$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fabb3c1-0d85-3ffc-aad2-7a9ca5d7d48c.roa File: 0fabb3c1-0d85-3ffc-aad2-7a9ca5d7d48c.roa (raw, json) Hash identifier: miqjf7Y/a3lcZ39K94Y575iM+sqU+KLOLKDFtxfMgvE= Subject key identifier: 50:54:81:1E:3D:50:86:6D:06:D8:D8:E2:EE:65:54:BC:CF:F3:11:FF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CAEE80E960196D3850A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fabb3c1-0d85-3ffc-aad2-7a9ca5d7d48c.roa Signing time: Mon 22 Sep 2025 11:56:50 +0000 ROA not before: Mon 22 Sep 2025 11:56:50 +0000 ROA not after: Sun 21 Dec 2025 12:56:50 +0000 asID: 19905 IP address blocks: 173.18.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:ae:e8:0e:96:01:96:d3:85:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:50 2025 GMT Not After : Dec 21 12:56:50 2025 GMT Subject: CN=fb73ea7f-18f0-40ad-ac7c-f623532c144f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:e8:37:bb:c5:a2:09:d5:f0:08:16:db:ae: 21:82:ae:0c:0a:cb:58:93:1a:20:d7:4d:92:c3:7f: b9:e6:cf:d1:ce:27:7c:95:95:1e:a0:5f:54:17:56: c6:06:65:81:66:30:c6:5f:13:1e:45:8e:1a:71:5f: 23:f6:53:4f:47:84:4a:22:f5:69:c5:41:fc:02:de: 1f:96:bf:e8:cd:c7:b6:e3:49:81:2d:ec:31:84:02: e6:62:ad:e0:56:a7:b8:31:74:c4:43:ba:90:fd:a9: 46:3b:3b:00:30:82:fb:f9:3e:6a:09:3d:10:f3:0a: a2:3e:d0:c5:2c:6c:e6:ad:d3:f2:1a:36:8f:a8:1d: 83:44:1d:05:8a:0f:77:46:34:e8:c8:48:fd:91:13: 6a:0b:27:f8:86:d8:a6:ce:11:07:72:36:34:b7:0b: f8:2c:bd:76:43:56:f0:6d:da:dc:87:72:29:5e:24: 61:b9:83:58:84:47:d7:a1:c9:2d:d8:88:ad:42:32: 29:8b:15:f0:df:17:e3:16:bb:1d:32:d1:e3:bb:d7: e8:35:08:b2:55:a3:3e:41:10:ab:38:4b:d2:03:67: 7d:61:da:7d:db:8d:99:84:7c:81:1b:5d:41:e3:31: 1e:c5:92:4b:e5:fc:c4:0f:46:72:ca:8f:c6:ad:5c: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:81:1E:3D:50:86:6D:06:D8:D8:E2:EE:65:54:BC:CF:F3:11:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0fabb3c1-0d85-3ffc-aad2-7a9ca5d7d48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ad:8d:69:a2:f2:04:63:12:b0:b6:6d:f4:b9:9d:32:07:b6: 64:3c:a4:41:f0:5f:ef:78:ed:11:45:16:4d:31:1d:6d:ef:62: 3b:94:28:61:3f:b8:ac:ea:d3:d3:20:20:fd:54:d4:6e:0e:af: 8e:d4:89:8f:59:05:a3:81:ba:8d:10:59:f9:da:a7:4f:d0:13: 51:b9:37:88:e3:b2:4a:9f:ca:04:5d:16:03:cd:82:3a:bf:48: 48:da:dd:72:6c:53:4c:c8:59:52:b2:7b:53:78:0d:cf:67:16: 25:c1:f7:cb:14:01:a6:03:47:24:51:42:63:a2:ca:be:cc:b2: e5:15:15:55:fa:2e:a8:72:4b:b0:a2:04:97:54:a4:5f:c6:b4: e4:c5:a2:93:1d:c8:2f:15:59:2c:93:1d:ff:a4:a4:9b:df:04: 3b:b7:f1:bb:6b:d4:f4:c7:56:f7:92:23:8a:be:1d:d0:fe:5c: 89:6a:91:16:61:8a:ec:03:01:4f:54:fe:02:24:9c:2f:bf:fe: b4:ec:0f:db:d6:b1:36:a3:94:1d:40:66:da:54:dc:dc:7b:25: 45:da:d0:74:30:b9:c7:99:fb:86:d9:33:a9:e8:43:44:36:b9: 65:3e:b8:cb:d8:3f:07:6b:9f:d4:fd:a2:46:18:f6:50:35:c7: 16:c2:cf:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXK7oDpYBltOFCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTY1MFoXDTI1MTIyMTEyNTY1MFowLzEtMCsGA1UEAxMk ZmI3M2VhN2YtMThmMC00MGFkLWFjN2MtZjYyMzUzMmMxNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVfoN7vFognV8AgW264hgq4MCstYkxog102S w3+55s/Rzid8lZUeoF9UF1bGBmWBZjDGXxMeRY4acV8j9lNPR4RKIvVpxUH8At4f lr/ozce240mBLewxhALmYq3gVqe4MXTEQ7qQ/alGOzsAMIL7+T5qCT0Q8wqiPtDF LGzmrdPyGjaPqB2DRB0Fig93RjToyEj9kRNqCyf4htimzhEHcjY0twv4LL12Q1bw bdrch3IpXiRhuYNYhEfXockt2IitQjIpixXw3xfjFrsdMtHju9foNQiyVaM+QRCr OEvSA2d9Ydp9242ZhHyBG11B4zEexZJL5fzED0Zyyo/GrVzfDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBUgR49UIZtBtjY4u5lVLzP8xH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZhYmIzYzEtMGQ4NS0z ZmZjLWFhZDItN2E5Y2E1ZDdkNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6tjWmi8gRjErC2bfS5nTIHtmQ8pEHwX+947RFFFk0xHW3vYjuUKGE/ uKzq09MgIP1U1G4Or47UiY9ZBaOBuo0QWfnap0/QE1G5N4jjskqfygRdFgPNgjq/ SEja3XJsU0zIWVKye1N4Dc9nFiXB98sUAaYDRyRRQmOiyr7MsuUVFVX6LqhyS7Ci BJdUpF/GtOTFopMdyC8VWSyTHf+kpJvfBDu38btr1PTHVveSI4q+HdD+XIlqkRZh iuwDAU9U/gIknC+//rTsD9vWsTajlB1AZtpU3Nx7JUXa0HQwuceZ+4bZM6noQ0Q2 uWU+uMvYPwdrn9T9okYY9lA1xxbCzw8= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:44 2025 by rpki-client