$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2c82744-5f41-3b0d-be78-6973132446d8.roa File: d2c82744-5f41-3b0d-be78-6973132446d8.roa (raw, json) Hash identifier: eQCq58afkfqu354ukpfWLIzSrU6z4uze2ddxUC7WPx8= Subject key identifier: BE:AF:29:1B:3C:5A:BE:32:A1:81:4D:20:9E:A5:31:CB:F3:4C:C7:13 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B885B94F7288B02E23870F7CC Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2c82744-5f41-3b0d-be78-6973132446d8.roa Signing time: Wed 15 Oct 2025 18:42:10 +0000 ROA not before: Wed 15 Oct 2025 18:42:10 +0000 ROA not after: Tue 13 Jan 2026 19:42:10 +0000 asID: 19905 IP address blocks: 173.24.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:5b:94:f7:28:8b:02:e2:38:70:f7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 15 18:42:10 2025 GMT Not After : Jan 13 19:42:10 2026 GMT Subject: CN=dd9ffce8-d7c0-401e-a6c4-44001e29a6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:7d:ff:1b:2e:d8:db:6a:1a:9a:53:ae:03: ab:a8:ec:a9:7f:d8:05:e3:0f:37:8b:8a:0f:41:fc: 30:6e:a3:f3:21:3e:2b:bf:82:86:6d:ff:b3:6e:6d: 70:dc:1f:72:8e:f7:6f:0d:44:cd:8a:48:3c:94:60: 92:97:7c:ba:14:8e:31:17:df:d5:0a:da:ca:3f:a7: 0a:0d:33:54:a2:d5:76:fe:e4:d1:56:d7:16:01:00: 73:d7:88:e9:40:91:3a:31:9f:bb:c4:f3:91:0e:82: 42:bd:5a:cf:0a:55:bf:83:75:14:56:3f:14:72:e6: 2c:d5:bb:71:93:d1:e2:e3:9c:4c:e4:2a:8c:25:92: 69:04:c7:8f:63:eb:c5:fa:b4:50:13:ce:0b:85:c2: 01:50:5a:0e:9e:64:05:b8:0c:6f:cc:c1:cc:42:68: 69:f5:5c:ac:52:4f:ce:49:20:a7:ab:62:0c:ba:ff: 18:0a:57:88:0c:a0:e1:c5:ff:2f:19:c3:4d:76:c1: b5:25:7f:04:ba:a8:6d:3a:2e:59:49:15:75:8f:22: a4:1b:a2:50:0c:dd:03:b2:b2:c5:34:46:ad:51:09: a6:de:05:8f:57:30:be:01:6e:68:80:aa:96:3b:92: 6b:49:aa:1a:aa:cf:f9:9a:6b:82:e4:2c:54:16:85: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AF:29:1B:3C:5A:BE:32:A1:81:4D:20:9E:A5:31:CB:F3:4C:C7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2c82744-5f41-3b0d-be78-6973132446d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6a:6a:e0:5f:96:a5:e0:56:07:bf:7b:5c:20:96:01:b7:01: f4:72:6e:5c:49:a8:a5:19:cf:60:d8:41:bb:9d:fc:e2:2a:f0: 2d:17:9e:ad:09:77:f1:ae:72:fe:ca:4c:3a:a3:a6:db:2e:58: 57:4c:f1:1e:9b:29:c4:fc:f5:9d:81:5f:97:f9:d7:75:df:c3: 8e:90:74:27:53:53:0d:46:87:56:f5:d7:6c:f9:80:b2:7f:3b: f4:e5:54:25:85:75:1c:f3:ad:e5:fa:58:82:ea:ad:21:2f:f8: 29:c3:56:df:0e:47:4d:9e:06:80:25:45:c7:29:da:26:48:a0: b3:83:a8:5a:b6:1b:40:f3:56:03:e7:e1:2a:ea:58:13:73:00: 61:7e:d9:f7:51:1f:6f:bd:12:93:ae:85:13:19:a2:81:24:84: 45:0e:22:aa:ca:48:84:da:63:5b:4f:fa:88:98:63:4c:d7:23: e9:89:19:c3:0f:cf:25:c0:ce:b6:bc:05:d0:79:51:59:f2:46: aa:53:f1:c5:ee:9d:38:d5:3a:9a:32:53:ac:58:78:f3:15:5d: 5d:f6:72:f4:3d:42:42:4f:eb:1e:8e:65:6c:80:07:cd:98:99: e0:72:2d:99:6b:38:52:3c:06:56:db:7e:af:b8:f6:98:e9:1a: 30:a4:a1:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIW5T3KIsC4jhw98wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxNTE4NDIxMFoXDTI2MDExMzE5NDIxMFowLzEtMCsGA1UEAxMk ZGQ5ZmZjZTgtZDdjMC00MDFlLWE2YzQtNDQwMDFlMjlhNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcR9/xsu2NtqGppTrgOrqOypf9gF4w83i4oP QfwwbqPzIT4rv4KGbf+zbm1w3B9yjvdvDUTNikg8lGCSl3y6FI4xF9/VCtrKP6cK DTNUotV2/uTRVtcWAQBz14jpQJE6MZ+7xPORDoJCvVrPClW/g3UUVj8UcuYs1btx k9Hi45xM5CqMJZJpBMePY+vF+rRQE84LhcIBUFoOnmQFuAxvzMHMQmhp9VysUk/O SSCnq2IMuv8YCleIDKDhxf8vGcNNdsG1JX8EuqhtOi5ZSRV1jyKkG6JQDN0DsrLF NEatUQmm3gWPVzC+AW5ogKqWO5JrSaoaqs/5mmuC5CxUFoX9zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6vKRs8Wr4yoYFNIJ6lMcvzTMcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDJjODI3NDQtNWY0MS0z YjBkLWJlNzgtNjk3MzEzMjQ0NmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINqauBflqXgVge/e1wglgG3AfRyblxJqKUZz2DYQbud/OIq8C0Xnq0J d/Gucv7KTDqjptsuWFdM8R6bKcT89Z2BX5f513Xfw46QdCdTUw1Gh1b112z5gLJ/ O/TlVCWFdRzzreX6WILqrSEv+CnDVt8OR02eBoAlRccp2iZIoLODqFq2G0DzVgPn 4SrqWBNzAGF+2fdRH2+9EpOuhRMZooEkhEUOIqrKSITaY1tP+oiYY0zXI+mJGcMP zyXAzra8BdB5UVnyRqpT8cXunTjVOpoyU6xYePMVXV32cvQ9QkJP6x6OZWyAB82Y meByLZlrOFI8Blbbfq+49pjpGjCkoRI= -----END CERTIFICATE-----Generated at Sun Oct 19 21:09:46 2025 by rpki-client