: 31:19:88:f7:b6:f4:19:3b:0b:12:39:f2:1b:2a:ab: 16:40:80:88:50:a2:f3:b1:03:16:e0:26:5b:25:79: eb:f4:e6:f1:37:8f:ed:16:1e:b5:b2:82:75:2b:aa: c5:51:98:18:2d:46:20:b9:f5:ee:de:20:15:26:7c: 70:88:c8:0d:06:72:da:75:92:76:4c:63:98:b6:0d: 43:44:b7:ff:b5:eb:7c:97:73:3e:6b:80:cf:ff:5d: 83:69:d7:01:d1:d3:ea:33:63:fa:ac:3c:2a:19:16: 36:bd:40:88:7c:63:c9:bd:16:81:f4:f6:c1:fb:e8: 9b:ba:36:7c:ab:60:50:b7:de:3e:0b:85:42:2f:54: 2c:89:32:5e:8f:af:14:e2:1e:d7:de:53:b6:60:53: b2:6b:97:45:1b:ac:74:e8:c2:ce:95:3e:8a:79:52: 43:d6:2e:95:b8:65:c1:4e:99:ce:fe:cb:a4:d4:ce: c7:3d:4c:70:be:7c:6f:b5:66:89:92:6d:44:63:a2: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A3:D7:14:2D:03:88:98:BA:E1:1F:D5:A1:A8:CB:94:FE:8A:19:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bc33d22-57cb-3b57-b758-8ea587cff2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:04:dc:9a:79:5f:67:91:35:3f:9f:ea:a5:8b:a1:75:c6:7d: 7d:3e:29:9a:0a:e4:fe:1f:7c:da:eb:39:36:d9:dd:82:51:ea: b8:f3:3e:44:c2:fa:65:c4:e3:de:a0:c4:09:d2:76:0f:12:62: 04:89:df:d9:e1:88:94:65:f3:ac:cd:54:20:9e:0a:b6:8a:b2: e6:f9:4c:72:44:f2:2c:a1:fd:63:cf:14:27:d7:1e:ef:ea:1b: 21:9d:3b:9d:bb:01:9d:20:2b:69:a9:b9:60:a5:27:d5:8d:02: 9d:2a:3a:dc:bc:1d:1e:26:d5:54:96:32:62:90:06:fa:82:d5: a1:31:df:e8:9d:bb:bc:6e:be:53:65:40:15:68:3d:63:bb:75: 32:85:eb:58:63:68:e8:a6:f8:74:eb:0c:7c:1d:b0:0b:02:96: 6d:94:fa:93:b5:c2:12:20:74:9f:0d:58:02:5f:4e:d9:d1:96: 8f:1c:e9:28:eb:ac:0f:54:db:97:a4:7e:47:14:e0:0c:03:16: c3:de:f7:22:f0:2d:14:ef:8e:b2:15:32:c8:51:f3:90:d8:b3: b5:4c:3c:f7:c5:0c:55:18:eb:1d:95:12:02:fe:43:8d:44:bb: 4d:d4:27:6e:d1:28:d6:25:a8:92:de:da:e7:a3:c0:ae:51:20: 20:ce:7b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXC16SFbSgNH3suAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTU0OVoXDTI1MTIyMTEyNTU0OVowLzEtMCsGA1UEAxMk MzQ4NmZkNTEtOGZlNy00ZWEwLWJkZjgtNmZkMzM3OTI4MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCizdjmxnw8rET9+lBngVD31wjWS6EqmDgyv ntLwgk8MwKStDxAQf2eKJlL4V9x8fJIPJul0ajZselExGYj3tvQZOwsSOfIbKqsW QICIUKLzsQMW4CZbJXnr9ObxN4/tFh61soJ1K6rFUZgYLUYgufXu3iAVJnxwiMgN BnLadZJ2TGOYtg1DRLf/tet8l3M+a4DP/12DadcB0dPqM2P6rDwqGRY2vUCIfGPJ vRaB9PbB++ibujZ8q2BQt94+C4VCL1QsiTJej68U4h7X3lO2YFOya5dFG6x06MLO lT6KeVJD1i6VuGXBTpnO/suk1M7HPUxwvnxvtWaJkm1EY6JV3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuj1xQtA4iYuuEf1aGoy5T+ihlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGJjMzNkMjItNTdjYi0z YjU3LWI3NTgtOGVhNTg3Y2ZmMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYE3Jp5X2eRNT+f6qWLoXXGfX0+KZoK5P4ffNrrOTbZ3YJR6rjzPkTC +mXE496gxAnSdg8SYgSJ39nhiJRl86zNVCCeCraKsub5THJE8iyh/WPPFCfXHu/q GyGdO527AZ0gK2mpuWClJ9WNAp0qOty8HR4m1VSWMmKQBvqC1aEx3+idu7xuvlNl QBVoPWO7dTKF61hjaOim+HTrDHwdsAsClm2U+pO1whIgdJ8NWAJfTtnRlo8c6Sjr rA9U25ekfkcU4AwDFsPe9yLwLRTvjrIVMshR85DYs7VMPPfFDFUY6x2VEgL+Q41E u03UJ27RKNYlqJLe2uejwK5RICDOe3M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:46 2025 by rpki-client