$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa File: 11b3517b-f12e-375d-b1d9-32d912779dc7.roa (raw, json) Hash identifier: BSvtdnYTfg1QaryMozu6d99P4Yj+x3ms5gV4l9MlwX0= Subject key identifier: 82:88:6E:8A:9A:26:93:DC:EE:28:43:65:B4:ED:D1:D2:E7:7B:6A:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6CB2834D291DD2AE84D000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.29.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b2:83:4d:29:1d:d2:ae:84:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=2ce58e82-ec3b-4090-b147-d20b4c0f5c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:42:36:0a:bc:3e:51:fd:bb:f9:a6:c7:d1: 22:45:23:ab:a7:39:37:7e:c1:9d:ce:74:9f:d8:91: e5:db:39:d0:57:8a:dd:f5:d5:3f:69:56:22:70:59: f9:d6:c6:1e:60:c0:83:c5:69:1e:88:5a:35:c0:8b: bd:f9:25:a3:39:95:80:01:27:76:f2:2c:2c:b1:d7: 08:d2:04:61:2b:ce:49:ed:fc:fe:8b:f0:a9:d5:26: 82:f5:5e:73:28:49:f6:f8:06:92:ef:b7:d2:95:fc: 8e:0d:39:ca:31:cd:73:c6:a2:ce:29:29:3a:ab:26: 84:a5:bf:04:df:6f:b1:5d:46:0c:13:1b:68:89:3a: 45:14:df:a3:9e:1e:78:93:42:81:9e:ec:cd:2c:e0: 16:c2:52:75:fa:3b:86:bb:ba:d2:75:31:b7:9d:53: 89:ad:63:93:2c:f2:02:27:cb:5f:c7:ed:93:63:00: 51:9d:8c:2d:60:d3:23:92:6b:76:b9:40:53:67:41: 66:e7:0a:81:a6:c7:20:2d:ab:9e:45:85:e2:13:d8: da:bf:f6:ee:a7:50:83:f4:cd:b2:72:79:08:cf:9e: c3:1c:2f:78:32:75:f3:d6:66:72:c4:a6:ce:69:c0: 2c:ec:ed:11:b9:73:85:b1:3c:56:21:05:59:71:ce: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:88:6E:8A:9A:26:93:DC:EE:28:43:65:B4:ED:D1:D2:E7:7B:6A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b3517b-f12e-375d-b1d9-32d912779dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ee:f2:df:00:94:90:f8:6c:51:75:b0:1d:5e:78:ee:64:e0: da:5e:86:8c:e2:fd:34:a1:16:2b:2a:05:4c:15:d6:42:b6:06: 81:29:d6:20:43:91:cd:43:3c:98:6e:34:8d:2a:12:86:1b:67: ca:48:5a:c8:59:48:84:3c:12:34:a3:a5:91:55:0d:a1:01:ef: 2f:1e:5f:51:b0:47:d6:41:3c:6b:62:03:59:e1:22:5e:35:dc: 8f:89:de:7f:61:36:c5:f9:14:88:59:b0:e5:75:01:f7:8a:66: 0c:99:ae:92:33:88:26:3d:a3:5e:dd:c5:fe:38:fb:c2:34:23: 9a:b2:3a:b9:a4:64:75:1c:80:87:fb:ad:ca:be:5a:d2:9e:d5: ef:35:dc:99:b5:11:a9:ac:f9:d7:c7:30:45:26:e6:17:8e:65: ce:37:ec:16:e9:29:fd:79:a7:70:99:70:51:79:79:53:03:f3: 14:f7:1b:ed:61:d4:ae:cc:d8:5d:6c:7b:fc:5e:aa:08:28:27: a0:e2:bf:54:80:c7:bb:dc:46:6c:0a:e1:52:09:09:65:c4:78: b2:da:29:0b:21:36:fd:73:4f:6e:df:8d:da:3f:85:63:ec:5d: d8:44:b9:5c:c3:42:11:e1:b2:eb:f5:5d:f2:a9:f6:34:24:c5: ac:1e:73:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLKDTSkd0q6E0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MmNlNThlODItZWMzYi00MDkwLWIxNDctZDIwYjRjMGY1YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHVCNgq8PlH9u/mmx9EiRSOrpzk3fsGdznSf 2JHl2znQV4rd9dU/aVYicFn51sYeYMCDxWkeiFo1wIu9+SWjOZWAASd28iwssdcI 0gRhK85J7fz+i/Cp1SaC9V5zKEn2+AaS77fSlfyODTnKMc1zxqLOKSk6qyaEpb8E 32+xXUYMExtoiTpFFN+jnh54k0KBnuzNLOAWwlJ1+juGu7rSdTG3nVOJrWOTLPIC J8tfx+2TYwBRnYwtYNMjkmt2uUBTZ0Fm5wqBpscgLaueRYXiE9jav/bup1CD9M2y cnkIz57DHC94MnXz1mZyxKbOacAs7O0RuXOFsTxWIQVZcc6slwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKIboqaJpPc7ihDZbTt0dLne2pUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFiMzUxN2ItZjEyZS0z NzVkLWIxZDktMzJkOTEyNzc5ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbu8t8AlJD4bFF1sB1eeO5k4Npehozi/TShFisqBUwV1kK2BoEp1iBD kc1DPJhuNI0qEoYbZ8pIWshZSIQ8EjSjpZFVDaEB7y8eX1GwR9ZBPGtiA1nhIl41 3I+J3n9hNsX5FIhZsOV1AfeKZgyZrpIziCY9o17dxf44+8I0I5qyOrmkZHUcgIf7 rcq+WtKe1e813Jm1Eams+dfHMEUm5heOZc437BbpKf15p3CZcFF5eVMD8xT3G+1h 1K7M2F1se/xeqggoJ6Div1SAx7vcRmwK4VIJCWXEeLLaKQshNv1zT27fjdo/hWPs XdhEuVzDQhHhsuv1XfKp9jQkxawec/8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:35 2025 by rpki-client