$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa File: 844d9a05-ea0e-3347-8704-50962309673e.roa (raw, json) Hash identifier: /kSRXMu/mvKbnfLCOttsw+l9qtAxoAy9EPkv5TE4X+M= Subject key identifier: 3E:86:BD:DC:29:53:D2:90:2E:3D:81:0B:62:7C:7C:72:D0:83:65:F7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67973B6CBBDF911F5FCF7300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.24.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:3b:6c:bb:df:91:1f:5f:cf:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4a043d81-314a-4a12-b20e-7665e01d3a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:64:c3:b4:12:27:03:8b:c6:b6:98:d3:ce: 77:71:ae:0c:18:79:ce:02:02:80:1a:30:41:70:7c: 28:d4:83:ff:a2:09:4e:0a:65:66:b4:ae:dd:b1:17: 7d:96:c4:6a:3f:1c:c0:3c:1d:90:81:a5:f9:16:68: 31:91:43:5d:36:32:46:c9:e2:0c:cd:bb:de:cf:d1: b9:6a:58:1c:7a:a2:80:a3:63:0c:40:22:c2:63:1a: f6:85:ee:a0:8e:5a:11:af:0e:03:95:10:69:e2:1c: 6b:69:90:37:51:95:97:b0:10:18:ae:50:fb:4d:9b: 90:36:12:28:6c:9e:c2:7b:98:13:e6:e2:71:1d:20: 11:00:68:8c:e9:f8:77:db:50:31:43:57:14:fd:29: 1f:bb:d9:90:00:0b:f6:00:ae:61:a5:e3:08:bf:78: 76:dc:49:ca:b8:97:7c:fb:cb:54:4f:6d:70:e4:d6: e6:17:10:93:66:ec:7f:47:82:57:c3:90:b1:41:7f: 27:9d:ec:01:95:aa:70:4c:42:42:87:8a:23:16:38: 2f:b2:b8:07:c2:a2:c9:80:b5:87:23:75:45:c2:89: e6:47:b6:ea:83:b2:00:54:24:85:fd:31:c4:99:95: 8f:63:9e:e8:3c:05:32:af:26:7f:11:71:0e:32:e2: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:86:BD:DC:29:53:D2:90:2E:3D:81:0B:62:7C:7C:72:D0:83:65:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f3:99:af:81:b4:28:8b:91:c1:83:8c:c9:47:3e:be:bc:30: a4:0f:7b:da:fb:50:89:be:92:29:13:93:32:36:54:bd:53:66: 7b:74:cd:85:c6:9a:24:79:10:e2:22:d5:73:3c:c1:49:ea:ce: 56:c4:bc:91:39:1d:d2:ae:03:e3:8a:79:f3:eb:e4:c7:13:cc: 5c:89:01:92:1f:92:ce:59:cb:18:12:78:f9:a9:b2:e9:af:65: 5d:f5:8f:de:6d:a0:a4:9d:5e:52:d6:97:11:cf:a1:e5:ca:bb: 0d:71:3b:0c:54:fb:bc:11:0b:3e:29:94:14:e6:e8:35:c5:31: b3:e0:e9:50:d1:7a:f5:ca:11:4a:05:57:25:d5:7a:95:aa:ae: 86:c4:5a:e9:dc:86:a7:d0:74:70:9a:c5:dc:92:5f:44:cc:97: 8b:70:24:b1:8e:17:e5:20:27:ed:e3:44:65:d6:fa:6f:25:93: 03:8d:b4:8d:d9:be:2a:53:93:f7:55:69:72:47:5d:64:56:b8: 51:67:d8:78:f4:b7:71:5c:de:57:42:5e:de:be:16:76:00:d9: 6e:da:2c:bd:df:43:be:4f:9e:34:ab:ac:ae:44:57:f2:e3:33: 7d:49:57:11:22:bf:29:17:80:c2:7e:e3:f1:1f:ae:2d:e7:9a: 45:67:0b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlztsu9+RH1/PcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGEwNDNkODEtMzE0YS00YTEyLWIyMGUtNzY2NWUwMWQzYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEpkw7QSJwOLxraY0853ca4MGHnOAgKAGjBB cHwo1IP/oglOCmVmtK7dsRd9lsRqPxzAPB2QgaX5FmgxkUNdNjJGyeIMzbvez9G5 algceqKAo2MMQCLCYxr2he6gjloRrw4DlRBp4hxraZA3UZWXsBAYrlD7TZuQNhIo bJ7Ce5gT5uJxHSARAGiM6fh321AxQ1cU/Skfu9mQAAv2AK5hpeMIv3h23EnKuJd8 +8tUT21w5NbmFxCTZux/R4JXw5CxQX8nnewBlapwTEJCh4ojFjgvsrgHwqLJgLWH I3VFwonmR7bqg7IAVCSF/THEmZWPY57oPAUyryZ/EXEOMuIS6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6GvdwpU9KQLj2BC2J8fHLQg2X3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ0ZDlhMDUtZWEwZS0z MzQ3LTg3MDQtNTA5NjIzMDk2NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDzma+BtCiLkcGDjMlHPr68MKQPe9r7UIm+kikTkzI2VL1TZnt0zYXG miR5EOIi1XM8wUnqzlbEvJE5HdKuA+OKefPr5McTzFyJAZIfks5ZyxgSePmpsumv ZV31j95toKSdXlLWlxHPoeXKuw1xOwxU+7wRCz4plBTm6DXFMbPg6VDRevXKEUoF VyXVepWqrobEWunchqfQdHCaxdySX0TMl4twJLGOF+UgJ+3jRGXW+m8lkwONtI3Z vipTk/dVaXJHXWRWuFFn2Hj0t3Fc3ldCXt6+FnYA2W7aLL3fQ75PnjSrrK5EV/Lj M31JVxEivykXgMJ+4/Efri3nmkVnC4U= -----END CERTIFICATE-----Generated at Wed Nov 5 03:03:03 2025 by rpki-client