$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1197c38a-80f3-3e4f-9d55-d6f1995d0ec7.roa File: 1197c38a-80f3-3e4f-9d55-d6f1995d0ec7.roa (raw, json) Hash identifier: +7iF3xn/ErcXoXGGDiqBMnp8F2he4YCxA5Wnt3cSRF0= Subject key identifier: 45:E5:63:70:85:0E:34:B2:8F:62:75:BC:C6:09:34:FB:76:BB:A6:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6172D66C9422F19D51DBDE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1197c38a-80f3-3e4f-9d55-d6f1995d0ec7.roa Signing time: Wed 01 Oct 2025 20:12:30 +0000 ROA not before: Wed 01 Oct 2025 20:12:30 +0000 ROA not after: Tue 30 Dec 2025 21:12:30 +0000 asID: 19905 IP address blocks: 173.23.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:72:d6:6c:94:22:f1:9d:51:db:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:12:30 2025 GMT Not After : Dec 30 21:12:30 2025 GMT Subject: CN=7b2f2942-078e-4f7a-b7dc-c9e1a1534269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:ca:8e:60:7d:df:c0:bd:99:fe:e9:55:b8: cf:99:5d:0c:52:09:f5:34:87:65:d3:f8:68:f4:3a: c3:c1:d6:ac:d7:e9:a9:df:a6:55:1d:e9:48:de:79: f7:c8:d6:ba:bf:5e:7c:a8:0a:22:94:25:52:66:69: 1f:9b:30:68:b1:05:b4:36:86:fb:94:7e:3c:ad:85: d2:d9:26:5b:66:02:1b:d3:26:36:f2:e5:ec:4a:24: b9:09:83:1b:2b:6a:71:b6:21:4e:c4:87:86:8a:bb: 8a:f3:a0:11:a7:e3:76:aa:87:59:35:9b:e1:5e:72: 53:04:8d:b5:8f:3c:56:73:e3:ce:7e:f0:af:78:c4: e3:b0:0d:4f:22:2a:90:f9:c5:2b:3d:77:e8:16:e2: 2f:f8:96:8b:06:77:8c:d1:d7:f2:1f:df:3b:df:1c: d5:7c:a6:38:f7:84:5b:31:75:43:02:92:b0:9f:52: 4b:a1:6b:ba:b8:34:c6:cd:09:d0:b3:58:1c:ff:bd: b2:a0:9e:7f:6d:b9:17:ca:b1:65:21:a0:d2:98:f0: 77:08:da:ab:7e:58:17:7b:9b:74:7d:37:42:2a:2a: 80:2a:54:77:5c:c9:b5:26:00:b5:23:32:57:4b:9c: 08:f4:5d:34:95:92:03:b8:38:f9:3e:8b:ff:f2:79: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E5:63:70:85:0E:34:B2:8F:62:75:BC:C6:09:34:FB:76:BB:A6:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1197c38a-80f3-3e4f-9d55-d6f1995d0ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a0:34:ec:2a:96:67:13:ba:4e:5a:fe:a7:93:db:3b:b6:0c: 11:69:50:08:94:98:50:b4:6e:03:2d:31:a7:e3:c7:2c:7c:b2: 2e:fc:cf:95:41:6f:f9:66:c4:ab:97:5e:8f:9d:1e:9e:bd:53: 4a:9c:c3:e1:bc:6e:4d:61:66:4b:6a:fd:ed:24:8c:d3:26:04: 8a:da:03:00:a8:f9:e3:18:43:3c:80:bb:1f:eb:18:be:35:a1: b0:22:49:e5:55:ee:3f:e3:c8:d6:34:5a:08:57:68:9e:bc:52: ed:e4:32:72:1d:4c:e4:e9:2b:f4:37:8d:6d:62:49:79:94:f8: d1:2d:31:3b:73:a1:3d:d5:57:84:a9:44:2c:cf:35:44:86:c5: d2:f7:8b:b5:0d:70:26:ad:46:bc:f7:59:00:89:ec:d6:b7:69: 8d:53:34:b6:60:1b:46:f1:1c:f9:dd:6a:48:f4:e9:01:e2:ea: 2d:55:12:e8:94:86:a9:32:dc:7b:d0:1b:79:b5:91:fa:15:b1: 18:50:57:98:ca:5c:50:59:25:88:4d:5a:8a:61:c1:2d:b3:1d: 5c:a7:2f:69:fc:88:08:78:95:b0:f9:c3:8f:48:56:74:b0:f5: bd:d8:f0:69:45:b9:4d:fe:06:3d:3f:03:cf:90:5f:13:26:99: 52:44:f9:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthctZslCLxnVHb3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTIzMFoXDTI1MTIzMDIxMTIzMFowLzEtMCsGA1UEAxMk N2IyZjI5NDItMDc4ZS00ZjdhLWI3ZGMtYzllMWExNTM0MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsTKjmB938C9mf7pVbjPmV0MUgn1NIdl0/ho 9DrDwdas1+mp36ZVHelI3nn3yNa6v158qAoilCVSZmkfmzBosQW0Nob7lH48rYXS 2SZbZgIb0yY28uXsSiS5CYMbK2pxtiFOxIeGiruK86ARp+N2qodZNZvhXnJTBI21 jzxWc+POfvCveMTjsA1PIiqQ+cUrPXfoFuIv+JaLBneM0dfyH9873xzVfKY494Rb MXVDApKwn1JLoWu6uDTGzQnQs1gc/72yoJ5/bbkXyrFlIaDSmPB3CNqrflgXe5t0 fTdCKiqAKlR3XMm1JgC1IzJXS5wI9F00lZIDuDj5Pov/8nnANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXlY3CFDjSyj2J1vMYJNPt2u6bnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTE5N2MzOGEtODBmMy0z ZTRmLTlkNTUtZDZmMTk5NWQwZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+gNOwqlmcTuk5a/qeT2zu2DBFpUAiUmFC0bgMtMafjxyx8si78z5VB b/lmxKuXXo+dHp69U0qcw+G8bk1hZktq/e0kjNMmBIraAwCo+eMYQzyAux/rGL41 obAiSeVV7j/jyNY0WghXaJ68Uu3kMnIdTOTpK/Q3jW1iSXmU+NEtMTtzoT3VV4Sp RCzPNUSGxdL3i7UNcCatRrz3WQCJ7Na3aY1TNLZgG0bxHPndakj06QHi6i1VEuiU hqky3HvQG3m1kfoVsRhQV5jKXFBZJYhNWophwS2zHVynL2n8iAh4lbD5w49IVnSw 9b3Y8GlFuU3+Bj0/A8+QXxMmmVJE+ds= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:40 2025 by rpki-client