$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e979364-a13b-37dc-861b-0361f656029d.roa File: 1e979364-a13b-37dc-861b-0361f656029d.roa (raw, json) Hash identifier: 9JSU2IZOaw3q1bLm2KJtTkbOVfqRNRH1C3C3ASARlbw= Subject key identifier: 92:B2:FE:6B:77:78:1E:DF:E1:17:D1:6D:C6:39:1F:A7:AB:B6:2A:F6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D718A720DE648E45C54B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e979364-a13b-37dc-861b-0361f656029d.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.25.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:18:a7:20:de:64:8e:45:c5:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=7040ed02-996f-45ba-a334-188f3b0c7ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9c:58:08:26:c0:72:b3:0b:62:55:84:5e:4e: 3b:16:87:61:64:1a:72:a6:0d:64:ea:2a:c7:aa:ed: dc:4e:f2:8d:24:58:bc:0f:38:bf:eb:df:44:bb:02: f4:ab:f6:9a:a2:4e:40:c5:6c:43:92:7f:c8:8d:88: 08:9f:f7:ca:81:40:d7:94:8f:3d:ae:d6:e0:e0:e5: ac:f9:d5:fb:75:cc:05:25:e8:72:5a:23:69:61:5c: 67:d3:40:55:76:ef:31:cb:c3:9e:6c:77:a2:be:85: 8a:4b:07:17:6a:60:da:50:f1:d0:61:51:97:28:91: e9:88:c1:db:d1:bc:01:20:d8:f9:ac:ef:c9:e8:8d: bd:61:21:cf:71:23:9f:60:25:20:04:45:e5:fb:b1: e6:f3:d0:a2:59:2e:66:01:6e:98:7e:71:c3:6d:fb: de:67:1f:a4:c3:8b:59:fa:14:52:2a:48:ba:47:6f: a6:31:12:31:f7:96:65:f6:f3:90:31:40:33:59:3f: 56:64:ab:4f:48:85:82:3d:e4:d4:96:12:54:f2:c5: e5:8d:e9:36:5a:16:23:f7:48:ef:12:a5:b2:95:9b: 0d:11:8c:05:fa:e3:19:ac:43:85:f7:59:7c:ab:de: 4c:7d:92:b5:15:0b:a6:95:bd:e3:42:64:a0:26:91: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B2:FE:6B:77:78:1E:DF:E1:17:D1:6D:C6:39:1F:A7:AB:B6:2A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e979364-a13b-37dc-861b-0361f656029d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fb:2f:89:b7:06:11:c3:85:cb:20:69:ec:27:60:87:2c:98: bf:5b:d0:d5:04:77:5b:d2:e9:b1:17:a6:ff:6b:d1:8b:8e:c9: df:87:b1:c0:c9:29:25:f9:48:17:dd:a3:20:0e:4b:6e:bc:0d: bd:74:33:2a:0d:60:15:77:75:b2:3c:46:66:39:a2:2c:ba:da: 0c:57:d7:70:18:eb:6f:25:4a:64:45:01:f4:b5:80:68:e8:46: a1:5d:22:49:c7:00:27:b4:9d:e6:70:c7:52:e7:1e:de:7a:41: 31:e8:97:b5:44:03:38:9b:2a:6d:15:e3:94:f2:37:7c:14:02: f0:5c:b2:77:47:26:18:08:32:ef:b2:b5:ae:b5:0f:03:18:1d: 9e:3a:69:98:39:4c:04:4e:dd:70:0c:2f:23:1d:51:68:05:0a: c9:3b:a5:12:6d:1b:38:c8:b4:61:8c:c8:ab:26:23:81:55:ed: 33:d5:ad:43:43:90:fa:87:d8:d9:d5:bd:d9:d8:10:fe:5d:52: e1:8e:6e:1d:97:6c:b9:e2:36:11:82:8a:72:91:e6:b0:8c:3f: 87:8c:ed:32:01:08:16:53:a4:af:8c:71:40:dd:78:6d:d8:ee: cd:6e:9f:84:d7:47:76:eb:6c:09:c5:64:cd:0f:d4:91:e9:96: 85:d8:f8:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1xinIN5kjkXFS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NzA0MGVkMDItOTk2Zi00NWJhLWEzMzQtMTg4ZjNiMGM3YWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JxYCCbAcrMLYlWEXk47FodhZBpypg1k6irH qu3cTvKNJFi8Dzi/699EuwL0q/aaok5AxWxDkn/IjYgIn/fKgUDXlI89rtbg4OWs +dX7dcwFJehyWiNpYVxn00BVdu8xy8OebHeivoWKSwcXamDaUPHQYVGXKJHpiMHb 0bwBINj5rO/J6I29YSHPcSOfYCUgBEXl+7Hm89CiWS5mAW6YfnHDbfveZx+kw4tZ +hRSKki6R2+mMRIx95Zl9vOQMUAzWT9WZKtPSIWCPeTUlhJU8sXljek2WhYj90jv EqWylZsNEYwF+uMZrEOF91l8q95MfZK1FQumlb3jQmSgJpEVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKy/mt3eB7f4RfRbcY5H6ertir2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWU5NzkzNjQtYTEzYi0z N2RjLTg2MWItMDM2MWY2NTYwMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET7L4m3BhHDhcsgaewnYIcsmL9b0NUEd1vS6bEXpv9r0YuOyd+HscDJ KSX5SBfdoyAOS268Db10MyoNYBV3dbI8RmY5oiy62gxX13AY628lSmRFAfS1gGjo RqFdIknHACe0neZwx1LnHt56QTHol7VEAzibKm0V45TyN3wUAvBcsndHJhgIMu+y ta61DwMYHZ46aZg5TARO3XAMLyMdUWgFCsk7pRJtGzjItGGMyKsmI4FV7TPVrUND kPqH2NnVvdnYEP5dUuGObh2XbLniNhGCinKR5rCMP4eM7TIBCBZTpK+McUDdeG3Y 7s1un4TXR3brbAnFZM0P1JHploXY+P8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:24 2025 by rpki-client