$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2467d544-5963-35aa-9db9-e2efe3038423.roa File: 2467d544-5963-35aa-9db9-e2efe3038423.roa (raw, json) Hash identifier: okN57rIufo2M32oH5exTtNPx79fwk2LrjlIgsFDzz9U= Subject key identifier: E4:A2:55:51:EE:58:6B:DF:D8:43:76:DF:6A:C7:3F:53:02:2D:A9:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0B76D7494A95ACA46C1D3C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2467d544-5963-35aa-9db9-e2efe3038423.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.31.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d7:49:4a:95:ac:a4:6c:1d:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=56c9dad8-d8d5-4899-b1ff-184bd3dc6fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:b7:37:7d:2f:2b:23:36:84:34:89:20:c2: 56:48:f5:57:fd:00:39:ab:28:5d:d6:b0:f7:ba:7f: 3e:bf:0b:ee:4c:a8:75:78:29:5b:6c:1c:62:c6:01: 71:70:92:c7:f6:14:02:c5:98:14:cb:78:c4:c2:6c: 77:56:43:0d:4a:c4:1e:99:2e:e0:a6:f4:55:47:86: 69:b6:ac:a5:b6:f8:0d:20:da:7f:81:82:ef:47:53: fd:3c:b3:84:86:74:6b:1a:42:dc:b9:94:2b:de:94: 57:32:85:eb:d3:57:0d:17:44:37:86:4d:6b:5b:66: 77:42:be:ac:1d:c5:8d:dc:f9:6a:de:21:d3:bf:2f: ff:4b:5c:78:67:d8:f0:86:b9:f6:ae:52:4f:6e:f1: f2:35:fe:a9:06:92:59:28:85:c4:b8:25:be:89:20: a0:82:fb:66:19:d8:c2:40:67:ef:ae:18:b0:4f:8c: bf:9c:45:9e:37:58:62:29:7b:0b:0c:47:e0:3e:a3: f2:eb:f8:51:b7:12:4d:ec:05:b6:bb:37:6d:fb:a4: 4e:a3:c8:e9:35:df:e8:c5:f7:ae:96:17:31:13:5e: f0:5c:76:f7:cf:43:62:7f:6b:87:af:ee:85:46:61: cf:35:b6:48:ea:27:4c:8c:c5:43:25:1d:9a:74:86: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A2:55:51:EE:58:6B:DF:D8:43:76:DF:6A:C7:3F:53:02:2D:A9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2467d544-5963-35aa-9db9-e2efe3038423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c9:2d:de:f9:c5:9d:30:28:73:c4:b4:95:c3:f2:d1:8e:10: 7c:9a:b5:c5:f6:ff:30:ec:55:23:a5:4f:69:0e:48:09:65:76: bf:02:22:91:46:4c:41:21:f8:5a:8d:e4:e7:04:84:cf:bf:eb: 96:33:59:d8:bd:82:6a:21:5b:2b:d9:96:fd:1e:df:9b:f9:c9: 40:ad:f5:ac:5d:f1:ce:dd:a8:12:06:46:ef:58:cc:66:16:f1: 2c:9f:15:65:16:73:e2:9c:5d:2d:99:02:2b:2c:af:ac:c9:04: 27:3b:90:2e:29:ab:15:67:d6:55:ba:a4:8b:a9:f3:46:bb:ce: 24:59:a7:69:e9:c4:14:21:d8:60:4b:8e:e9:22:ff:06:67:a7: b1:90:e7:d4:39:c7:df:15:41:a5:43:34:f6:ed:9e:a4:0b:e3: 7a:13:4f:19:04:c2:99:48:b0:e7:9c:31:10:8e:9d:fb:fc:15: cb:32:90:6e:4b:20:45:5a:89:c7:34:5d:cb:37:88:5e:cf:b9: 77:ea:89:63:4a:89:5c:b7:01:ea:bf:32:a8:99:0f:52:0d:d8: 56:61:fa:fd:6b:8e:63:66:1d:21:6c:39:f5:85:3f:ed:c0:c1: 5e:71:58:8b:de:0c:09:31:57:a7:f6:a2:4f:d6:4b:1a:6d:fc: c1:83:d1:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtdJSpWspGwdPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NTZjOWRhZDgtZDhkNS00ODk5LWIxZmYtMTg0YmQzZGM2ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVa3N30vKyM2hDSJIMJWSPVX/QA5qyhd1rD3 un8+vwvuTKh1eClbbBxixgFxcJLH9hQCxZgUy3jEwmx3VkMNSsQemS7gpvRVR4Zp tqyltvgNINp/gYLvR1P9PLOEhnRrGkLcuZQr3pRXMoXr01cNF0Q3hk1rW2Z3Qr6s HcWN3Plq3iHTvy//S1x4Z9jwhrn2rlJPbvHyNf6pBpJZKIXEuCW+iSCggvtmGdjC QGfvrhiwT4y/nEWeN1hiKXsLDEfgPqPy6/hRtxJN7AW2uzdt+6ROo8jpNd/oxfeu lhcxE17wXHb3z0Nif2uHr+6FRmHPNbZI6idMjMVDJR2adIYjMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSiVVHuWGvf2EN232rHP1MCLaniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQ2N2Q1NDQtNTk2My0z NWFhLTlkYjktZTJlZmUzMDM4NDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfJLd75xZ0wKHPEtJXD8tGOEHyatcX2/zDsVSOlT2kOSAlldr8CIpFG TEEh+FqN5OcEhM+/65YzWdi9gmohWyvZlv0e35v5yUCt9axd8c7dqBIGRu9YzGYW 8SyfFWUWc+KcXS2ZAissr6zJBCc7kC4pqxVn1lW6pIup80a7ziRZp2npxBQh2GBL juki/wZnp7GQ59Q5x98VQaVDNPbtnqQL43oTTxkEwplIsOecMRCOnfv8FcsykG5L IEVaicc0Xcs3iF7PuXfqiWNKiVy3Aeq/MqiZD1IN2FZh+v1rjmNmHSFsOfWFP+3A wV5xWIveDAkxV6f2ok/WSxpt/MGD0eM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:02 2025 by rpki-client