$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298cfca0-870e-3891-9b01-630519ee7671.roa File: 298cfca0-870e-3891-9b01-630519ee7671.roa (raw, json) Hash identifier: bzZvhKCqfHad03DMJDozY2pkmbutl3vU/dYaxprI2h0= Subject key identifier: E9:AD:EE:78:34:06:02:B4:30:52:4C:B0:F3:5E:4E:E7:88:74:DE:C1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D748BC08B56B54B3353070 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298cfca0-870e-3891-9b01-630519ee7671.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.16.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:48:bc:08:b5:6b:54:b3:35:30:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=73b42ea6-5971-4fc8-a7e1-b5de6cbf265b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:89:c8:e0:a9:40:0c:43:d2:d4:72:52:87: 31:64:39:5c:ad:c0:8d:02:a5:c4:4f:1c:d0:44:05: 6b:2e:5d:d1:80:a0:d9:f8:e8:f2:2a:7a:a0:95:af: 16:1a:68:13:21:5f:36:b6:be:7e:6b:85:7e:1a:fd: 18:dc:a1:3d:d7:8b:f5:54:08:fe:61:6d:91:e4:9e: 01:92:32:7d:0b:9c:1a:30:99:f1:ac:c7:f5:92:b9: 9c:c7:53:2f:ce:58:19:6e:29:f4:80:9d:5d:3e:c1: 5f:77:a4:7a:56:8d:83:71:77:e4:8b:d5:3a:0a:56: 21:cd:ae:2e:80:ef:ac:a2:00:3f:59:cf:c6:58:c6: 72:52:c0:84:c3:23:18:6d:e0:e3:ae:37:03:1a:8b: 58:24:00:9c:21:56:cd:df:bf:2a:e6:80:0f:57:9f: 23:94:fd:0e:d3:cf:2c:53:15:67:5f:02:a4:b0:e2: 4d:27:2c:dc:3c:ae:de:7d:93:53:bc:1a:35:62:54: 63:58:39:16:49:ae:d5:c8:aa:6d:81:4b:1e:ff:a5: 13:c0:2d:7f:2d:36:f9:62:5c:f3:d5:63:3c:51:6b: 58:95:95:f5:98:be:17:40:7f:6d:41:ac:b5:80:a3: ba:20:20:85:dd:a3:ca:97:1b:ee:96:c7:3d:18:07: 51:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AD:EE:78:34:06:02:B4:30:52:4C:B0:F3:5E:4E:E7:88:74:DE:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298cfca0-870e-3891-9b01-630519ee7671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:de:24:ae:64:c6:cf:8a:15:59:b7:f6:a1:a9:04:62:bc:d3: aa:f9:7f:95:06:a4:54:74:15:50:d6:74:e3:1a:c9:3e:7d:b7: e7:8e:36:dc:5a:4c:2c:75:66:f6:94:da:6c:33:3a:85:6d:19: f1:99:f1:6c:89:2e:c8:b3:44:ae:4a:cf:9f:1a:25:6f:a7:7d: e3:7a:29:c3:20:3e:11:12:92:46:71:be:bc:b0:86:4f:8a:8f: db:47:64:15:a9:76:4f:a9:d0:f4:b2:41:da:5c:79:fa:b7:a9: 43:fe:9e:54:a9:ae:57:8b:dc:5c:2f:76:05:8a:ae:1f:35:53: 7f:11:4e:c3:42:6a:a9:bd:d7:ec:c1:81:5d:5e:d3:01:6c:48: 5a:77:08:eb:c0:b8:8a:28:7f:64:2e:02:41:bf:8c:5f:df:e8: f5:11:52:e4:93:99:5d:08:33:fe:bf:7f:4c:67:b2:10:ee:c7: fd:90:a4:17:38:90:d9:3d:24:ad:b3:3c:cb:1c:c7:1f:c6:08: ac:5e:7a:b7:4c:57:ab:81:be:91:c5:e7:f9:91:99:10:32:a2: 7e:ec:5e:9d:03:70:d1:b5:3f:22:aa:7c:c0:d2:5f:c9:eb:0d: 37:3d:95:4f:e1:9c:69:92:1a:43:4f:1b:ae:e7:4c:18:ac:98: f6:34:06:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10i8CLVrVLM1MHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NzNiNDJlYTYtNTk3MS00ZmM4LWE3ZTEtYjVkZTZjYmYyNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOKJyOCpQAxD0tRyUocxZDlcrcCNAqXETxzQ RAVrLl3RgKDZ+OjyKnqgla8WGmgTIV82tr5+a4V+Gv0Y3KE914v1VAj+YW2R5J4B kjJ9C5waMJnxrMf1krmcx1MvzlgZbin0gJ1dPsFfd6R6Vo2DcXfki9U6ClYhza4u gO+sogA/Wc/GWMZyUsCEwyMYbeDjrjcDGotYJACcIVbN378q5oAPV58jlP0O088s UxVnXwKksOJNJyzcPK7efZNTvBo1YlRjWDkWSa7VyKptgUse/6UTwC1/LTb5Ylzz 1WM8UWtYlZX1mL4XQH9tQay1gKO6ICCF3aPKlxvulsc9GAdR3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmt7ng0BgK0MFJMsPNeTueIdN7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk4Y2ZjYTAtODcwZS0z ODkxLTliMDEtNjMwNTE5ZWU3NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLeJK5kxs+KFVm39qGpBGK806r5f5UGpFR0FVDWdOMayT59t+eONtxa TCx1ZvaU2mwzOoVtGfGZ8WyJLsizRK5Kz58aJW+nfeN6KcMgPhESkkZxvrywhk+K j9tHZBWpdk+p0PSyQdpcefq3qUP+nlSprleL3FwvdgWKrh81U38RTsNCaqm91+zB gV1e0wFsSFp3COvAuIoof2QuAkG/jF/f6PURUuSTmV0IM/6/f0xnshDux/2QpBc4 kNk9JK2zPMscxx/GCKxeerdMV6uBvpHF5/mRmRAyon7sXp0DcNG1PyKqfMDSX8nr DTc9lU/hnGmSGkNPG67nTBismPY0Bs0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:07 2025 by rpki-client