$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8ab59d-fa71-3d03-a467-d2bb5d66d0aa.roa File: 2a8ab59d-fa71-3d03-a467-d2bb5d66d0aa.roa (raw, json) Hash identifier: D+g6vh/S8c+ZFWxeSgS7NIFwFLYPxyGLluQsRn830ys= Subject key identifier: CB:57:6A:F2:92:1F:F1:82:BD:2B:BC:00:D8:AB:4A:E7:10:53:6F:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B52A779541A93829D3BA2B4E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8ab59d-fa71-3d03-a467-d2bb5d66d0aa.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 19905 IP address blocks: 173.25.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:79:54:1a:93:82:9d:3b:a2:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=b53c246f-9cb4-4e36-82b9-d770d7b63fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:fa:0e:01:e6:cf:19:3a:79:b0:3a:f8:12: 6a:8d:71:e4:b0:38:da:20:24:76:b6:27:bc:80:62: c8:2a:62:0e:dc:6c:0e:9b:c2:c9:12:2c:1c:d1:93: 1a:2f:50:86:7a:b0:17:e7:da:db:be:a4:33:d9:a0: 47:d4:7c:d5:01:23:1c:37:c6:bb:62:ea:9c:18:f9: 7b:ce:f2:16:ba:04:62:07:02:48:3e:86:09:f4:d9: ea:93:38:a5:1d:74:9e:71:9f:bc:fc:60:ba:9c:eb: 99:4a:3e:bd:22:47:d0:85:00:d9:de:fd:ff:ad:fc: 12:30:57:75:4e:3a:83:35:cb:17:1f:41:c1:d7:c9: b2:1a:2c:5c:2f:91:8f:cd:31:53:a3:26:11:7e:17: 10:5f:c3:f9:ed:2d:5d:bc:09:a9:68:91:82:cf:0e: f9:95:a5:fd:f9:3a:34:99:b6:73:e0:58:81:d9:62: e2:24:7e:e2:81:75:31:27:b6:6f:40:27:79:d1:3b: 5a:fa:5e:a9:85:6e:c4:92:ef:10:e6:44:f8:2f:09: 39:8b:37:13:c9:82:2b:18:d2:33:73:36:96:8c:66: d0:ff:58:ac:d3:ef:17:b8:a5:0d:33:86:33:5e:6f: a8:a7:77:57:b2:5a:57:5a:3f:85:25:20:84:f3:e7: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:57:6A:F2:92:1F:F1:82:BD:2B:BC:00:D8:AB:4A:E7:10:53:6F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a8ab59d-fa71-3d03-a467-d2bb5d66d0aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f4:41:77:b7:c7:e2:80:c8:56:b6:51:1f:f8:2a:72:9c:1e: d0:65:90:1d:cd:0b:40:39:b7:d6:29:ea:4b:22:8c:62:53:41: 55:3b:b2:9c:10:f8:65:6a:9f:ca:35:e3:a1:3d:ca:54:7c:34: 9f:a9:c6:6f:07:0b:d6:86:7a:81:25:29:67:d8:41:73:8f:3b: 93:29:fa:40:4e:a4:48:d6:3e:1f:de:19:15:d6:c7:81:b7:77: c9:df:20:14:89:90:00:df:80:b2:c9:aa:3b:0b:6e:a9:a1:5c: 73:0d:28:64:7d:97:62:c7:a6:ab:92:f7:7f:bd:1d:ea:c2:18: aa:b5:c0:52:e0:4f:5e:3e:63:96:7a:38:5e:6e:42:72:53:77: a2:a1:bc:89:58:a5:24:09:3c:0e:2b:c0:4f:a3:a1:63:68:97: e4:1d:54:bf:b6:ba:b3:b3:2f:f0:ce:ff:ff:94:7d:8e:6a:c5: 58:27:ac:1f:c9:86:fe:a6:20:cd:3a:32:1a:ab:2b:28:8c:fa: ea:2e:ff:1d:8d:91:dc:a7:39:f6:20:55:4e:be:0b:a7:ca:54: 66:e1:7e:5c:08:27:89:48:3f:b9:8a:66:38:18:d1:27:f5:69: 12:74:dc:fc:d6:2f:6e:6b:fe:55:7a:7c:55:91:e9:f8:09:2d: 55:66:89:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3lUGpOCnTuitOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YjUzYzI0NmYtOWNiNC00ZTM2LTgyYjktZDc3MGQ3YjYzZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdf6DgHmzxk6ebA6+BJqjXHksDjaICR2tie8 gGLIKmIO3GwOm8LJEiwc0ZMaL1CGerAX59rbvqQz2aBH1HzVASMcN8a7YuqcGPl7 zvIWugRiBwJIPoYJ9NnqkzilHXSecZ+8/GC6nOuZSj69IkfQhQDZ3v3/rfwSMFd1 TjqDNcsXH0HB18myGixcL5GPzTFToyYRfhcQX8P57S1dvAmpaJGCzw75laX9+To0 mbZz4FiB2WLiJH7igXUxJ7ZvQCd50Tta+l6phW7Eku8Q5kT4Lwk5izcTyYIrGNIz czaWjGbQ/1is0+8XuKUNM4YzXm+op3dXslpXWj+FJSCE8+eEyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtXavKSH/GCvSu8ANirSucQU29tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmE4YWI1OWQtZmE3MS0z ZDAzLWE0NjctZDJiYjVkNjZkMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj0QXe3x+KAyFa2UR/4KnKcHtBlkB3NC0A5t9Yp6ksijGJTQVU7spwQ +GVqn8o146E9ylR8NJ+pxm8HC9aGeoElKWfYQXOPO5Mp+kBOpEjWPh/eGRXWx4G3 d8nfIBSJkADfgLLJqjsLbqmhXHMNKGR9l2LHpquS93+9HerCGKq1wFLgT14+Y5Z6 OF5uQnJTd6KhvIlYpSQJPA4rwE+joWNol+QdVL+2urOzL/DO//+UfY5qxVgnrB/J hv6mIM06MhqrKyiM+uou/x2NkdynOfYgVU6+C6fKVGbhflwIJ4lIP7mKZjgY0Sf1 aRJ03PzWL25r/lV6fFWR6fgJLVVmifY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:54 2025 by rpki-client