$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb3ad11-91db-363c-b849-c2673ec63038.roa File: dfb3ad11-91db-363c-b849-c2673ec63038.roa (raw, json) Hash identifier: Qkqk4373VPr17n4SxqHXvousJAtiDiMRvDKVoyhH8Kc= Subject key identifier: 06:6A:69:5D:BC:1C:B5:3E:53:90:C4:12:2C:42:03:62:B6:12:20:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CC73BB860392D16D11B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb3ad11-91db-363c-b849-c2673ec63038.roa Signing time: Mon 22 Sep 2025 11:57:02 +0000 ROA not before: Mon 22 Sep 2025 11:57:02 +0000 ROA not after: Sun 21 Dec 2025 12:57:02 +0000 asID: 19905 IP address blocks: 173.24.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:c7:3b:b8:60:39:2d:16:d1:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:57:02 2025 GMT Not After : Dec 21 12:57:02 2025 GMT Subject: CN=763f6236-92f9-4f39-abe2-f329403855e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:51:8f:5f:e2:dc:7c:62:36:64:ea:3b:0c: 52:15:2e:97:e9:7e:cc:73:ef:e4:77:d9:58:dd:be: e8:0b:8f:16:93:35:cd:e6:95:7c:7d:72:59:91:9d: 9f:82:98:28:d8:b0:3d:f6:76:d1:08:2e:8e:34:41: 00:8b:ef:aa:b2:e4:9b:eb:5e:34:1f:aa:62:91:2e: 01:3b:dc:74:73:c4:a0:8b:73:7f:64:6e:20:ef:83: c1:ba:90:16:2e:71:63:d1:57:c5:dc:8b:a2:8b:18: c5:d3:9a:d5:1b:69:7d:9d:1b:9e:18:1d:56:be:04: 02:96:4e:f6:94:e4:ad:38:fd:78:23:05:62:29:83: 3b:5a:2b:93:4d:85:0a:80:3d:c8:7c:3e:8e:c1:3e: a1:92:46:8d:34:c0:f7:78:3c:91:de:25:f7:5e:8a: 5a:f4:ba:c0:e1:22:33:6c:bf:91:d6:1f:59:b7:95: 39:bb:31:bb:94:bf:bd:2b:b7:47:e6:11:83:b1:33: cd:73:15:1c:fa:de:c3:38:29:f4:a0:35:ae:80:d2: f8:c7:ee:d6:27:02:1b:31:0a:34:e4:4e:35:8d:ec: ba:e7:19:77:17:54:b9:3d:4b:04:64:b5:1f:7a:4b: ef:bf:8b:16:3c:2d:01:dd:a6:76:04:e3:b4:b2:a8: 5e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6A:69:5D:BC:1C:B5:3E:53:90:C4:12:2C:42:03:62:B6:12:20:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb3ad11-91db-363c-b849-c2673ec63038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:30:4c:60:18:b5:c1:30:c6:43:4e:6a:0c:77:26:c1:f3:1e: 0d:50:52:82:77:0d:b9:2b:28:fa:34:7a:32:3f:2d:0f:8f:fa: 28:64:2d:f1:ef:a0:7b:0c:24:17:ae:86:78:5a:c2:7c:69:a7: bd:6e:6d:1a:ee:83:f0:0a:b2:d6:44:96:db:10:98:4a:30:f0: e8:35:d4:7d:39:84:14:91:72:f4:1d:de:cb:d8:8b:4d:cd:d6: 82:47:30:16:86:23:0e:c5:28:a9:55:c0:b4:96:f3:8a:b1:b8: 4b:d5:7d:69:fc:12:8f:6b:10:3f:1f:e2:57:85:c7:b5:6f:3b: 26:b1:28:11:1e:74:ca:d2:0e:07:a7:de:73:81:d6:48:55:fe: 21:46:ad:7e:f0:fa:6e:d9:3b:e4:67:d8:19:47:92:06:c3:7b: 20:0d:7a:52:1b:1f:c5:e3:14:94:ee:cc:d4:2e:6c:7f:81:0e: 59:ce:32:e9:45:2e:f6:ca:96:73:36:f4:fa:49:8e:af:5c:a2: b0:8d:16:d5:0a:11:1f:04:5a:10:e9:95:08:66:18:1e:ed:4c: 3d:80:11:ba:71:9c:95:fb:66:59:a8:ed:85:7c:c1:15:53:3c: cd:db:46:8b:a7:f8:ca:5f:9c:59:8c:3a:46:e4:a2:a2:08:e1: c3:0f:57:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXMc7uGA5LRbRG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTcwMloXDTI1MTIyMTEyNTcwMlowLzEtMCsGA1UEAxMk NzYzZjYyMzYtOTJmOS00ZjM5LWFiZTItZjMyOTQwMzg1NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjNRj1/i3HxiNmTqOwxSFS6X6X7Mc+/kd9lY 3b7oC48WkzXN5pV8fXJZkZ2fgpgo2LA99nbRCC6ONEEAi++qsuSb6140H6pikS4B O9x0c8Sgi3N/ZG4g74PBupAWLnFj0VfF3IuiixjF05rVG2l9nRueGB1WvgQClk72 lOStOP14IwViKYM7WiuTTYUKgD3IfD6OwT6hkkaNNMD3eDyR3iX3Xopa9LrA4SIz bL+R1h9Zt5U5uzG7lL+9K7dH5hGDsTPNcxUc+t7DOCn0oDWugNL4x+7WJwIbMQo0 5E41jey65xl3F1S5PUsEZLUfekvvv4sWPC0B3aZ2BOO0sqhe2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZqaV28HLU+U5DEEixCA2K2EiAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGZiM2FkMTEtOTFkYi0z NjNjLWI4NDktYzI2NzNlYzYzMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABswTGAYtcEwxkNOagx3JsHzHg1QUoJ3DbkrKPo0ejI/LQ+P+ihkLfHv oHsMJBeuhnhawnxpp71ubRrug/AKstZEltsQmEow8Og11H05hBSRcvQd3svYi03N 1oJHMBaGIw7FKKlVwLSW84qxuEvVfWn8Eo9rED8f4leFx7VvOyaxKBEedMrSDgen 3nOB1khV/iFGrX7w+m7ZO+Rn2BlHkgbDeyANelIbH8XjFJTuzNQubH+BDlnOMulF LvbKlnM29PpJjq9corCNFtUKER8EWhDplQhmGB7tTD2AEbpxnJX7Zlmo7YV8wRVT PM3bRoun+MpfnFmMOkbkoqII4cMPV8M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:17 2025 by rpki-client