$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40a8cb52-aa04-349c-bd6c-d1d7c69086c9.roa File: 40a8cb52-aa04-349c-bd6c-d1d7c69086c9.roa (raw, json) Hash identifier: 4fOZenaIdet/5QWlxKS5O58abBMwZax5n/6pb6mulBM= Subject key identifier: 8A:11:B1:97:B5:22:6B:25:59:09:BC:22:4F:96:7E:55:E3:F0:30:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B80B7818A1C1A81A54DDEA380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40a8cb52-aa04-349c-bd6c-d1d7c69086c9.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 30036 IP address blocks: 173.24.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:81:8a:1c:1a:81:a5:4d:de:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=bf87fa6d-4357-4d98-b092-ca169063bcfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:1d:26:68:92:b8:61:63:e0:ab:7a:09:88: 0c:44:72:f2:68:1a:e0:36:55:72:81:92:10:ae:0b: a1:4f:aa:58:f3:52:bd:c3:d4:68:1f:c0:38:01:bb: 19:67:e5:81:79:26:5e:54:5a:50:a8:02:23:17:0f: f6:6e:38:11:f7:9b:a8:4c:bc:08:7d:b0:e6:fb:2c: 10:7c:fb:e2:1b:5d:35:65:b6:6c:f3:10:36:4e:08: 41:ca:6a:44:eb:a6:0c:1b:f8:d3:74:bd:5f:6d:bf: e4:17:c9:80:64:b2:a8:df:13:87:07:69:f0:1a:4a: d8:40:58:ae:98:60:c1:ba:78:e0:a7:c6:9d:16:0f: 80:4b:57:5f:e9:f2:f8:8f:8a:7c:77:0a:92:73:89: 55:f3:0c:62:87:10:02:b9:7a:47:ce:9b:2d:ec:08: 65:23:6d:36:04:79:ad:54:9f:49:2b:e4:57:3c:b4: b0:ee:54:94:30:97:23:7c:c5:3b:a0:a8:79:14:ca: aa:5f:9d:1f:85:58:7d:b8:02:77:5a:b8:6e:cd:9f: fe:d9:22:89:d4:38:4a:1f:4f:b1:0d:d4:eb:45:e7: a0:17:ac:43:18:e6:c9:48:41:b6:83:83:0c:20:1b: 1f:3f:f2:0e:d0:9c:46:20:bd:02:04:b1:00:b9:a7: aa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:11:B1:97:B5:22:6B:25:59:09:BC:22:4F:96:7E:55:E3:F0:30:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40a8cb52-aa04-349c-bd6c-d1d7c69086c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3e:8f:31:9d:0f:f8:10:a8:d8:28:cc:a0:56:81:00:a4:0c: 34:3b:d4:15:d8:a9:ed:8c:03:95:ef:04:56:48:52:dc:6c:39: e9:b9:1d:6a:23:f2:3c:8e:ea:84:88:67:98:e9:7d:31:8d:2a: 79:db:a7:59:27:36:b0:ff:0c:e6:02:62:27:2a:99:6d:f5:91: fb:1c:04:f0:20:38:87:20:56:2d:7b:9b:8f:32:c7:b3:7b:2a: 46:ad:04:48:e6:30:c2:85:c6:ab:9f:16:c5:fa:06:0d:e3:5a: df:5a:84:c8:d6:16:52:97:d8:b5:b5:6d:85:e8:7b:45:2c:0e: 72:86:54:8e:71:7f:46:2b:cf:f2:e9:95:9f:bc:70:20:04:60: 93:d9:f9:ce:3b:bf:d1:15:3e:27:74:db:c5:09:07:fc:ce:3a: 2d:c6:83:d8:f9:22:e7:ed:91:03:42:d3:cb:85:e4:a0:7c:43: fc:12:eb:8d:c8:20:65:d0:9d:ed:91:2a:df:04:35:15:63:f9: 51:79:42:16:57:bb:1b:82:e7:71:a2:02:1b:f3:87:6d:2f:3c: 56:97:34:35:47:3c:ce:2b:e9:c6:7e:76:b7:48:58:09:33:5d: 18:08:77:c9:df:cb:0e:3a:d5:9c:fc:a6:0a:6d:e9:79:13:b5: 77:51:5c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt4GKHBqBpU3eo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YmY4N2ZhNmQtNDM1Ny00ZDk4LWIwOTItY2ExNjkwNjNiY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIcdJmiSuGFj4Kt6CYgMRHLyaBrgNlVygZIQ rguhT6pY81K9w9RoH8A4AbsZZ+WBeSZeVFpQqAIjFw/2bjgR95uoTLwIfbDm+ywQ fPviG101ZbZs8xA2TghBympE66YMG/jTdL1fbb/kF8mAZLKo3xOHB2nwGkrYQFiu mGDBunjgp8adFg+AS1df6fL4j4p8dwqSc4lV8wxihxACuXpHzpst7AhlI202BHmt VJ9JK+RXPLSw7lSUMJcjfMU7oKh5FMqqX50fhVh9uAJ3WrhuzZ/+2SKJ1DhKH0+x DdTrReegF6xDGObJSEG2g4MMIBsfP/IO0JxGIL0CBLEAuaeqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoRsZe1ImslWQm8Ik+WflXj8DBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDBhOGNiNTItYWEwNC0z NDljLWJkNmMtZDFkN2M2OTA4NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRj/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8+jzGdD/gQqNgozKBWgQCkDDQ71BXYqe2MA5XvBFZIUtxsOem5HWoj 8jyO6oSIZ5jpfTGNKnnbp1knNrD/DOYCYicqmW31kfscBPAgOIcgVi17m48yx7N7 KkatBEjmMMKFxqufFsX6Bg3jWt9ahMjWFlKX2LW1bYXoe0UsDnKGVI5xf0Yrz/Lp lZ+8cCAEYJPZ+c47v9EVPid028UJB/zOOi3Gg9j5IuftkQNC08uF5KB8Q/wS643I IGXQne2RKt8ENRVj+VF5QhZXuxuC53GiAhvzh20vPFaXNDVHPM4r6cZ+drdIWAkz XRgId8nfyw461Zz8pgpt6XkTtXdRXKc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:13:13 2025 by rpki-client