$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa File: 34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa (raw, json) Hash identifier: G8SkcQl7EZR4DzUwwUr1T7ADzMaaC3XCcSUJjjJcd08= Subject key identifier: 29:BD:DE:81:BE:2B:49:3A:05:55:1F:9F:F9:0F:BE:89:7B:83:2F:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797EC7FC0C77DD384C3B400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.29.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ec:7f:c0:c7:7d:d3:84:c3:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=85efb6ae-7e18-443f-99e7-2176e74828e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:f0:e4:ce:2e:1a:27:f7:e9:d1:9a:c9:df: d8:aa:cf:a4:2b:3b:22:8c:29:3c:50:e3:a6:fd:a2: 0f:75:5a:6b:c8:55:bf:4b:f4:68:b5:88:26:6d:0d: 96:fd:68:eb:5e:1c:31:93:b2:bf:a8:f1:52:eb:49: ef:db:16:fd:5d:77:e6:46:af:79:cf:94:ba:8b:01: 02:b5:40:40:11:2d:16:c5:a7:99:ea:5b:89:eb:3b: 63:a3:96:57:d7:ba:17:08:6a:67:a6:e6:c0:63:23: ec:4c:31:03:ce:a2:a1:17:d2:0d:f5:ca:47:a0:73: f7:2c:78:5d:f9:01:b7:0b:aa:10:4f:57:8c:11:0e: 87:51:b2:3c:2f:c8:8e:71:38:f1:1a:3a:b6:04:98: d5:31:45:8f:fa:f9:78:23:11:85:e9:a8:d2:e7:f8: be:2e:32:b7:a7:a6:26:5c:37:22:d9:7e:8c:4e:12: d5:54:1d:cc:94:84:bd:8d:25:30:5c:56:5f:bd:29: 26:69:c7:1c:ae:de:6e:b2:1b:dd:19:59:9b:66:23: ea:90:3c:48:a5:d5:e4:25:ae:74:ba:2a:c8:26:e2: a4:d8:ec:d9:ae:3b:c6:9d:05:a9:96:ce:73:3c:47: 97:93:ae:ec:0a:c0:cc:2b:2d:79:56:3b:eb:ad:2b: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:DE:81:BE:2B:49:3A:05:55:1F:9F:F9:0F:BE:89:7B:83:2F:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:51:c7:63:70:2e:88:41:50:94:ec:20:2f:15:45:9f:ec:40: d7:33:74:88:e9:d4:58:e2:27:85:5a:fd:66:7b:90:26:de:a8: 37:0b:c7:b2:18:78:8c:8d:24:0f:60:39:96:28:8f:08:c8:6f: 75:88:7b:c9:24:78:1a:1a:c5:ad:69:7c:64:8e:e6:97:09:61: b8:c2:d7:cd:eb:af:a3:3e:1e:a2:68:be:7c:e4:d2:5d:5f:38: 80:4a:8b:20:e2:95:b9:12:d1:51:87:ff:a1:c0:18:2e:69:b5: 3d:4d:02:0d:96:db:39:0b:1f:fe:7d:d7:4c:a7:f0:17:96:55: 4e:49:1f:8d:fe:ff:e9:61:d5:f4:08:47:bb:41:c7:80:a7:80: 3a:09:da:b8:47:10:94:b8:17:11:61:df:9d:70:69:a6:6d:91: 2f:5c:7d:ae:7d:12:a6:d2:e6:55:1e:2d:b6:2d:bc:5f:82:11: ce:21:34:1e:49:ea:c2:4c:21:c8:59:ec:aa:00:00:05:81:18: 15:bc:f3:d4:ca:f6:8c:61:62:42:0a:83:10:96:fd:6a:95:b9: af:79:e7:75:f6:ee:14:cb:8b:32:3c:a9:a4:c7:72:49:7c:64: 6b:94:82:a4:68:71:7c:c5:fc:9a:ae:d5:16:6b:5a:41:30:09: 02:bd:30:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+x/wMd904TDtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODVlZmI2YWUtN2UxOC00NDNmLTk5ZTctMjE3NmU3NDgyOGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKbw5M4uGif36dGayd/Yqs+kKzsijCk8UOOm /aIPdVpryFW/S/RotYgmbQ2W/WjrXhwxk7K/qPFS60nv2xb9XXfmRq95z5S6iwEC tUBAES0WxaeZ6luJ6ztjo5ZX17oXCGpnpubAYyPsTDEDzqKhF9IN9cpHoHP3LHhd +QG3C6oQT1eMEQ6HUbI8L8iOcTjxGjq2BJjVMUWP+vl4IxGF6ajS5/i+LjK3p6Ym XDci2X6MThLVVB3MlIS9jSUwXFZfvSkmacccrt5ushvdGVmbZiPqkDxIpdXkJa50 uirIJuKk2OzZrjvGnQWpls5zPEeXk67sCsDMKy15VjvrrSvISwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm93oG+K0k6BVUfn/kPvol7gy/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRjMzhlMmQtZDYyYi0z YTFjLWI5ZDgtMTFhZWY2MTMzYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVRx2NwLohBUJTsIC8VRZ/sQNczdIjp1FjiJ4Va/WZ7kCbeqDcLx7IY eIyNJA9gOZYojwjIb3WIe8kkeBoaxa1pfGSO5pcJYbjC183rr6M+HqJovnzk0l1f OIBKiyDilbkS0VGH/6HAGC5ptT1NAg2W2zkLH/5910yn8BeWVU5JH43+/+lh1fQI R7tBx4CngDoJ2rhHEJS4FxFh351waaZtkS9cfa59EqbS5lUeLbYtvF+CEc4hNB5J 6sJMIchZ7KoAAAWBGBW889TK9oxhYkIKgxCW/WqVua9553X27hTLizI8qaTHckl8 ZGuUgqRocXzF/Jqu1RZrWkEwCQK9MNk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:51 2025 by rpki-client