$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa File: 4dce1a3d-3868-3955-980a-db5f2fc13635.roa (raw, json) Hash identifier: 4vj01x1v1DhhhF3tZ8rN83Tsa2+L/0vPpPSxgm9X0rs= Subject key identifier: D5:91:25:D2:1D:A5:2D:05:6F:E2:D4:68:FF:90:43:DA:0F:FB:04:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797E86DCF3676C5E6CF4380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.24.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e8:6d:cf:36:76:c5:e6:cf:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=493bca35-37b2-4512-9ea6-f2c42ee228d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:fa:2d:a5:e2:35:de:51:27:ed:fd:b4:f3: 22:ae:d8:c0:67:34:45:3a:9e:d9:11:7a:91:b8:b5: 27:b5:f6:80:ed:2c:ee:b1:3f:1f:77:de:e8:5d:8a: 5a:7f:48:02:ae:b3:c9:9a:74:c8:c1:2c:d5:dd:fb: ed:60:cd:67:5f:20:59:bd:73:e2:b1:71:e5:13:39: 64:e7:79:5b:8c:25:62:a8:10:dd:12:a2:83:2d:0a: d1:09:73:b9:f6:fc:9e:1e:22:85:a2:6f:5a:07:94: 55:26:6e:a3:dd:d5:9c:84:df:7f:92:41:fd:f7:7d: cd:be:47:38:d7:db:07:d0:09:21:54:0f:65:e1:ad: 15:45:b6:31:45:b9:99:19:66:2b:36:a1:6a:de:53: 6a:52:df:69:62:cf:a6:a2:fa:d5:ef:38:c6:39:20: e4:5b:12:97:2c:db:69:b8:84:ec:5a:d4:00:5f:ec: d3:9f:37:04:d9:46:00:c4:0d:88:75:df:1a:19:88: 98:fe:34:08:19:27:8e:44:74:57:98:77:f9:f5:a5: 78:72:7a:da:17:bc:4d:52:81:bf:37:4d:08:f0:98: c1:7b:f5:10:72:58:a5:cc:7c:25:d0:8f:6e:b8:54: 1a:26:79:80:fa:1c:40:38:d3:1d:5e:b0:76:f4:d5: d8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:91:25:D2:1D:A5:2D:05:6F:E2:D4:68:FF:90:43:DA:0F:FB:04:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:78:36:97:6d:1d:d9:7d:1b:9c:07:b4:07:83:d9:67:8e:f6: 34:bd:aa:d2:15:3c:2b:7a:d1:fe:bc:9f:f7:3d:32:c2:94:72: 4f:1c:4c:d2:26:24:26:af:b5:d2:15:66:ad:47:2c:97:f2:b9: 9e:86:e7:99:9f:b8:77:82:c1:bd:9c:fd:44:eb:8e:14:78:64: a9:5a:59:97:ac:6e:1e:bd:f7:dc:3c:05:86:99:65:12:70:de: 56:ad:8d:cb:12:65:45:f4:06:00:a6:dd:7b:56:b5:97:e4:0a: a8:0c:8e:3f:6a:a9:87:98:31:a8:5d:bc:bc:dc:86:bd:31:b7: ab:22:c0:41:98:3a:d1:5b:8d:0e:42:a8:c1:ed:c0:5b:00:10: ba:e0:9a:6e:c9:d3:57:e4:21:d3:6c:42:8b:1b:ec:c2:b1:cc: 17:de:6b:34:59:03:ff:5c:4d:61:08:fb:6d:be:4f:e2:38:d5: cc:1e:43:f5:7a:97:a0:53:cb:7e:ff:a7:e8:93:e2:36:c4:75: d4:cc:38:e1:d7:8b:4d:56:57:d9:e0:ec:a8:78:2f:1d:77:12: b8:e9:4c:27:88:f7:10:51:41:2b:0b:80:91:55:be:34:4c:76: 85:7a:40:77:2a:10:fd:c9:9c:83:de:a9:62:0f:a4:e5:99:61: fa:ab:11:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+htzzZ2xebPQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDkzYmNhMzUtMzdiMi00NTEyLTllYTYtZjJjNDJlZTIyOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljT6LaXiNd5RJ+39tPMirtjAZzRFOp7ZEXqR uLUntfaA7SzusT8fd97oXYpaf0gCrrPJmnTIwSzV3fvtYM1nXyBZvXPisXHlEzlk 53lbjCViqBDdEqKDLQrRCXO59vyeHiKFom9aB5RVJm6j3dWchN9/kkH9933Nvkc4 19sH0AkhVA9l4a0VRbYxRbmZGWYrNqFq3lNqUt9pYs+movrV7zjGOSDkWxKXLNtp uITsWtQAX+zTnzcE2UYAxA2Idd8aGYiY/jQIGSeORHRXmHf59aV4cnraF7xNUoG/ N00I8JjBe/UQclilzHwl0I9uuFQaJnmA+hxAONMdXrB29NXY+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWRJdIdpS0Fb+LUaP+QQ9oP+wTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGRjZTFhM2QtMzg2OC0z OTU1LTk4MGEtZGI1ZjJmYzEzNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG54NpdtHdl9G5wHtAeD2WeO9jS9qtIVPCt60f68n/c9MsKUck8cTNIm JCavtdIVZq1HLJfyuZ6G55mfuHeCwb2c/UTrjhR4ZKlaWZesbh6999w8BYaZZRJw 3latjcsSZUX0BgCm3XtWtZfkCqgMjj9qqYeYMahdvLzchr0xt6siwEGYOtFbjQ5C qMHtwFsAELrgmm7J01fkIdNsQosb7MKxzBfeazRZA/9cTWEI+22+T+I41cweQ/V6 l6BTy37/p+iT4jbEddTMOOHXi01WV9ng7Kh4Lx13ErjpTCeI9xBRQSsLgJFVvjRM doV6QHcqEP3JnIPeqWIPpOWZYfqrEfw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:13:55 2025 by rpki-client