$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa File: 234624dd-0492-368b-81a2-5919e24d2165.roa (raw, json) Hash identifier: mbe5yc0CvukWELdEDpJ/OlOdZyxihoLkt+NV9u1UCsg= Subject key identifier: 20:8F:45:59:8F:05:7F:C3:10:F1:D9:62:61:5C:2F:2A:76:A4:A2:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D720E35E024EF674D06900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.25.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:20:e3:5e:02:4e:f6:74:d0:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=665f4909-4c22-4486-9447-bc2c849ceaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3d:4b:47:c0:e5:ad:1f:d9:15:94:24:32:0d: ec:f3:ae:75:d4:49:7a:88:ad:46:8a:da:65:39:d1: 0c:68:53:da:5f:8a:4a:80:a7:ee:f6:57:c7:ad:7e: 01:d3:1f:7f:56:cf:a6:a9:23:82:fa:86:55:d1:4c: 85:1b:ab:a6:e8:e5:6e:25:64:be:c5:d9:93:eb:19: e7:e6:2f:19:df:58:8b:4c:b6:2c:cf:b2:ef:c3:89: 0a:39:f4:f3:0e:a3:67:a8:e1:1a:b9:8f:f2:25:77: fe:e9:9a:f2:78:58:f6:f2:21:58:fc:e8:09:24:98: c7:8b:e7:98:4d:54:57:92:39:29:f2:6e:87:aa:8d: 92:ff:73:e5:15:cf:70:af:32:2e:8c:54:c7:82:58: 7a:d7:3f:ef:53:e6:fa:a7:7f:cf:df:b8:90:15:d4: 90:80:a5:7d:8b:f3:aa:e5:bb:cb:9d:a2:5e:b3:0c: 76:e6:ea:09:29:16:25:41:d4:37:c3:1a:43:9a:aa: 27:77:e4:be:6c:b9:a1:2b:33:69:72:3c:e0:b7:f3: 38:89:b2:99:fc:8c:b9:fb:6e:35:4a:a8:20:ea:41: 39:b0:0c:b8:cb:db:d6:a6:2c:12:25:81:5b:91:c7: 6f:80:14:5d:a0:2a:1f:f3:de:01:bf:45:bf:66:d6: 46:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8F:45:59:8F:05:7F:C3:10:F1:D9:62:61:5C:2F:2A:76:A4:A2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:04:5a:bd:38:58:0e:64:77:71:17:e3:07:43:20:f7:93:f2: b0:ae:2d:3c:59:53:fd:89:45:b9:cf:7b:52:72:c5:2e:6c:1e: d9:6c:ec:0f:1a:a6:51:06:8f:86:e8:ce:79:08:27:64:88:35: 97:fe:e2:5f:36:e2:e3:03:4a:ae:63:37:b8:6d:8f:a1:dd:2b: ba:0c:b5:98:6b:33:e6:4a:29:f9:55:1e:f1:34:5f:1a:55:13: f8:47:46:a5:59:65:58:1f:7f:ef:44:e4:62:53:20:2d:5e:7b: e0:a0:f5:16:12:08:35:dc:67:fc:29:da:53:cd:63:7f:ff:ce: 4c:e1:5d:4d:a4:46:f5:da:f6:de:68:5d:8e:c9:47:3a:20:78: 85:88:b6:ed:bc:d0:7f:61:0e:20:e9:e9:ac:be:6e:33:cf:93: 41:79:17:a1:0f:29:b9:c4:a5:bf:26:44:93:af:3d:34:c5:69: 13:db:37:fa:cc:15:83:42:42:d8:6f:75:5a:f9:41:2a:10:05: 87:dc:01:ca:69:6e:09:69:c8:75:2c:00:85:b0:c6:c0:f5:3e: b0:6c:67:ff:e5:4a:60:ce:7c:52:fb:e9:ab:fe:40:02:f6:8a: 68:5c:09:bf:c3:4b:64:64:62:38:68:36:3c:f9:97:a4:59:fa: b7:08:5d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1yDjXgJO9nTQaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NjY1ZjQ5MDktNGMyMi00NDg2LTk0NDctYmMyYzg0OWNlYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz1LR8DlrR/ZFZQkMg3s86511El6iK1Gitpl OdEMaFPaX4pKgKfu9lfHrX4B0x9/Vs+mqSOC+oZV0UyFG6um6OVuJWS+xdmT6xnn 5i8Z31iLTLYsz7Lvw4kKOfTzDqNnqOEauY/yJXf+6ZryeFj28iFY/OgJJJjHi+eY TVRXkjkp8m6Hqo2S/3PlFc9wrzIujFTHglh61z/vU+b6p3/P37iQFdSQgKV9i/Oq 5bvLnaJeswx25uoJKRYlQdQ3wxpDmqond+S+bLmhKzNpcjzgt/M4ibKZ/Iy5+241 Sqgg6kE5sAy4y9vWpiwSJYFbkcdvgBRdoCof894Bv0W/ZtZGjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCPRVmPBX/DEPHZYmFcLyp2pKINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM0NjI0ZGQtMDQ5Mi0z NjhiLTgxYTItNTkxOWUyNGQyMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkEWr04WA5kd3EX4wdDIPeT8rCuLTxZU/2JRbnPe1JyxS5sHtls7A8a plEGj4boznkIJ2SINZf+4l824uMDSq5jN7htj6HdK7oMtZhrM+ZKKflVHvE0XxpV E/hHRqVZZVgff+9E5GJTIC1ee+Cg9RYSCDXcZ/wp2lPNY3//zkzhXU2kRvXa9t5o XY7JRzogeIWItu280H9hDiDp6ay+bjPPk0F5F6EPKbnEpb8mRJOvPTTFaRPbN/rM FYNCQthvdVr5QSoQBYfcAcppbglpyHUsAIWwxsD1PrBsZ//lSmDOfFL76av+QAL2 imhcCb/DS2RkYjhoNjz5l6RZ+rcIXaM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:51:55 2025 by rpki-client