$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa File: 324edc91-ce19-3b74-87c2-49408a273b64.roa (raw, json) Hash identifier: KgIgJyYyvLvzu1TTsEqXvSEeflQARR3EGV9tD+n3ReA= Subject key identifier: 5E:3C:75:64:CF:2F:71:19:91:2C:14:25:7E:A5:BC:85:E7:CE:EC:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B3557048805B008E04255E180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 216.108.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:04:88:05:b0:08:e0:42:55:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8c896a40-25ee-477a-8d71-195cd11847f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:81:2e:b9:46:4d:0c:f9:49:e0:ee:8c:17: a9:54:85:6e:d3:43:d9:54:b8:b5:b0:5a:1f:67:0e: 97:5b:eb:18:2f:e6:07:a9:64:10:ff:ac:f8:7e:2e: fd:53:ab:cd:2e:7e:ad:8c:ee:ce:db:d0:b5:d7:8e: fb:dc:fb:9f:fe:74:47:e4:f2:f6:b1:d0:38:6d:ab: 69:61:b7:1c:18:4e:26:bb:0b:f6:ff:ac:66:22:dd: a0:80:6d:9f:05:b4:bf:5e:6e:8c:ae:db:5c:c6:42: b6:a5:32:32:4f:59:1d:41:d7:b7:37:1e:e3:44:e8: 59:fe:f5:8f:88:1e:0d:a9:7e:a4:a3:b1:07:90:fb: 21:2d:9e:fc:96:a9:d2:c0:69:38:66:56:ec:83:08: d0:17:a8:5e:60:46:77:28:d9:0c:47:95:b5:ff:c1: f1:7c:73:c2:2b:53:6d:14:49:c5:9e:20:19:19:3b: 68:a8:b9:97:bf:da:8f:02:2f:a1:34:08:ef:28:1f: 92:32:d5:6f:18:be:55:77:bd:28:1b:aa:21:2f:3b: 23:0a:ae:8c:4c:8e:96:bf:8d:01:c6:03:60:00:5e: 8a:a3:d2:12:a0:d1:2b:bf:b2:be:10:4a:41:06:d3: 37:77:9b:27:af:cb:b3:f1:0d:01:c7:09:e3:d2:22: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3C:75:64:CF:2F:71:19:91:2C:14:25:7E:A5:BC:85:E7:CE:EC:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/324edc91-ce19-3b74-87c2-49408a273b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:99:9b:11:87:b6:0b:14:95:ee:30:9a:77:38:6e:4b:2d:f6: 16:09:bd:75:41:8d:f2:de:03:73:a0:b5:c3:22:f0:1e:11:77: eb:e6:51:ee:48:64:80:b4:19:db:99:62:69:98:23:bc:65:11: ec:63:80:84:ad:c9:8c:64:4c:47:94:db:88:80:be:08:44:4f: 54:d7:54:ed:91:d5:b9:d3:70:bc:96:ec:cf:6d:e2:6c:f9:4e: 6d:8c:b6:a8:b0:87:ed:e1:3c:ac:04:e7:11:e8:01:aa:9c:4c: eb:bd:11:fa:b0:b4:51:5c:ee:3c:8b:18:45:6b:cb:3a:5c:8d: 7e:b2:ba:24:4d:f4:9c:63:ce:f6:28:e4:2c:e8:ae:1d:b9:70: 21:3d:9b:81:63:27:4d:d9:36:3f:6f:44:4d:59:67:ec:ed:02: e4:38:40:26:88:97:ae:43:4c:90:ed:49:6f:51:ca:3f:9b:55: ae:09:02:67:94:a1:db:16:a3:01:c5:04:d3:48:a0:f5:31:88: c3:ef:f9:3f:77:0d:de:b1:e5:3d:fc:a3:c8:91:81:10:e9:6f: f9:78:e3:e3:2c:76:bd:e8:6b:b2:3c:a7:92:05:34:3f:ff:06: c7:53:92:93:8e:1c:fa:dd:e8:03:17:78:af:e8:03:5c:dd:48: 0e:07:8a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VwSIBbAI4EJV4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OGM4OTZhNDAtMjVlZS00NzdhLThkNzEtMTk1Y2QxMTg0N2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSaBLrlGTQz5SeDujBepVIVu00PZVLi1sFof Zw6XW+sYL+YHqWQQ/6z4fi79U6vNLn6tjO7O29C114773Puf/nRH5PL2sdA4batp YbccGE4muwv2/6xmIt2ggG2fBbS/Xm6MrttcxkK2pTIyT1kdQde3Nx7jROhZ/vWP iB4NqX6ko7EHkPshLZ78lqnSwGk4ZlbsgwjQF6heYEZ3KNkMR5W1/8HxfHPCK1Nt FEnFniAZGTtoqLmXv9qPAi+hNAjvKB+SMtVvGL5Vd70oG6ohLzsjCq6MTI6Wv40B xgNgAF6Ko9ISoNErv7K+EEpBBtM3d5snr8uz8Q0Bxwnj0iJkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF48dWTPL3EZkSwUJX6lvIXnzuwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzI0ZWRjOTEtY2UxOS0z Yjc0LTg3YzItNDk0MDhhMjczYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GzaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6ZmxGHtgsUle4wmnc4bkst9hYJvXVBjfLeA3OgtcMi8B4Rd+vmUe5I ZIC0GduZYmmYI7xlEexjgIStyYxkTEeU24iAvghET1TXVO2R1bnTcLyW7M9t4mz5 Tm2Mtqiwh+3hPKwE5xHoAaqcTOu9EfqwtFFc7jyLGEVryzpcjX6yuiRN9JxjzvYo 5Czorh25cCE9m4FjJ03ZNj9vRE1ZZ+ztAuQ4QCaIl65DTJDtSW9Ryj+bVa4JAmeU odsWowHFBNNIoPUxiMPv+T93Dd6x5T38o8iRgRDpb/l44+Msdr3oa7I8p5IFND// BsdTkpOOHPrd6AMXeK/oA1zdSA4Hikc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:13 2025 by rpki-client