$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/153735d9-b4cf-3cab-ba81-e3cdfc4914b9.roa File: 153735d9-b4cf-3cab-ba81-e3cdfc4914b9.roa (raw, json) Hash identifier: W9QZAcExsr3YwQdOiVWvXifb5W7wx+VyPN+miywcsgQ= Subject key identifier: D8:01:18:76:39:6B:80:5E:55:44:6F:F2:27:D8:C5:F1:E9:8A:57:3A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0277BE9D682DB926BFD71980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/153735d9-b4cf-3cab-ba81-e3cdfc4914b9.roa Signing time: Thu 28 Aug 2025 19:40:35 +0000 ROA not before: Thu 28 Aug 2025 19:40:35 +0000 ROA not after: Wed 26 Nov 2025 20:40:35 +0000 asID: 30036 IP address blocks: 173.30.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:77:be:9d:68:2d:b9:26:bf:d7:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 28 19:40:35 2025 GMT Not After : Nov 26 20:40:35 2025 GMT Subject: CN=857f66ab-4b26-47f0-b6a7-5f713641d072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:45:7c:53:b3:ff:43:c4:c8:7a:8e:a1:b6: 43:89:51:a4:db:74:1b:72:cf:ca:fc:12:3e:7c:b7: 2f:9a:81:71:62:f1:8c:2e:e0:74:8a:4a:69:2a:2b: 86:aa:4f:5d:1c:76:d6:a2:a6:38:39:1a:8e:bd:5c: 6b:81:57:d6:50:07:ae:e6:4b:56:79:ab:40:73:58: 14:b8:79:88:25:1a:6f:d5:ea:49:c3:6e:4a:46:69: 4a:08:b6:95:0a:71:45:8a:1d:f3:b3:d6:04:6b:53: 74:50:76:07:10:c6:22:b1:b2:9a:51:55:a3:aa:ac: 5a:d1:fe:0e:b9:fb:5a:c1:5f:51:ca:d6:b7:8c:d9: 42:db:00:af:d9:1b:3b:40:ee:32:06:48:51:4c:bb: 73:3c:17:bc:c9:48:25:2b:5b:0b:eb:d7:e6:2f:60: b2:c9:b8:32:c5:82:2d:7c:f6:aa:dd:e4:9e:cb:20: f9:8e:c0:11:17:d0:0a:0d:02:c2:9f:8b:61:ec:62: 5f:e5:85:00:7f:81:89:be:84:08:33:5a:b8:b9:40: 35:25:12:77:6f:ab:47:52:dd:22:eb:ed:15:1f:c2: c3:fd:14:b0:34:30:bd:b6:25:52:18:4f:77:bb:ce: 8c:e9:58:eb:5b:05:db:c3:63:5c:40:97:3d:eb:85: 87:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:18:76:39:6B:80:5E:55:44:6F:F2:27:D8:C5:F1:E9:8A:57:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/153735d9-b4cf-3cab-ba81-e3cdfc4914b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5d:3d:07:cf:b8:82:a4:62:a4:7b:92:ce:a7:cc:95:7e:22: b6:67:46:fe:61:31:c4:f6:c8:da:a0:f1:72:f0:79:18:8a:b7: 53:ae:b0:2c:a0:e0:85:e6:9a:a1:40:13:85:d6:58:f1:51:71: a0:60:68:10:8e:37:08:4b:26:1b:ae:79:d9:73:70:3c:3e:84: 7f:c5:55:bd:8b:12:a6:84:2a:13:a6:af:17:a6:26:e5:fd:99: 77:f9:d9:f4:e4:c1:1a:00:0b:55:b5:9a:63:ec:51:55:0b:d8: ab:24:3f:0b:0d:62:e7:b1:87:ef:fd:3f:4c:0d:a1:13:0e:ff: a6:e4:13:30:6a:66:a1:91:19:1a:aa:09:11:e3:97:65:a9:84: 36:5f:26:18:99:4a:a9:4c:f9:2e:5d:9c:a5:d4:84:c7:76:d7: 57:a4:a8:c4:00:36:e3:76:55:32:45:79:7f:92:a2:fe:43:9d: 0d:99:ed:0f:c2:97:0b:95:52:e8:b1:fd:e8:3d:c6:9a:c1:e6: ad:e6:92:84:cb:5e:3c:ea:63:02:70:3c:97:52:94:33:c3:fd: 12:2c:50:f2:9a:cb:b2:cf:08:07:c9:e2:a8:64:03:5b:b5:42: 68:90:b4:06:e4:7f:8f:e2:35:56:e0:33:0f:c8:fe:8f:03:2b: f6:e0:67:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsCd76daC25Jr/XGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyODE5NDAzNVoXDTI1MTEyNjIwNDAzNVowLzEtMCsGA1UEAxMk ODU3ZjY2YWItNGIyNi00N2YwLWI2YTctNWY3MTM2NDFkMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqphFfFOz/0PEyHqOobZDiVGk23Qbcs/K/BI+ fLcvmoFxYvGMLuB0ikppKiuGqk9dHHbWoqY4ORqOvVxrgVfWUAeu5ktWeatAc1gU uHmIJRpv1epJw25KRmlKCLaVCnFFih3zs9YEa1N0UHYHEMYisbKaUVWjqqxa0f4O uftawV9Ryta3jNlC2wCv2Rs7QO4yBkhRTLtzPBe8yUglK1sL69fmL2CyybgyxYIt fPaq3eSeyyD5jsARF9AKDQLCn4th7GJf5YUAf4GJvoQIM1q4uUA1JRJ3b6tHUt0i 6+0VH8LD/RSwNDC9tiVSGE93u86M6VjrWwXbw2NcQJc964WHvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgBGHY5a4BeVURv8ifYxfHpilc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTUzNzM1ZDktYjRjZi0z Y2FiLWJhODEtZTNjZGZjNDkxNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHldPQfPuIKkYqR7ks6nzJV+IrZnRv5hMcT2yNqg8XLweRiKt1OusCyg 4IXmmqFAE4XWWPFRcaBgaBCONwhLJhuuedlzcDw+hH/FVb2LEqaEKhOmrxemJuX9 mXf52fTkwRoAC1W1mmPsUVUL2KskPwsNYuexh+/9P0wNoRMO/6bkEzBqZqGRGRqq CRHjl2WphDZfJhiZSqlM+S5dnKXUhMd211ekqMQANuN2VTJFeX+Sov5DnQ2Z7Q/C lwuVUuix/eg9xprB5q3mkoTLXjzqYwJwPJdSlDPD/RIsUPKay7LPCAfJ4qhkA1u1 QmiQtAbkf4/iNVbgMw/I/o8DK/bgZ8A= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:11 2025 by rpki-client