$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/045976a8-cd15-3b0d-a482-13959a3af83e.roa File: 045976a8-cd15-3b0d-a482-13959a3af83e.roa (raw, json) Hash identifier: eeDbVg54x5R9VvwFOYPLizQFHuQym5CPwyqhC5m9dC4= Subject key identifier: 65:32:79:EC:77:F0:84:9E:3B:1B:45:1F:71:F5:50:4F:56:26:6B:E3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6172E44E100E725D0AE2B600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/045976a8-cd15-3b0d-a482-13959a3af83e.roa Signing time: Wed 01 Oct 2025 20:12:36 +0000 ROA not before: Wed 01 Oct 2025 20:12:36 +0000 ROA not after: Tue 30 Dec 2025 21:12:36 +0000 asID: 19905 IP address blocks: 173.16.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:72:e4:4e:10:0e:72:5d:0a:e2:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:12:36 2025 GMT Not After : Dec 30 21:12:36 2025 GMT Subject: CN=4a356f36-71ff-4a1d-b703-fe2c97e8e767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:8e:bf:45:f8:b9:e7:42:cc:e1:4b:29:32: 65:e1:d5:cd:4a:ef:ec:87:10:b1:10:d0:05:ba:75: 9a:f3:32:03:ef:f0:41:b5:bc:c2:a9:5f:61:f5:a6: 74:35:b6:ea:a9:fd:16:21:60:1d:90:94:e3:81:c4: 65:ea:a7:ff:9e:4e:e6:49:24:2f:67:bc:94:a8:5e: c3:e3:1a:68:96:fc:18:93:d0:cb:30:31:27:22:e3: 56:e5:38:81:cf:9e:16:10:b6:67:ec:96:0c:af:ea: 85:69:bf:ee:48:18:1e:84:e3:e9:fe:d0:4c:fe:b0: e4:e4:c9:52:b5:f6:b7:c3:da:70:0f:b2:a3:6f:ed: ad:97:b9:83:6c:d2:a5:52:21:3d:2d:69:35:6f:6c: f3:be:c8:e1:cf:28:91:5a:71:4c:8b:6d:78:7f:d0: d4:4d:42:60:82:de:65:95:4e:6a:c4:d1:3c:99:04: 76:cb:5a:44:6a:ae:dc:73:99:92:cd:68:89:48:cb: 7b:f8:c1:02:9c:44:28:c4:9d:a5:44:4f:ed:49:b2: ca:c8:50:3c:66:ff:d6:4c:74:ac:91:0c:19:81:d9: dc:de:89:18:1c:ea:ab:08:d9:43:8e:75:35:33:84: 8b:b2:93:61:bb:f1:ea:6f:cf:7f:aa:41:ce:ae:98: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:32:79:EC:77:F0:84:9E:3B:1B:45:1F:71:F5:50:4F:56:26:6B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/045976a8-cd15-3b0d-a482-13959a3af83e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:27:90:03:4e:2e:4f:57:f3:c9:63:62:79:55:39:44:97:82: 42:79:ff:5f:9e:3f:ae:a6:b1:07:8e:3b:4c:ee:c3:eb:a0:2b: d7:4c:1e:63:e0:bf:8f:f4:dd:0b:80:c8:a6:65:7b:b7:1c:7c: 72:49:ff:3d:94:52:aa:8b:1c:c8:b3:ca:94:ee:dc:6f:4e:20: 4a:1c:1a:25:ca:d7:db:4e:ce:52:16:3f:dc:82:ae:d2:cc:3a: 6d:d6:0f:2d:0e:17:bd:a2:00:dd:ca:a0:78:2d:69:3f:65:3c: 6b:91:95:e0:67:74:a3:1e:11:7a:1c:bc:22:ab:8e:d5:75:01: 9a:ec:c3:ac:23:a6:9d:3b:0f:ee:29:59:f3:20:72:a5:34:ff: d0:f8:f5:4c:86:ab:b4:71:e8:22:d8:04:93:fd:ac:82:05:fd: 72:e4:ed:25:33:32:20:4d:6e:dc:4f:8c:ca:15:ca:f0:8c:41: 0c:b3:bf:d9:15:a6:a5:61:74:06:65:29:5c:ca:0d:3a:13:b6: a2:8c:86:c0:e6:df:78:7d:04:5d:b1:40:65:2d:76:74:a2:d6: 9d:dd:e0:41:c0:14:a1:da:71:ce:4f:1a:8b:2d:dc:16:ec:24: ff:07:dd:0f:82:02:77:95:16:e0:02:6a:b4:9b:b1:fd:c9:78: 59:db:82:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthcuROEA5yXQritgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTIzNloXDTI1MTIzMDIxMTIzNlowLzEtMCsGA1UEAxMk NGEzNTZmMzYtNzFmZi00YTFkLWI3MDMtZmUyYzk3ZThlNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNCOv0X4uedCzOFLKTJl4dXNSu/shxCxENAF unWa8zID7/BBtbzCqV9h9aZ0Nbbqqf0WIWAdkJTjgcRl6qf/nk7mSSQvZ7yUqF7D 4xpolvwYk9DLMDEnIuNW5TiBz54WELZn7JYMr+qFab/uSBgehOPp/tBM/rDk5MlS tfa3w9pwD7Kjb+2tl7mDbNKlUiE9LWk1b2zzvsjhzyiRWnFMi214f9DUTUJggt5l lU5qxNE8mQR2y1pEaq7cc5mSzWiJSMt7+MECnEQoxJ2lRE/tSbLKyFA8Zv/WTHSs kQwZgdnc3okYHOqrCNlDjnU1M4SLspNhu/Hqb89/qkHOrpht3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUyeex38ISeOxtFH3H1UE9WJmvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDQ1OTc2YTgtY2QxNS0z YjBkLWE0ODItMTM5NTlhM2FmODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYnkANOLk9X88ljYnlVOUSXgkJ5/1+eP66msQeOO0zuw+ugK9dMHmPg v4/03QuAyKZle7ccfHJJ/z2UUqqLHMizypTu3G9OIEocGiXK19tOzlIWP9yCrtLM Om3WDy0OF72iAN3KoHgtaT9lPGuRleBndKMeEXocvCKrjtV1AZrsw6wjpp07D+4p WfMgcqU0/9D49UyGq7Rx6CLYBJP9rIIF/XLk7SUzMiBNbtxPjMoVyvCMQQyzv9kV pqVhdAZlKVzKDToTtqKMhsDm33h9BF2xQGUtdnSi1p3d4EHAFKHacc5PGost3Bbs JP8H3Q+CAneVFuACarSbsf3JeFnbgiU= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:39 2025 by rpki-client