$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa File: 31ce5d12-41df-3e90-a6ba-a79c0530d407.roa (raw, json) Hash identifier: baHMsm2X9IExeyCkb2ZCu4mP60DiZw/HxgCRktMaRyk= Subject key identifier: CE:42:1D:69:81:B7:E6:DB:CE:41:CA:B4:88:60:2B:5E:58:DA:9E:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0E41665DB2B89BC311BBC380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 19905 IP address blocks: 173.18.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:66:5d:b2:b8:9b:c3:11:bb:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=5030a19c-ad7f-43b3-af30-fec2e233b85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:86:a3:54:c8:29:38:74:74:b6:32:25:85: c6:86:92:91:ab:52:f0:bc:54:85:3e:1b:5e:6c:ed: 4d:0d:fc:18:5e:6e:38:36:fd:64:41:4a:0e:78:7b: 2d:ec:03:74:45:53:82:8b:4d:fc:41:c8:1a:bc:f8: 77:b0:f4:a5:80:d0:d4:37:e4:46:24:51:16:a7:54: b2:f1:36:53:6c:42:e9:fe:12:3d:82:a3:f0:30:36: b8:f4:41:64:81:ea:95:87:b0:0a:ba:fb:ec:b3:a3: 16:b1:1f:e4:51:78:84:b1:ce:1b:10:fc:9b:de:61: 55:f0:20:43:b1:47:dc:74:a7:07:6b:25:e5:5f:bd: e0:1d:ad:41:ae:b4:54:7d:82:a6:40:19:15:37:ab: 56:06:ac:43:1d:73:2d:04:81:59:52:a3:fc:5d:50: 9c:1a:fd:4c:b5:68:b9:4f:ef:25:13:e6:28:cb:ca: 49:3d:94:0c:e9:a4:b5:d4:56:87:9e:ba:78:e1:d7: d6:bf:0b:cb:44:77:4f:3d:df:64:b8:e8:f7:d5:c9: 76:36:e9:ff:d1:6a:f1:3c:00:a0:3e:df:0c:88:21: ba:45:19:ac:71:cb:b1:1e:f7:43:ad:f6:de:cc:85: a3:72:42:ff:e5:6d:0f:69:54:26:d9:f7:26:6f:a0: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:42:1D:69:81:B7:E6:DB:CE:41:CA:B4:88:60:2B:5E:58:DA:9E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8d:5b:40:e2:8d:f9:16:b7:4b:18:61:90:cf:c3:d9:b2:8e: b1:29:ba:3f:03:f1:0b:49:ea:6a:83:cb:77:02:0b:26:2c:49: 9e:4a:51:cf:56:a0:00:fe:ea:dc:79:bd:b0:98:d0:28:88:c5: db:73:55:e0:9b:c1:16:fc:4f:5b:99:12:14:72:5f:73:96:27: c9:94:a5:ee:16:83:f6:81:5e:90:27:71:60:12:27:00:b9:47: 7f:fb:00:d8:41:c0:58:a3:50:0c:fe:26:84:38:69:63:98:a3: 87:62:ea:76:91:21:8b:4c:fb:9a:9d:cf:48:ce:b3:4a:c7:b4: ec:1d:24:13:99:20:41:97:15:0c:e3:ae:df:80:af:d9:30:dd: c4:dc:7f:49:f2:8b:aa:23:85:aa:3b:b5:f0:ad:bb:82:cb:2a: 80:a6:7d:bb:8a:97:c1:1c:d1:34:78:24:ce:0a:54:1b:1d:20: a5:49:30:2d:4b:66:71:5a:c0:27:c5:79:2f:fd:e1:47:2b:f9: 0f:77:d1:ac:2d:4a:6a:0b:3b:68:3c:27:6a:63:11:ad:bc:55: b2:67:d9:fa:a5:6c:a2:1f:6d:28:f4:18:4b:80:bf:7a:b2:17: b9:a4:38:30:19:92:7e:5c:a8:c7:56:d6:bf:4f:71:df:5a:d7: 72:35:d1:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWZdsribwxG7w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTAzMGExOWMtYWQ3Zi00M2IzLWFmMzAtZmVjMmUyMzNiODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGGGo1TIKTh0dLYyJYXGhpKRq1LwvFSFPhte bO1NDfwYXm44Nv1kQUoOeHst7AN0RVOCi038QcgavPh3sPSlgNDUN+RGJFEWp1Sy 8TZTbELp/hI9gqPwMDa49EFkgeqVh7AKuvvss6MWsR/kUXiEsc4bEPyb3mFV8CBD sUfcdKcHayXlX73gHa1BrrRUfYKmQBkVN6tWBqxDHXMtBIFZUqP8XVCcGv1MtWi5 T+8lE+Yoy8pJPZQM6aS11FaHnrp44dfWvwvLRHdPPd9kuOj31cl2Nun/0WrxPACg Pt8MiCG6RRmsccuxHvdDrfbezIWjckL/5W0PaVQm2fcmb6BIewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5CHWmBt+bbzkHKtIhgK15Y2p65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzFjZTVkMTItNDFkZi0z ZTkwLWE2YmEtYTc5YzA1MzBkNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSNW0DijfkWt0sYYZDPw9myjrEpuj8D8QtJ6mqDy3cCCyYsSZ5KUc9W oAD+6tx5vbCY0CiIxdtzVeCbwRb8T1uZEhRyX3OWJ8mUpe4Wg/aBXpAncWASJwC5 R3/7ANhBwFijUAz+JoQ4aWOYo4di6naRIYtM+5qdz0jOs0rHtOwdJBOZIEGXFQzj rt+Ar9kw3cTcf0nyi6ojhao7tfCtu4LLKoCmfbuKl8Ec0TR4JM4KVBsdIKVJMC1L ZnFawCfFeS/94Ucr+Q930awtSmoLO2g8J2pjEa28VbJn2fqlbKIfbSj0GEuAv3qy F7mkODAZkn5cqMdW1r9Pcd9a13I10Ts= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:49 2025 by rpki-client