$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29842994-4530-37dc-a902-da6acc3e8d54.roa File: 29842994-4530-37dc-a902-da6acc3e8d54.roa (raw, json) Hash identifier: H5UmzgSUAVd6esg/Cxgjc2ToUO3bD8DpcQOnQJy3Bbs= Subject key identifier: A9:F4:62:B8:DD:89:45:7A:E3:9A:49:52:0F:E6:4C:54:52:28:18:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B78217A1FC43C2C07D8DECA40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29842994-4530-37dc-a902-da6acc3e8d54.roa Signing time: Thu 09 Oct 2025 23:12:09 +0000 ROA not before: Thu 09 Oct 2025 23:12:09 +0000 ROA not after: Thu 08 Jan 2026 00:12:09 +0000 asID: 19905 IP address blocks: 173.20.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:21:7a:1f:c4:3c:2c:07:d8:de:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 9 23:12:09 2025 GMT Not After : Jan 8 00:12:09 2026 GMT Subject: CN=0f8d0ec8-caf6-4e8a-ac48-d6bf68dff3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:8e:70:4a:6d:44:2b:51:bf:04:3a:53:2f: 64:0a:27:85:f1:34:8a:3e:30:97:a5:ed:d8:97:ad: d9:42:f1:5b:2f:aa:ea:03:f4:82:20:fd:50:30:70: 9f:27:64:a1:74:11:63:76:ef:13:84:27:34:00:b8: c7:ef:f8:05:40:79:b3:ff:55:2b:bf:97:97:b0:7f: 1e:12:88:7f:77:1c:49:cd:bf:84:7a:88:c9:e6:da: 07:03:df:73:84:67:c0:31:9b:e0:89:06:d6:79:7e: db:6d:81:23:04:ef:5b:74:11:d8:5a:b7:72:a2:04: 8c:ac:70:79:cb:39:8c:01:1c:dc:df:26:69:89:2a: 74:56:79:3d:70:44:05:b3:3f:3d:e0:a1:55:5a:93: 70:24:e7:79:d4:04:98:c3:82:18:bd:3c:72:f4:30: 72:fa:02:a0:fa:cb:a2:8c:3e:56:53:a5:47:05:c9: 58:93:c2:91:51:5e:16:84:78:2f:b4:a2:6a:7c:66: 72:ce:a0:a3:a9:ec:d7:59:e9:9e:cf:c2:ff:c8:ec: a6:48:9c:af:a4:46:e0:65:64:79:bf:46:dd:68:9e: b5:95:c7:29:d5:e4:bd:8d:89:66:7f:8a:d4:31:52: 25:b2:dc:48:2a:86:87:d7:54:fb:b9:77:ec:a6:ef: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:62:B8:DD:89:45:7A:E3:9A:49:52:0F:E6:4C:54:52:28:18:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29842994-4530-37dc-a902-da6acc3e8d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a1:a5:ad:9e:e6:5a:c4:ed:3a:dd:e4:f9:29:8b:e5:b6:a3: d3:00:1b:94:3a:46:ea:43:12:c5:02:1c:7c:98:8b:99:9d:aa: 4e:c7:f6:b7:5c:5f:64:32:73:ff:41:7a:c7:41:42:99:2a:0e: 80:b0:94:05:66:38:c7:6e:32:6c:b7:b1:71:3b:78:63:67:3d: 17:07:1a:68:86:4a:23:ef:d9:94:c1:f9:32:8f:5c:e5:3a:db: 6b:19:7f:6f:e3:62:fd:b5:87:7a:b1:80:b1:e5:79:4e:d0:9b: 14:58:c4:e4:24:a2:51:ba:24:d5:4c:a8:5a:22:eb:a9:44:44: 3b:4f:da:a9:4d:9e:7a:73:73:2b:23:2b:b6:3f:ae:58:e9:30: d5:5e:5b:0d:09:6b:22:8b:70:e8:d5:be:46:a0:db:0e:13:73: 9e:37:09:de:84:63:f6:7f:5f:39:9d:52:3d:81:d6:12:f9:a9: 9f:46:a3:c0:f5:97:54:c0:05:5d:d5:a2:0f:5d:fc:5c:b1:92: 67:80:45:75:60:a4:4a:fb:32:d3:2a:7f:60:ec:03:9a:a0:e4: 21:3b:5c:3d:e9:17:89:41:83:99:d2:67:87:a6:2b:04:20:52: 93:b6:38:73:46:e3:41:a1:fc:d4:e3:1a:b7:2e:70:92:87:f1: 0e:40:5e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4IXofxDwsB9jeykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwOTIzMTIwOVoXDTI2MDEwODAwMTIwOVowLzEtMCsGA1UEAxMk MGY4ZDBlYzgtY2FmNi00ZThhLWFjNDgtZDZiZjY4ZGZmM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq6OcEptRCtRvwQ6Uy9kCieF8TSKPjCXpe3Y l63ZQvFbL6rqA/SCIP1QMHCfJ2ShdBFjdu8ThCc0ALjH7/gFQHmz/1Urv5eXsH8e Eoh/dxxJzb+EeojJ5toHA99zhGfAMZvgiQbWeX7bbYEjBO9bdBHYWrdyogSMrHB5 yzmMARzc3yZpiSp0Vnk9cEQFsz894KFVWpNwJOd51ASYw4IYvTxy9DBy+gKg+sui jD5WU6VHBclYk8KRUV4WhHgvtKJqfGZyzqCjqezXWemez8L/yOymSJyvpEbgZWR5 v0bdaJ61lccp1eS9jYlmf4rUMVIlstxIKoaH11T7uXfspu9QQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn0YrjdiUV645pJUg/mTFRSKBjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk4NDI5OTQtNDUzMC0z N2RjLWE5MDItZGE2YWNjM2U4ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHShpa2e5lrE7Trd5Pkpi+W2o9MAG5Q6RupDEsUCHHyYi5mdqk7H9rdc X2Qyc/9BesdBQpkqDoCwlAVmOMduMmy3sXE7eGNnPRcHGmiGSiPv2ZTB+TKPXOU6 22sZf2/jYv21h3qxgLHleU7QmxRYxOQkolG6JNVMqFoi66lERDtP2qlNnnpzcysj K7Y/rljpMNVeWw0JayKLcOjVvkag2w4Tc543Cd6EY/Z/XzmdUj2B1hL5qZ9Go8D1 l1TABV3Vog9d/FyxkmeARXVgpEr7MtMqf2DsA5qg5CE7XD3pF4lBg5nSZ4emKwQg UpO2OHNG40Gh/NTjGrcucJKH8Q5AXpw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:32 2025 by rpki-client