$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0dd1ba9f-7c4b-31e2-8ae7-10b889cc0d3b.roa File: 0dd1ba9f-7c4b-31e2-8ae7-10b889cc0d3b.roa (raw, json) Hash identifier: A86p84l+cPP52AD2ONZ84xwAYLlQ1pJQDCibdTVX800= Subject key identifier: EE:AC:17:80:62:B1:EE:F5:01:8F:0E:2B:F1:E4:04:37:DF:9D:70:DC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B52A764E561E7B4B4A2055680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0dd1ba9f-7c4b-31e2-8ae7-10b889cc0d3b.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 30036 IP address blocks: 173.25.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:64:e5:61:e7:b4:b4:a2:05:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=7052a142-7493-4c03-9ae3-6f7c945dd18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:76:6a:df:e9:bf:d4:b3:bc:f7:55:b8:57: 47:04:bb:a7:81:a0:e9:a4:bd:80:27:6e:b0:45:d4: 45:ef:bd:62:7f:25:c5:c3:5c:af:4b:7b:aa:f6:11: 73:06:aa:c2:00:69:b5:61:06:05:16:2c:2f:ba:02: d5:da:95:9e:7b:18:1e:f6:4b:ed:23:07:82:76:17: 6b:f7:77:20:57:9e:97:fa:ab:43:7f:23:df:33:76: ed:8c:33:07:66:e2:91:97:86:e4:7c:7d:6e:96:ef: 4d:d6:de:4e:c2:ab:74:72:a8:cf:68:10:78:22:21: 25:8a:62:84:46:ba:98:44:e5:23:9d:b9:0d:9b:47: 3f:aa:c9:9d:fd:29:95:e6:48:4e:d7:6d:ef:ec:c7: 21:09:b0:b2:04:3a:80:04:49:00:41:eb:9a:be:d2: af:e5:c5:14:bd:b5:88:1f:62:8d:d7:36:94:08:56: 26:c3:7e:52:57:03:18:ad:e6:40:b4:12:32:bc:81: 81:2d:43:8f:bc:52:a2:e2:55:00:45:ea:23:4a:39: cc:b0:8d:b6:14:c3:3c:9b:25:48:f4:de:08:65:20: 3d:d8:89:14:05:b2:90:31:51:50:e1:f4:db:9c:2e: 05:51:58:35:e5:10:a2:b2:09:71:32:3c:d0:65:a9: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AC:17:80:62:B1:EE:F5:01:8F:0E:2B:F1:E4:04:37:DF:9D:70:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0dd1ba9f-7c4b-31e2-8ae7-10b889cc0d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a8:ec:6a:8b:63:02:19:f1:30:f9:1f:98:f5:bb:24:8f:6b: 37:2f:28:88:52:1d:a9:58:ff:c0:54:07:41:1d:1f:1f:77:4b: d2:00:ee:4c:b5:d3:6c:5e:e2:ca:a4:dd:a4:30:3d:70:42:55: 8a:97:90:8c:2c:de:c4:17:21:5a:8b:6e:62:13:0d:98:20:00: fd:9d:2e:3a:86:ff:a7:9f:57:ca:26:6c:aa:ea:e0:6b:ab:62: de:04:3d:69:59:6d:47:9c:8a:76:e1:c8:6d:7f:2b:d4:4d:19: c6:1c:c9:1d:fc:40:2a:6e:03:57:23:cd:cf:0d:9d:ff:78:86: 0f:8b:66:5c:dc:a2:9a:a3:84:e7:49:d0:37:af:a2:b3:70:c7: fd:87:32:18:49:e6:95:43:71:0a:78:76:cd:97:4b:32:a2:d0: f6:ea:91:fc:08:ff:f4:aa:55:55:05:73:d8:da:8c:de:21:ba: 6b:60:cf:e0:61:89:a2:d4:aa:83:42:1f:18:f2:e2:28:03:26: 4b:31:a8:f2:ea:4f:f7:b7:ea:96:4d:61:08:8b:b7:ee:32:a0: dc:da:3c:a8:4a:d1:1e:2f:42:28:50:f5:27:5c:2b:0c:e2:33: 70:de:10:a8:5f:69:0b:4b:ad:8a:e5:95:2a:dc:de:07:67:78: 9e:5b:32:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2TlYee0tKIFVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NzA1MmExNDItNzQ5My00YzAzLTlhZTMtNmY3Yzk0NWRkMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRR2at/pv9SzvPdVuFdHBLungaDppL2AJ26w RdRF771ifyXFw1yvS3uq9hFzBqrCAGm1YQYFFiwvugLV2pWeexge9kvtIweCdhdr 93cgV56X+qtDfyPfM3btjDMHZuKRl4bkfH1ulu9N1t5Owqt0cqjPaBB4IiElimKE RrqYROUjnbkNm0c/qsmd/SmV5khO123v7MchCbCyBDqABEkAQeuavtKv5cUUvbWI H2KN1zaUCFYmw35SVwMYreZAtBIyvIGBLUOPvFKi4lUAReojSjnMsI22FMM8myVI 9N4IZSA92IkUBbKQMVFQ4fTbnC4FUVg15RCisglxMjzQZalBwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6sF4Bise71AY8OK/HkBDffnXDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGRkMWJhOWYtN2M0Yi0z MWUyLThhZTctMTBiODg5Y2MwZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyo7GqLYwIZ8TD5H5j1uySPazcvKIhSHalY/8BUB0EdHx93S9IA7ky1 02xe4sqk3aQwPXBCVYqXkIws3sQXIVqLbmITDZggAP2dLjqG/6efV8ombKrq4Gur Yt4EPWlZbUecinbhyG1/K9RNGcYcyR38QCpuA1cjzc8Nnf94hg+LZlzcopqjhOdJ 0DevorNwx/2HMhhJ5pVDcQp4ds2XSzKi0PbqkfwI//SqVVUFc9jajN4humtgz+Bh iaLUqoNCHxjy4igDJksxqPLqT/e36pZNYQiLt+4yoNzaPKhK0R4vQihQ9SdcKwzi M3DeEKhfaQtLrYrllSrc3gdneJ5bMtc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:02 2025 by rpki-client