$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc1e8001-3692-318c-b06a-106356b2f625.roa File: cc1e8001-3692-318c-b06a-106356b2f625.roa (raw, json) Hash identifier: nb1y+yXCp8R0qS20KYmp5q6TTdh3ADvOCgt8jF8xc7Q= Subject key identifier: BC:F7:17:5B:41:C3:DF:F2:23:4D:17:7A:5B:79:5B:8D:A8:FE:3D:78 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D74A4D381B61DF6180DB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc1e8001-3692-318c-b06a-106356b2f625.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.24.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:4a:4d:38:1b:61:df:61:80:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=0d445547-394c-447b-98c4-5dfce050116e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:9e:24:3d:2d:ea:af:14:e0:74:57:89:ec: 48:b2:8d:7a:5e:e7:b2:01:25:6a:c3:20:c5:0a:94: d8:b0:69:80:d0:65:53:00:5b:d6:cf:89:7a:40:75: 58:39:d1:64:b5:1b:de:f6:97:30:91:55:cb:f0:4d: be:88:5c:d5:3f:e5:1c:5b:cd:03:d3:ff:6d:44:d0: 47:fc:ec:bd:7b:7e:0c:58:fb:f3:06:e4:01:21:a7: 35:d0:0c:a4:cd:d1:a6:c6:fb:3e:23:b7:36:fc:21: 01:88:f7:b1:d6:aa:e8:10:a5:16:67:8a:7e:87:3e: a4:f7:f6:48:f4:9f:5b:52:56:80:04:15:db:a4:2c: ef:6f:bb:48:8e:4f:18:e7:59:f7:27:d6:9e:67:04: 86:3f:f5:28:74:43:49:9c:ba:60:04:c7:a6:e6:6b: 96:05:c1:3c:65:40:e1:21:f7:38:04:21:81:07:b0: be:74:0d:4d:5e:8d:53:1a:50:1b:91:9e:0e:52:9d: 76:0a:5d:63:63:23:bd:f3:ae:bf:c9:39:02:bc:e5: 55:6a:04:5d:ef:54:88:36:5f:e6:37:3f:71:26:76: 12:c5:24:9d:4e:ae:36:66:09:e0:7d:1f:fd:bd:97: b2:bc:f0:91:19:ec:f9:b5:9d:6f:a0:a0:e0:99:1b: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F7:17:5B:41:C3:DF:F2:23:4D:17:7A:5B:79:5B:8D:A8:FE:3D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc1e8001-3692-318c-b06a-106356b2f625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:24:1e:45:ab:44:4a:44:4e:43:90:df:a6:62:df:84:a0:23: 9a:e5:45:81:c1:d5:c6:26:f5:56:c9:21:6b:21:64:54:17:ef: 90:de:f5:31:01:4d:7b:49:d5:c1:4e:4a:ea:61:5b:85:65:5e: a5:e2:37:bb:9c:8c:48:78:b6:0d:22:97:21:12:b9:fa:9f:9e: 70:2d:35:43:0b:9e:11:77:08:08:33:be:9f:27:fd:b2:ce:1d: 13:2a:6e:6c:04:3a:d9:5e:2d:55:9b:3e:05:7f:4b:de:d5:b2: 7b:bd:89:0a:be:12:af:15:72:0d:f0:4a:e9:1b:91:c0:b2:0f: 69:bc:1e:81:50:e0:88:e6:52:ff:1f:02:d4:4d:1e:e1:35:bd: f3:f6:5d:6c:01:5d:b6:b1:8d:e7:70:8c:ef:72:80:38:76:76: cd:3c:1b:4c:36:af:16:b1:5e:47:0a:27:42:ec:1b:15:68:cf: 06:8f:e3:10:78:ec:20:2a:1e:e0:a6:31:cb:66:f3:b2:10:24: 36:45:41:11:d1:0b:52:52:7e:70:a1:d0:f2:d2:98:ed:1e:a8: 00:54:56:04:82:6b:73:0a:5f:83:e4:f8:12:29:ce:a0:0b:ec: 42:35:29:6f:a8:ad:3e:ab:d8:d1:7d:b0:be:d1:99:d0:9e:e9: 41:ec:a8:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10pNOBth32GA24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MGQ0NDU1NDctMzk0Yy00NDdiLTk4YzQtNWRmY2UwNTAxMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeieJD0t6q8U4HRXiexIso16XueyASVqwyDF CpTYsGmA0GVTAFvWz4l6QHVYOdFktRve9pcwkVXL8E2+iFzVP+UcW80D0/9tRNBH /Oy9e34MWPvzBuQBIac10AykzdGmxvs+I7c2/CEBiPex1qroEKUWZ4p+hz6k9/ZI 9J9bUlaABBXbpCzvb7tIjk8Y51n3J9aeZwSGP/UodENJnLpgBMem5muWBcE8ZUDh Ifc4BCGBB7C+dA1NXo1TGlAbkZ4OUp12Cl1jYyO9866/yTkCvOVVagRd71SINl/m Nz9xJnYSxSSdTq42ZgngfR/9vZeyvPCRGez5tZ1voKDgmRuQgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLz3F1tBw9/yI00Xelt5W42o/j14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2MxZTgwMDEtMzY5Mi0z MThjLWIwNmEtMTA2MzU2YjJmNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQkHkWrREpETkOQ36Zi34SgI5rlRYHB1cYm9VbJIWshZFQX75De9TEB TXtJ1cFOSuphW4VlXqXiN7ucjEh4tg0ilyESufqfnnAtNUMLnhF3CAgzvp8n/bLO HRMqbmwEOtleLVWbPgV/S97Vsnu9iQq+Eq8Vcg3wSukbkcCyD2m8HoFQ4IjmUv8f AtRNHuE1vfP2XWwBXbaxjedwjO9ygDh2ds08G0w2rxaxXkcKJ0LsGxVozwaP4xB4 7CAqHuCmMctm87IQJDZFQRHRC1JSfnCh0PLSmO0eqABUVgSCa3MKX4Pk+BIpzqAL 7EI1KW+orT6r2NF9sL7RmdCe6UHsqOo= -----END CERTIFICATE-----Generated at Wed Nov 5 04:17:34 2025 by rpki-client