$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06cbe769-5420-3106-a78d-8b24bc476121.roa File: 06cbe769-5420-3106-a78d-8b24bc476121.roa (raw, json) Hash identifier: UeSFDfmprcrl6y53Z+M4iQbJKCW6BA9oNuYhj17KW68= Subject key identifier: F3:85:98:A4:E3:8E:8C:2C:42:6A:48:6F:3C:A2:D0:54:A3:83:9E:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B679733448B6CA5E963A54780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06cbe769-5420-3106-a78d-8b24bc476121.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.29.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:33:44:8b:6c:a5:e9:63:a5:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f68a197d-1964-40bc-8b63-e5f4048fddfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:a8:6d:37:e6:33:42:d9:e8:ca:42:fd:8d: 3a:be:35:67:be:5e:4d:f4:5d:3a:65:a2:2b:15:c7: ab:14:a0:ca:a9:c8:a7:07:47:66:7c:3d:fa:17:7a: 81:89:4d:05:a8:8e:1f:aa:95:68:4b:43:10:ec:fb: 15:8d:81:44:da:41:02:47:bc:ec:14:da:e9:45:ba: 59:47:88:2d:c7:41:21:52:3b:67:d0:dc:0f:79:5f: 40:bd:00:50:85:ba:23:93:96:f0:c3:e5:37:a7:ab: 86:98:1d:93:ca:7b:b0:d6:c7:0b:7c:c2:92:aa:c8: bd:bf:8a:9a:ee:eb:bf:ce:fd:7a:c7:96:85:4c:25: 2f:f1:e2:0e:49:26:59:b0:61:2a:4b:17:d0:30:79: ab:84:25:cc:a2:20:bd:0a:67:41:93:45:f1:d9:23: 96:50:e6:98:0e:6b:34:7f:86:10:9f:cd:93:99:76: 37:c6:8d:53:75:b3:b0:e1:28:06:9d:b6:79:2d:76: 3c:84:5e:77:e4:4e:cc:6a:e6:23:a6:f2:87:15:a1: 45:99:ce:49:b4:df:c2:53:67:48:e9:37:75:db:2e: 29:ac:24:73:eb:94:ce:ce:81:78:13:64:2d:fa:23: ce:6a:a5:c4:08:29:35:19:ff:39:2f:2f:15:ad:59: dd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:85:98:A4:E3:8E:8C:2C:42:6A:48:6F:3C:A2:D0:54:A3:83:9E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06cbe769-5420-3106-a78d-8b24bc476121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0e:9a:36:ff:81:93:fc:c4:38:b3:64:37:f8:4a:1f:4b:c0: 99:97:65:b6:f0:6c:2e:3f:50:d3:d0:34:bc:73:92:79:b0:c6: 3f:eb:de:57:59:ce:aa:9b:cd:f2:6f:0b:90:2f:98:43:1c:2c: 7c:1d:ca:5f:39:31:b7:52:34:61:c3:b3:88:64:a4:5f:64:ac: 99:35:b7:f0:0e:77:83:28:39:03:c6:a7:03:5c:95:2d:e2:23: ae:26:fd:d8:b7:37:93:9e:6b:58:a4:63:72:bf:b1:86:e1:4d: d1:be:1c:4e:76:a5:44:d5:4c:1c:51:78:9c:ae:94:f9:de:0c: 39:f6:e6:f9:79:a5:64:0d:98:47:e4:c7:a7:5e:1b:06:29:e9: e2:3a:d8:b7:0f:0d:fb:c7:3f:4c:3f:f8:7a:a0:4e:e2:cc:c3: 62:f3:55:13:ee:10:d5:ff:04:6e:a6:3d:71:32:1d:97:79:34: fd:e6:d7:f3:9d:c0:df:6b:02:2b:b7:df:aa:4c:0f:a6:86:22: a9:29:c2:21:f2:71:58:f1:d7:65:d6:9c:3b:2f:64:95:58:87: ca:98:34:16:fb:ee:90:d0:67:a3:2d:8e:9f:2f:39:3d:9f:8f: ad:9f:8c:c3:13:64:d0:85:6b:82:d5:9b:85:ba:06:6f:06:7a: b1:77:6b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzNEi2yl6WOlR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjY4YTE5N2QtMTk2NC00MGJjLThiNjMtZTVmNDA0OGZkZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluGobTfmM0LZ6MpC/Y06vjVnvl5N9F06ZaIr FcerFKDKqcinB0dmfD36F3qBiU0FqI4fqpVoS0MQ7PsVjYFE2kECR7zsFNrpRbpZ R4gtx0EhUjtn0NwPeV9AvQBQhbojk5bww+U3p6uGmB2Tynuw1scLfMKSqsi9v4qa 7uu/zv16x5aFTCUv8eIOSSZZsGEqSxfQMHmrhCXMoiC9CmdBk0Xx2SOWUOaYDms0 f4YQn82TmXY3xo1TdbOw4SgGnbZ5LXY8hF535E7MauYjpvKHFaFFmc5JtN/CU2dI 6Td12y4prCRz65TOzoF4E2Qt+iPOaqXECCk1Gf85Ly8VrVndewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOFmKTjjowsQmpIbzyi0FSjg541MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDZjYmU3NjktNTQyMC0z MTA2LWE3OGQtOGIyNGJjNDc2MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoOmjb/gZP8xDizZDf4Sh9LwJmXZbbwbC4/UNPQNLxzknmwxj/r3ldZ zqqbzfJvC5AvmEMcLHwdyl85MbdSNGHDs4hkpF9krJk1t/AOd4MoOQPGpwNclS3i I64m/di3N5Oea1ikY3K/sYbhTdG+HE52pUTVTBxReJyulPneDDn25vl5pWQNmEfk x6deGwYp6eI62LcPDfvHP0w/+HqgTuLMw2LzVRPuENX/BG6mPXEyHZd5NP3m1/Od wN9rAiu336pMD6aGIqkpwiHycVjx12XWnDsvZJVYh8qYNBb77pDQZ6Mtjp8vOT2f j62fjMMTZNCFa4LVm4W6Bm8GerF3a2Y= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:12 2025 by rpki-client