$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e1d8a7-5725-334d-92a5-7db8302cf95f.roa File: 10e1d8a7-5725-334d-92a5-7db8302cf95f.roa (raw, json) Hash identifier: w+L96v4Nw7tmAC8DHKZ1sdBz4x2KyNDzY3NHRLvXGog= Subject key identifier: 8B:73:5A:56:D1:3D:33:64:FC:5E:98:B0:F4:BE:3D:16:4B:1D:06:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE3EAA9F32FD5C69AFD040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e1d8a7-5725-334d-92a5-7db8302cf95f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.22.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3e:aa:9f:32:fd:5c:69:af:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a67593c3-7972-4cf3-a34e-ec3245533763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:be:7a:f6:6f:3f:0e:6b:fb:c0:8a:2b:46: be:ad:61:ea:7e:14:42:84:75:a3:bc:13:ee:d2:17: ba:cb:af:ed:82:d0:f8:a1:88:b1:18:4e:80:f9:13: c5:9b:ba:9a:77:56:a9:42:a3:18:18:b4:74:94:c4: 30:ed:89:4a:bc:fa:e7:12:f5:d2:4c:36:d5:bf:d4: 22:0e:b9:75:11:25:85:dd:7e:59:3d:82:22:99:29: 4b:04:c6:8d:9c:49:9a:64:c8:57:1a:9a:f3:fd:07: 6b:53:07:40:b9:db:17:81:6b:75:31:1c:3b:00:76: de:59:13:9e:be:46:a4:d8:26:b8:b1:8f:a8:7f:3c: e9:7d:19:7a:e9:41:e9:0a:0f:51:63:c8:c4:4a:00: 55:a4:61:6c:2b:18:44:4a:e1:47:9c:98:a6:4b:99: 7f:c8:77:6b:aa:82:5b:71:43:f4:a5:f1:e8:27:92: dc:e1:52:06:3f:6d:82:d2:dc:62:81:66:93:b3:8d: 68:ce:3a:31:de:b3:c5:3a:da:dd:a7:98:2a:e4:42: 3f:e7:ca:fd:75:c1:82:40:45:8c:54:87:99:11:70: 5e:ed:94:26:3f:4d:74:df:09:97:3a:38:75:87:42: 85:1c:ba:cf:70:ea:63:9b:81:b6:d2:f4:49:c2:4f: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:73:5A:56:D1:3D:33:64:FC:5E:98:B0:F4:BE:3D:16:4B:1D:06:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e1d8a7-5725-334d-92a5-7db8302cf95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3b:a2:a1:21:48:9d:1f:94:e1:3c:d4:5f:0a:7c:8b:fa:48: df:5f:e8:13:0b:d5:34:e0:28:c1:de:c5:9a:9f:4d:df:4a:0e: 20:ae:65:ec:77:ad:27:21:bb:96:4f:a5:fc:37:08:36:56:a5: 9f:5f:01:ef:b6:c1:4d:b9:4e:9b:11:8d:3a:f2:37:aa:e8:60: b8:fd:e1:b3:ef:5a:a6:c5:86:70:40:2f:14:d6:5a:63:f0:e8: af:29:46:43:25:92:0d:38:70:c0:2b:38:82:ea:d3:11:6a:37: 17:73:e6:08:c5:25:e0:1d:ba:9c:be:1e:29:7c:26:75:5c:64: 60:13:f7:f4:17:7e:3e:ce:ca:26:94:ab:be:54:88:5f:50:ba: df:35:20:38:70:9a:9e:70:f5:59:6b:a8:1e:90:9b:72:93:b4: 9d:e2:24:ea:87:6b:29:7d:b3:f3:d3:af:9d:a7:1e:16:24:98: 3c:e3:12:c6:0d:31:9f:4e:5b:ee:cf:74:67:79:75:f4:cf:8a: 2d:2c:a6:02:3f:43:b5:bc:f3:fa:8f:fb:3e:43:c9:23:0a:00: e7:fe:57:43:5c:6a:24:2d:ac:64:42:8c:cf:df:24:81:60:3a: d4:53:fc:1d:95:ce:1e:f8:2f:60:20:dd:14:1f:b2:7d:d2:04: a4:36:d9:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzj6qnzL9XGmv0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTY3NTkzYzMtNzk3Mi00Y2YzLWEzNGUtZWMzMjQ1NTMzNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZm+evZvPw5r+8CKK0a+rWHqfhRChHWjvBPu 0he6y6/tgtD4oYixGE6A+RPFm7qad1apQqMYGLR0lMQw7YlKvPrnEvXSTDbVv9Qi Drl1ESWF3X5ZPYIimSlLBMaNnEmaZMhXGprz/QdrUwdAudsXgWt1MRw7AHbeWROe vkak2Ca4sY+ofzzpfRl66UHpCg9RY8jESgBVpGFsKxhESuFHnJimS5l/yHdrqoJb cUP0pfHoJ5Lc4VIGP22C0txigWaTs41ozjox3rPFOtrdp5gq5EI/58r9dcGCQEWM VIeZEXBe7ZQmP0103wmXOjh1h0KFHLrPcOpjm4G20vRJwk9bNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItzWlbRPTNk/F6YsPS+PRZLHQZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTBlMWQ4YTctNTcyNS0z MzRkLTkyYTUtN2RiODMwMmNmOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ7oqEhSJ0flOE81F8KfIv6SN9f6BML1TTgKMHexZqfTd9KDiCuZex3 rSchu5ZPpfw3CDZWpZ9fAe+2wU25TpsRjTryN6roYLj94bPvWqbFhnBALxTWWmPw 6K8pRkMlkg04cMArOILq0xFqNxdz5gjFJeAdupy+Hil8JnVcZGAT9/QXfj7OyiaU q75UiF9Qut81IDhwmp5w9VlrqB6Qm3KTtJ3iJOqHayl9s/PTr52nHhYkmDzjEsYN MZ9OW+7PdGd5dfTPii0spgI/Q7W88/qP+z5DySMKAOf+V0NcaiQtrGRCjM/fJIFg OtRT/B2Vzh74L2Ag3RQfsn3SBKQ22fA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:32 2025 by rpki-client