$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/070215ed-5304-3ec3-aa34-ca6f350470f4.roa File: 070215ed-5304-3ec3-aa34-ca6f350470f4.roa (raw, json) Hash identifier: Zdj5DzoTkoKg0gnksYk3tsROICuue6YHbDRQDbPJMd4= Subject key identifier: 26:49:1C:05:26:89:9C:D2:80:84:FD:71:F9:E4:3B:EB:00:2E:08:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201D691D5776686128CEA60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/070215ed-5304-3ec3-aa34-ca6f350470f4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.29.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d6:91:d5:77:66:86:12:8c:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=003ad27c-fa09-46d2-b7d3-bb42f3875917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a6:65:aa:4e:82:38:84:f1:b5:6d:bb:f4:7b: 64:cf:25:d2:90:c7:d5:36:d7:bc:25:d1:38:52:db: cb:42:33:5b:9a:d8:9e:8f:66:d6:53:d4:e1:b5:d7: 10:8d:1a:43:49:53:35:66:fc:e3:1a:6c:a2:88:05: 1e:5a:0b:ef:da:11:4b:d5:7e:6c:69:ed:bc:3c:90: ed:b8:7b:80:b1:e1:ca:0f:c9:e4:f1:10:0b:5d:80: ac:1b:3a:a6:f4:15:7b:5e:c2:eb:62:20:f1:7f:7c: 10:0b:3e:1f:98:c1:57:a5:8a:9a:65:87:e4:54:a6: fe:f7:f4:9e:c7:77:04:35:12:9d:40:5e:60:3b:eb: 69:9e:8d:3e:58:bf:b3:dc:8c:a7:72:02:b9:26:49: 80:87:b7:af:d6:9e:bb:8b:f3:a7:30:a1:3d:43:6c: 87:71:0b:10:fd:0a:19:12:86:3d:1a:68:06:c2:4c: c6:10:6c:6d:bf:a3:ec:3a:20:27:be:e4:9f:85:0c: 75:f3:a5:ff:d2:da:86:00:ba:26:40:44:58:d9:1d: b9:bd:2e:ff:8a:f8:9b:d8:b4:b2:8b:24:1f:70:ba: a0:ff:c9:76:44:90:6e:ee:60:5f:51:16:55:81:80: 1c:28:5b:2d:8c:fa:5a:35:f9:b7:98:c4:ba:cf:78: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:49:1C:05:26:89:9C:D2:80:84:FD:71:F9:E4:3B:EB:00:2E:08:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/070215ed-5304-3ec3-aa34-ca6f350470f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d4:a6:49:5e:c5:08:08:50:8d:c7:72:c6:3b:70:df:07:c3: dd:cb:34:ac:4b:4e:f1:0a:e1:89:87:76:26:46:bb:98:4f:60: 20:43:12:7e:3d:52:c7:90:b9:f3:e6:36:97:29:e2:10:37:ab: bf:82:1e:c5:1b:a1:cd:74:9b:59:5b:02:86:15:cc:7b:13:63: 6c:43:d8:02:78:e7:fd:d8:b0:5f:78:91:16:6c:37:38:62:64: a5:89:8c:7e:26:68:8d:b3:4a:fc:be:c1:59:45:54:e8:f4:98: 52:3d:29:f2:44:d5:fc:49:3c:94:de:a8:d3:5e:4e:b1:48:35: 83:c8:b8:9e:56:72:41:ef:64:d0:b9:2b:f8:00:09:c9:d8:64: e6:8b:62:36:18:10:f7:ae:fd:f8:14:42:5d:ea:62:2b:81:81: eb:64:cc:67:a9:8f:4c:22:0a:b1:38:83:8e:ad:50:22:a5:79: 19:ec:02:c0:dd:d0:06:7d:27:94:2f:39:86:b4:2c:50:d1:97: d6:80:92:9c:b9:16:85:d5:04:56:83:1f:a0:c6:8f:d9:57:10: e8:cf:38:65:bc:95:98:f5:71:bf:16:19:04:e1:da:75:24:72: f6:43:f2:d8:f7:cc:ed:c2:83:92:1f:81:d4:4c:35:91:2a:ef: 76:5c:b3:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdaR1XdmhhKM6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDAzYWQyN2MtZmEwOS00NmQyLWI3ZDMtYmI0MmYzODc1OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKZlqk6COITxtW279HtkzyXSkMfVNte8JdE4 UtvLQjNbmtiej2bWU9ThtdcQjRpDSVM1ZvzjGmyiiAUeWgvv2hFL1X5sae28PJDt uHuAseHKD8nk8RALXYCsGzqm9BV7XsLrYiDxf3wQCz4fmMFXpYqaZYfkVKb+9/Se x3cENRKdQF5gO+tpno0+WL+z3IyncgK5JkmAh7ev1p67i/OnMKE9Q2yHcQsQ/QoZ EoY9GmgGwkzGEGxtv6PsOiAnvuSfhQx186X/0tqGALomQERY2R25vS7/ivib2LSy iyQfcLqg/8l2RJBu7mBfURZVgYAcKFstjPpaNfm3mMS6z3jPUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZJHAUmiZzSgIT9cfnkO+sALggpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDcwMjE1ZWQtNTMwNC0z ZWMzLWFhMzQtY2E2ZjM1MDQ3MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPUpklexQgIUI3HcsY7cN8Hw93LNKxLTvEK4YmHdiZGu5hPYCBDEn49 UseQufPmNpcp4hA3q7+CHsUboc10m1lbAoYVzHsTY2xD2AJ45/3YsF94kRZsNzhi ZKWJjH4maI2zSvy+wVlFVOj0mFI9KfJE1fxJPJTeqNNeTrFINYPIuJ5WckHvZNC5 K/gACcnYZOaLYjYYEPeu/fgUQl3qYiuBgetkzGepj0wiCrE4g46tUCKleRnsAsDd 0AZ9J5QvOYa0LFDRl9aAkpy5FoXVBFaDH6DGj9lXEOjPOGW8lZj1cb8WGQTh2nUk cvZD8tj3zO3Cg5IfgdRMNZEq73Zcsyo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:14 2025 by rpki-client