$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa File: bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa (raw, json) Hash identifier: zLAPHOFIhbGUb5uCmkZrfu1uoSwuq3ku2eRHwBoxEGk= Subject key identifier: 30:9F:C8:98:B9:E2:6C:02:42:A7:21:4F:22:0A:85:14:DD:78:68:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B79C9E51688EC074BDB05ED80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa Signing time: Fri 10 Oct 2025 13:27:18 +0000 ROA not before: Fri 10 Oct 2025 13:27:18 +0000 ROA not after: Thu 08 Jan 2026 14:27:18 +0000 asID: 19905 IP address blocks: 173.24.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:c9:e5:16:88:ec:07:4b:db:05:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 13:27:18 2025 GMT Not After : Jan 8 14:27:18 2026 GMT Subject: CN=f61d3aaa-a275-45bf-a898-ad9e4ea5dca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:67:db:2c:d9:ac:5c:f6:0a:76:d5:7a:12: 72:05:b7:ba:1e:1e:21:72:90:7c:69:89:43:86:d0: 6c:e4:5d:59:2d:1a:de:13:b6:28:fa:eb:0e:c6:45: 1b:e4:54:9e:5d:a5:f6:e6:5d:4b:93:f7:da:62:97: 93:d7:e3:e0:28:a9:92:1e:84:3f:df:eb:60:97:a6: e8:9b:6d:ad:82:2f:7b:a5:db:4d:de:e5:2a:3c:86: 1e:d4:78:f6:f7:7f:8b:ab:be:e3:35:e2:b5:15:56: e8:77:bf:e5:54:ea:41:b6:94:35:24:54:5d:85:b7: 44:c0:64:88:f4:57:48:0e:56:6d:a6:94:08:46:75: 06:f6:52:c4:ef:9c:f5:19:1c:3b:98:69:4f:91:53: 5e:bf:b6:34:cf:e1:cf:73:8a:ac:21:40:c5:8e:70: ff:c1:35:9c:18:eb:b6:e7:70:db:88:a0:ac:56:af: 15:fb:c7:8a:5f:b9:39:0f:05:86:af:9f:37:45:c4: 33:a1:6c:e0:94:f1:9c:1f:07:9c:e0:9a:65:e5:76: 21:a4:39:b9:0a:4f:a2:7f:9e:fa:f7:fb:30:8f:d0: f8:ac:ed:57:ad:2d:aa:28:8d:78:7e:92:e1:3a:53: 18:9c:d6:24:b1:9a:3b:e4:75:66:59:f5:c2:e1:b7: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9F:C8:98:B9:E2:6C:02:42:A7:21:4F:22:0A:85:14:DD:78:68:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6e:04:a6:06:6f:63:d8:47:1d:89:66:e1:a1:5a:d7:d7:28: 52:80:94:85:79:5f:0b:46:09:4e:27:b4:48:ae:21:a6:8e:89: 38:9a:51:01:63:3d:a5:c0:8f:54:dd:bc:e7:f0:50:da:36:1c: 24:54:b5:4c:98:b8:75:66:81:5e:51:dc:85:00:26:43:65:aa: d4:22:0f:06:09:e5:c5:8c:69:4b:7a:0e:34:00:8f:78:c5:87: 01:ce:a1:fa:49:7b:e5:97:97:03:7b:67:4b:e4:be:b3:5f:fd: 2b:9e:67:b0:64:b7:3a:2a:95:c4:7c:f1:df:73:9b:0d:e7:73: 82:95:d5:dd:18:cd:47:69:41:c9:e3:4a:98:59:ea:9e:19:e1: a9:a9:aa:c5:7b:30:f2:88:89:9f:5e:14:6c:f7:40:10:73:fd: b4:cc:92:f9:58:79:d1:e6:76:55:71:25:82:96:32:c3:f6:c4: 3d:37:79:d7:8e:82:56:d6:3c:c4:27:5d:bb:cd:93:9b:b0:19: 38:74:18:da:9f:9e:a1:b7:d1:ac:24:d3:ed:e2:1b:18:d8:02: 9f:da:94:48:04:0c:4e:85:05:84:f4:77:6b:78:5b:f6:6a:7d: fd:56:43:93:b1:0d:e0:d4:eb:39:aa:19:eb:d4:3f:02:fc:0f: d0:84:bf:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5yeUWiOwHS9sF7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDEzMjcxOFoXDTI2MDEwODE0MjcxOFowLzEtMCsGA1UEAxMk ZjYxZDNhYWEtYTI3NS00NWJmLWE4OTgtYWQ5ZTRlYTVkY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/pn2yzZrFz2CnbVehJyBbe6Hh4hcpB8aYlD htBs5F1ZLRreE7Yo+usOxkUb5FSeXaX25l1Lk/faYpeT1+PgKKmSHoQ/3+tgl6bo m22tgi97pdtN3uUqPIYe1Hj293+Lq77jNeK1FVbod7/lVOpBtpQ1JFRdhbdEwGSI 9FdIDlZtppQIRnUG9lLE75z1GRw7mGlPkVNev7Y0z+HPc4qsIUDFjnD/wTWcGOu2 53DbiKCsVq8V+8eKX7k5DwWGr583RcQzoWzglPGcHwec4Jpl5XYhpDm5Ck+if576 9/swj9D4rO1XrS2qKI14fpLhOlMYnNYksZo75HVmWfXC4bd6KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCfyJi54mwCQqchTyIKhRTdeGhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmJmMmJkYTEtNmRiMy0z NGFlLTk3ZTAtNGE5MDI2OTQ1ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZuBKYGb2PYRx2JZuGhWtfXKFKAlIV5XwtGCU4ntEiuIaaOiTiaUQFj PaXAj1TdvOfwUNo2HCRUtUyYuHVmgV5R3IUAJkNlqtQiDwYJ5cWMaUt6DjQAj3jF hwHOofpJe+WXlwN7Z0vkvrNf/SueZ7BktzoqlcR88d9zmw3nc4KV1d0YzUdpQcnj SphZ6p4Z4ampqsV7MPKIiZ9eFGz3QBBz/bTMkvlYedHmdlVxJYKWMsP2xD03edeO glbWPMQnXbvNk5uwGTh0GNqfnqG30awk0+3iGxjYAp/alEgEDE6FBYT0d2t4W/Zq ff1WQ5OxDeDU6zmqGevUPwL8D9CEvxw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:44 2025 by rpki-client