$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa File: 0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa (raw, json) Hash identifier: bKCZEATxIjDG7M91Aoslpuu+q/qHwP0sfJNYiUEWy2I= Subject key identifier: 21:CD:52:BE:71:7F:F0:ED:3C:C9:8B:E9:96:C9:C4:A3:08:B1:05:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFC1C21A46F03B040B9CDCB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 19905 IP address blocks: 173.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:21:a4:6f:03:b0:40:b9:cd:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=e28544cf-393c-4781-8047-42e0d7f3394a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:59:f7:b7:cd:cd:be:d7:33:9a:2f:b4:ae: 41:97:e7:72:99:93:93:15:2b:fa:e0:66:b8:74:22: ab:f2:d9:3b:36:6b:6c:30:ac:ea:0c:7a:aa:0c:b0: 58:ab:53:77:ea:29:7e:eb:9d:4b:2e:ae:aa:45:f2: 35:b2:4f:80:87:54:2d:cc:41:a5:0b:b2:fb:0a:15: d3:3a:71:9c:6b:74:1d:e3:41:72:4e:e9:b3:33:86: 6e:cc:68:7c:bb:b4:f1:67:d5:bc:86:75:21:43:ba: 0a:92:38:52:34:cb:57:dc:94:52:9e:20:ff:e6:8a: 0c:dc:5f:b9:24:e6:57:63:a7:05:06:9d:36:ff:e8: a9:0e:6c:bc:10:26:c3:a7:0e:41:9e:3f:1b:38:3a: 63:14:f7:4f:86:9e:bd:dd:26:b6:49:b6:93:fe:27: dd:8f:55:0d:09:b1:db:d1:76:25:74:ac:95:ae:59: 84:ef:db:a2:34:1d:f3:06:6d:bc:93:39:b8:b3:ca: 1f:58:1c:0f:93:37:76:85:9f:4d:77:0b:fd:f4:18: c1:af:9e:f0:db:c6:36:16:5e:2b:0e:5d:f0:f5:98: e8:ef:f3:44:94:bb:41:fa:ea:a5:65:bd:95:d6:59: 93:47:1c:58:aa:3d:b8:e8:1a:50:54:49:1f:5d:73: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CD:52:BE:71:7F:F0:ED:3C:C9:8B:E9:96:C9:C4:A3:08:B1:05:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a8:32:d2:a2:66:b5:3a:20:ad:02:91:d0:c1:d6:db:52:3f: d8:c6:5d:3b:f2:e4:32:eb:5a:92:99:f1:c3:04:22:85:b2:72: 3a:91:95:71:1f:42:a5:10:95:d2:88:13:c7:46:0c:29:1e:14: 20:7c:11:da:54:e4:c6:eb:04:87:b4:08:2b:4a:9b:30:b4:be: 9b:86:4e:93:01:e4:81:83:4d:0b:ba:f0:f1:3b:ef:32:59:d5: df:de:85:d6:06:9d:8e:67:d4:a5:b9:ac:a4:5c:4c:ba:47:16: f1:56:84:86:3a:4e:bf:c5:62:ed:f8:a7:e0:22:19:0c:37:2e: d8:5b:e7:5a:bc:a9:f2:25:6c:69:02:ee:eb:5a:fa:87:44:67: 38:53:b7:9f:9e:c4:cf:0e:ac:b4:41:64:c1:3f:50:d3:82:19: 5e:71:b5:24:e4:11:37:19:58:06:13:35:ff:ac:20:91:10:2e: 86:a4:00:5a:21:f1:8c:f0:89:4a:56:0e:f1:13:4e:1d:63:c1: 4c:d0:44:5b:eb:e7:be:84:2e:21:71:d7:2a:35:9c:e5:da:8d: 6d:90:7d:e7:16:b8:b3:e8:59:98:1d:2e:43:3f:99:cc:be:d5: 16:0d:e1:f7:2c:e8:cd:87:b5:55:c9:df:30:37:68:27:0c:14: ba:01:54:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HCGkbwOwQLnNy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTI4NTQ0Y2YtMzkzYy00NzgxLTgwNDctNDJlMGQ3ZjMzOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqdZ97fNzb7XM5ovtK5Bl+dymZOTFSv64Ga4 dCKr8tk7NmtsMKzqDHqqDLBYq1N36il+651LLq6qRfI1sk+Ah1QtzEGlC7L7ChXT OnGca3Qd40FyTumzM4ZuzGh8u7TxZ9W8hnUhQ7oKkjhSNMtX3JRSniD/5ooM3F+5 JOZXY6cFBp02/+ipDmy8ECbDpw5Bnj8bODpjFPdPhp693Sa2SbaT/ifdj1UNCbHb 0XYldKyVrlmE79uiNB3zBm28kzm4s8ofWBwPkzd2hZ9Ndwv99BjBr57w28Y2Fl4r Dl3w9Zjo7/NElLtB+uqlZb2V1lmTRxxYqj246BpQVEkfXXPGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHNUr5xf/DtPMmL6ZbJxKMIsQWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg2MWI3YjgtNDdmMS0z ZmYyLWExNWQtZjU2NjkwNTJlNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKoMtKiZrU6IK0CkdDB1ttSP9jGXTvy5DLrWpKZ8cMEIoWycjqRlXEf QqUQldKIE8dGDCkeFCB8EdpU5MbrBIe0CCtKmzC0vpuGTpMB5IGDTQu68PE77zJZ 1d/ehdYGnY5n1KW5rKRcTLpHFvFWhIY6Tr/FYu34p+AiGQw3Lthb51q8qfIlbGkC 7uta+odEZzhTt5+exM8OrLRBZME/UNOCGV5xtSTkETcZWAYTNf+sIJEQLoakAFoh 8YzwiUpWDvETTh1jwUzQRFvr576ELiFx1yo1nOXajW2QfecWuLPoWZgdLkM/mcy+ 1RYN4fcs6M2HtVXJ3zA3aCcMFLoBVLo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:00 2025 by rpki-client