$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ba53b7-c262-3402-a2da-c0b0f77d1906.roa File: 09ba53b7-c262-3402-a2da-c0b0f77d1906.roa (raw, json) Hash identifier: 6GFa5ZE4DOKLS4b41OWvKL6/6X4objiCLejpkP+5vPY= Subject key identifier: 61:FB:8E:F0:E4:E4:E5:78:01:27:1B:C3:20:A1:B1:F0:0A:3C:4B:D2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62021F64B749E4C826CB8E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ba53b7-c262-3402-a2da-c0b0f77d1906.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.23.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1f:64:b7:49:e4:c8:26:cb:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=51d133a2-3175-455d-80b2-8c19cf54d5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:76:96:54:a9:67:29:e4:c2:83:24:66:31:83: 4d:81:9c:56:85:d7:b5:0c:08:b4:53:e4:5e:23:3a: fa:94:13:d6:94:cc:3c:1b:e0:fb:59:14:03:a5:52: 80:d3:c1:64:a6:1b:69:83:d4:d9:ba:e9:63:be:ac: d7:2c:4a:1f:1f:e2:4c:d7:8c:e5:d9:ff:33:9f:8b: a8:17:68:f7:31:04:63:77:16:e3:56:f6:ad:73:7e: ed:8d:16:0e:64:18:1e:7a:1a:e6:5b:22:3f:91:66: 67:a7:37:59:20:15:8c:41:a2:72:c0:de:60:e1:b1: 5c:72:46:b0:35:5b:85:86:74:2a:df:f5:7a:78:c8: 23:86:97:d9:bd:45:bf:ed:5d:9d:e7:82:b0:30:f5: 5c:2c:a9:9c:6b:87:37:7e:4c:8e:e5:64:f0:f7:9c: 34:ba:80:bd:21:75:10:62:7f:83:8a:9e:16:af:8c: e0:a0:62:c0:0d:7f:aa:0a:bf:90:4c:56:8f:18:66: 33:a9:5a:0c:5d:95:b5:c9:52:19:9a:ca:df:d2:05: e7:a2:8c:7d:2f:9f:ea:62:91:81:8d:6c:95:76:b3: f8:4b:5c:23:f4:47:e7:dd:e6:61:4d:c7:79:4c:58: b7:74:14:f0:f2:3b:a5:00:ae:1d:dc:e6:88:57:3b: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FB:8E:F0:E4:E4:E5:78:01:27:1B:C3:20:A1:B1:F0:0A:3C:4B:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ba53b7-c262-3402-a2da-c0b0f77d1906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9a:c4:6a:52:f1:4a:49:90:59:24:80:16:ac:17:a5:fb:2b: d0:de:f1:bc:29:8a:48:1c:05:04:a9:ed:35:03:5c:c0:94:3b: d8:1d:48:7e:a1:08:d7:36:7e:25:79:18:47:65:60:ad:8b:78: 73:4a:5c:77:ce:84:0d:96:b3:f5:ad:47:fe:48:a5:f7:38:27: 02:78:82:6d:46:04:56:e4:8c:95:46:53:63:83:ad:df:2d:12: 44:af:c2:2c:74:bd:26:c8:64:68:98:af:92:0b:45:d1:3f:f7: 0f:24:89:fc:19:5f:7b:51:8e:09:54:74:62:25:59:b8:31:2c: a0:40:86:2c:dc:27:fb:60:a6:77:1f:98:76:12:ee:13:52:e6: 09:09:57:01:e8:97:f4:9b:5f:78:06:f2:be:e8:27:72:c0:17: dc:65:4a:f0:3f:8c:a9:96:59:c4:a8:d8:1f:dd:9f:c1:ae:a1: 89:a0:a6:65:06:49:8e:bf:c1:39:18:b9:c6:66:ce:27:77:5c: e3:af:5f:4d:fa:eb:3d:12:9c:8f:ae:87:b8:f8:4b:ac:ef:c6: 74:66:0b:cd:ef:17:b8:79:33:81:09:16:04:0b:82:c9:ba:48: 29:5c:99:ea:a8:0d:64:cd:79:92:7c:a8:3c:0d:cd:5c:50:17: 5d:e6:b4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAh9kt0nkyCbLjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTFkMTMzYTItMzE3NS00NTVkLTgwYjItOGMxOWNmNTRkNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXaWVKlnKeTCgyRmMYNNgZxWhde1DAi0U+Re Izr6lBPWlMw8G+D7WRQDpVKA08Fkphtpg9TZuuljvqzXLEofH+JM14zl2f8zn4uo F2j3MQRjdxbjVvatc37tjRYOZBgeehrmWyI/kWZnpzdZIBWMQaJywN5g4bFcckaw NVuFhnQq3/V6eMgjhpfZvUW/7V2d54KwMPVcLKmca4c3fkyO5WTw95w0uoC9IXUQ Yn+Dip4Wr4zgoGLADX+qCr+QTFaPGGYzqVoMXZW1yVIZmsrf0gXnoox9L5/qYpGB jWyVdrP4S1wj9Efn3eZhTcd5TFi3dBTw8julAK4d3OaIVzvOPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH7jvDk5OV4AScbwyChsfAKPEvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDliYTUzYjctYzI2Mi0z NDAyLWEyZGEtYzBiMGY3N2QxOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmaxGpS8UpJkFkkgBasF6X7K9De8bwpikgcBQSp7TUDXMCUO9gdSH6h CNc2fiV5GEdlYK2LeHNKXHfOhA2Ws/WtR/5Ipfc4JwJ4gm1GBFbkjJVGU2ODrd8t EkSvwix0vSbIZGiYr5ILRdE/9w8kifwZX3tRjglUdGIlWbgxLKBAhizcJ/tgpncf mHYS7hNS5gkJVwHol/SbX3gG8r7oJ3LAF9xlSvA/jKmWWcSo2B/dn8GuoYmgpmUG SY6/wTkYucZmzid3XOOvX0366z0SnI+uh7j4S6zvxnRmC83vF7h5M4EJFgQLgsm6 SClcmeqoDWTNeZJ8qDwNzVxQF13mtFM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:54 2025 by rpki-client