$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d7ebec5-b742-3eae-ab47-4019418d6098.roa File: 2d7ebec5-b742-3eae-ab47-4019418d6098.roa (raw, json) Hash identifier: lZ5bWKvgQpGIG3yCWqxPVA9L6lYzsF3KL88mY7z2owE= Subject key identifier: 2E:8C:6A:B9:CC:AB:C9:A4:76:85:1D:ED:55:75:9A:AD:95:0C:59:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C73AE9E755EC57E86F400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d7ebec5-b742-3eae-ab47-4019418d6098.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.19.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:73:ae:9e:75:5e:c5:7e:86:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=bbf729dd-72c4-4dd7-bcdb-d3997f1962b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:01:47:c0:04:57:af:78:70:d8:a3:cb:c6: 9d:d3:1f:95:af:60:af:fb:bc:ac:0d:ec:96:be:d5: 09:98:9e:41:8e:e7:a1:1b:0b:97:d1:82:89:52:66: ec:16:7a:33:38:ac:80:49:b4:c1:ca:81:7b:39:7b: b3:ec:e9:15:f8:b1:c2:4b:8c:40:76:89:74:b0:47: 92:af:cc:db:ee:a9:df:7f:37:3f:f9:a6:e6:a4:bd: ac:9a:0b:50:66:11:53:03:1b:2f:37:2b:e0:43:5c: 00:f1:48:06:21:51:25:8d:63:08:8c:59:10:19:9c: 21:be:8e:27:2b:e9:14:54:72:b9:58:f2:94:f2:d1: 46:03:04:08:47:0f:ea:aa:24:c4:d7:b3:3f:dd:48: 02:f1:6b:1b:e7:2a:5d:2e:7c:51:5d:e4:69:53:55: 23:4e:6b:04:5f:43:18:25:41:ad:9a:b8:6a:d1:0d: 9e:33:f9:b3:6a:af:d6:0f:c1:3c:39:63:7c:38:b6: d1:21:ce:a1:72:3a:47:ce:cc:57:75:fa:74:e4:a5: b2:08:17:a9:1a:9b:02:31:12:ec:f2:17:a9:87:ce: 9b:cc:62:28:d2:0e:ec:c4:82:73:3d:74:12:39:7b: ca:cf:f9:01:50:c5:32:76:14:0d:17:48:b2:12:2e: 6e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8C:6A:B9:CC:AB:C9:A4:76:85:1D:ED:55:75:9A:AD:95:0C:59:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d7ebec5-b742-3eae-ab47-4019418d6098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4e:97:8d:60:bd:22:0b:f7:5e:e5:94:46:7f:fc:05:f8:50: 64:b4:cc:4b:eb:ed:5d:0f:d0:19:7c:d7:fc:a9:02:dd:32:c1: 80:19:99:f1:5c:38:e1:fd:09:ba:b9:b4:dc:aa:09:a2:8d:df: 3b:1d:a4:5b:1a:88:46:2d:78:80:67:97:45:69:7e:27:51:3f: 65:d5:ec:cb:79:2c:ae:ac:9d:4a:2e:26:e4:a7:1a:b4:0f:b8: 27:da:ef:72:e5:a0:28:85:5d:0e:3f:c8:c4:c8:21:d2:c1:b1: a5:5c:d1:e9:0d:a6:7a:30:92:05:3c:81:fe:9d:7c:a3:02:52: 5f:a2:c0:5a:8f:5c:88:a9:8d:3c:6e:cf:42:94:5d:46:30:98: 52:0f:c0:1a:40:d9:82:db:41:c5:90:20:01:76:93:e2:ae:e1: 07:8a:05:d3:67:b1:0b:94:93:06:cf:86:6d:b1:34:af:60:b6: 60:7d:2e:0e:e5:aa:70:97:dd:91:40:68:48:75:ad:8b:bb:4d: cb:dd:a6:5b:4d:59:7a:06:9e:57:57:f6:f9:2d:71:35:e1:b5: 37:45:df:a1:b5:a5:e6:60:0e:9e:80:b5:52:cf:05:6a:55:9c: 09:2c:b9:b1:b9:a5:56:36:e7:fa:43:b0:ed:45:95:b9:c3:d0: 78:5c:5b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHOunnVexX6G9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YmJmNzI5ZGQtNzJjNC00ZGQ3LWJjZGItZDM5OTdmMTk2MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz24BR8AEV694cNijy8ad0x+Vr2Cv+7ysDeyW vtUJmJ5BjuehGwuX0YKJUmbsFnozOKyASbTByoF7OXuz7OkV+LHCS4xAdol0sEeS r8zb7qnffzc/+abmpL2smgtQZhFTAxsvNyvgQ1wA8UgGIVEljWMIjFkQGZwhvo4n K+kUVHK5WPKU8tFGAwQIRw/qqiTE17M/3UgC8Wsb5ypdLnxRXeRpU1UjTmsEX0MY JUGtmrhq0Q2eM/mzaq/WD8E8OWN8OLbRIc6hcjpHzsxXdfp05KWyCBepGpsCMRLs 8heph86bzGIo0g7sxIJzPXQSOXvKz/kBUMUydhQNF0iyEi5u5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6MarnMq8mkdoUd7VV1mq2VDFm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ3ZWJlYzUtYjc0Mi0z ZWFlLWFiNDctNDAxOTQxOGQ2MDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRPnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhOl41gvSIL917llEZ//AX4UGS0zEvr7V0P0Bl81/ypAt0ywYAZmfFc OOH9Cbq5tNyqCaKN3zsdpFsaiEYteIBnl0VpfidRP2XV7Mt5LK6snUouJuSnGrQP uCfa73LloCiFXQ4/yMTIIdLBsaVc0ekNpnowkgU8gf6dfKMCUl+iwFqPXIipjTxu z0KUXUYwmFIPwBpA2YLbQcWQIAF2k+Ku4QeKBdNnsQuUkwbPhm2xNK9gtmB9Lg7l qnCX3ZFAaEh1rYu7TcvdpltNWXoGnldX9vktcTXhtTdF36G1peZgDp6AtVLPBWpV nAksubG5pVY25/pDsO1FlbnD0HhcW2E= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:26 2025 by rpki-client