$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa File: 2c089dee-03bd-3da6-941c-b85b2c8db654.roa (raw, json) Hash identifier: 56GUsLlP7aX5ydUix4q8uzzSfjrMQm+2ngvZPlYUW9E= Subject key identifier: 23:B0:BD:DE:6E:05:4E:C1:59:6A:D7:71:B4:97:F8:AF:C1:64:D7:A6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D71B970660FBF61D329D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.19.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:1b:97:06:60:fb:f6:1d:32:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=2dab2b72-44a9-4904-bc30-e9314d1ef3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:d8:96:ad:40:35:1b:6f:42:f2:86:74:2c: f5:bc:b6:3d:74:96:7c:16:b5:f8:e3:7c:09:3e:74: 3d:9d:be:be:ab:c6:31:6d:06:70:53:1e:f9:a5:e8: 9b:19:07:d2:b7:8b:2d:1a:09:d6:c0:50:b6:b7:bd: 9b:97:f8:2b:58:40:87:6f:c8:2c:2d:8b:f4:f5:cc: ab:89:eb:44:69:5d:51:20:cb:a0:65:86:11:9c:d5: c7:c3:5e:88:4f:9e:06:42:70:f8:3d:11:c4:49:e9: 02:35:88:2d:10:8f:0a:97:42:da:ac:70:39:4a:a4: 1e:68:15:fd:bc:91:f7:44:c9:1b:fc:ca:68:34:c5: 52:13:9d:a9:d7:e3:2a:3e:84:e1:be:3b:8e:27:6c: 9e:2e:43:f0:6b:1f:7d:2a:b5:e8:2c:3d:49:00:7f: d4:cf:d4:2b:70:f5:b8:a7:9c:68:8d:a7:ef:7c:09: 2f:e1:ea:78:b5:44:23:0c:d2:e0:db:04:11:b4:ad: 5b:82:0a:80:a6:54:67:bf:03:d4:66:2a:20:9b:e1: d0:99:c1:ad:de:02:2c:d4:a3:44:85:7e:3e:89:ef: 03:c4:5a:72:22:df:de:6b:5a:6c:21:5c:70:de:0e: fe:f7:0a:64:30:dc:fc:ab:13:0d:3c:a4:e4:2b:04: db:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:BD:DE:6E:05:4E:C1:59:6A:D7:71:B4:97:F8:AF:C1:64:D7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3d:cd:a0:a9:62:15:22:d9:ae:89:1a:0e:18:29:2c:65:9a: 1e:74:7b:65:1a:b4:65:cb:8b:dd:5a:41:5f:4f:96:1c:26:8b: 03:40:0e:6c:9f:ce:c1:3d:4b:c8:66:cd:99:21:32:78:b4:2a: 5d:54:21:df:dc:8b:da:da:d1:2d:d7:5c:d8:e8:ca:49:71:97: 12:73:71:b8:47:6d:ec:7a:9e:fb:ff:01:a2:31:b5:c5:ed:c9: e7:d3:01:fe:52:21:f5:f6:35:52:a8:bd:ee:ab:45:0d:21:06: 2c:36:3a:a8:8f:01:3b:7b:1c:56:47:90:a5:3f:fe:bc:80:96: 5b:37:5f:1e:68:a2:88:2b:68:2e:37:a9:ae:30:cb:45:e4:cc: a5:64:30:86:e0:d3:57:76:d0:36:5b:0d:6d:20:2a:4d:5b:cb: 34:77:3b:a7:17:74:cc:c8:e9:46:cb:e7:6f:ac:8b:e1:c1:b9: d1:3f:ce:03:0f:a6:1e:07:19:45:7b:8a:8a:fc:97:d7:35:f5: ca:be:32:60:02:27:20:73:8e:d5:9c:38:fe:3b:1b:58:97:a3: 65:6c:64:6c:59:2a:52:f0:6a:3a:b4:cc:dd:ce:2b:e6:f7:51: 98:f6:c7:0c:83:f5:d9:97:d0:a0:e0:27:b5:79:b9:e3:1c:c3: 34:3f:e4:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1xuXBmD79h0ynQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MmRhYjJiNzItNDRhOS00OTA0LWJjMzAtZTkzMTRkMWVmM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOzYlq1ANRtvQvKGdCz1vLY9dJZ8FrX443wJ PnQ9nb6+q8YxbQZwUx75peibGQfSt4stGgnWwFC2t72bl/grWECHb8gsLYv09cyr ietEaV1RIMugZYYRnNXHw16IT54GQnD4PRHESekCNYgtEI8Kl0LarHA5SqQeaBX9 vJH3RMkb/MpoNMVSE52p1+MqPoThvjuOJ2yeLkPwax99KrXoLD1JAH/Uz9QrcPW4 p5xojafvfAkv4ep4tUQjDNLg2wQRtK1bggqAplRnvwPUZiogm+HQmcGt3gIs1KNE hX4+ie8DxFpyIt/ea1psIVxw3g7+9wpkMNz8qxMNPKTkKwTbqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOwvd5uBU7BWWrXcbSX+K/BZNemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmMwODlkZWUtMDNiZC0z ZGE2LTk0MWMtYjg1YjJjOGRiNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ9zaCpYhUi2a6JGg4YKSxlmh50e2UatGXLi91aQV9PlhwmiwNADmyf zsE9S8hmzZkhMni0Kl1UId/ci9ra0S3XXNjoyklxlxJzcbhHbex6nvv/AaIxtcXt yefTAf5SIfX2NVKove6rRQ0hBiw2OqiPATt7HFZHkKU//ryAlls3Xx5ooograC43 qa4wy0XkzKVkMIbg01d20DZbDW0gKk1byzR3O6cXdMzI6UbL52+si+HBudE/zgMP ph4HGUV7ior8l9c19cq+MmACJyBzjtWcOP47G1iXo2VsZGxZKlLwajq0zN3OK+b3 UZj2xwyD9dmX0KDgJ7V5ueMcwzQ/5E4= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:39 2025 by rpki-client