$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa File: 34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa (raw, json) Hash identifier: T/kilmXP5M9NlcJleEsmlDUNaqc7SF5kEd0ERnzpucY= Subject key identifier: 53:9A:29:00:D9:17:3A:42:CB:DE:F0:FF:F2:F4:18:62:18:60:7F:20 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201FAA9F798215E3EDEE4C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.29.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fa:a9:f7:98:21:5e:3e:de:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=258beaec-00d8-4abb-b5ae-cecc52eb9592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:33:aa:f2:10:08:b3:85:19:5b:df:bf:e6: b7:f9:38:32:cb:f9:93:d4:7b:63:a9:a1:b6:cb:bc: 05:91:43:48:b2:78:5c:e2:92:39:4c:c5:e8:60:16: dd:92:6d:0f:c2:f2:79:49:34:32:e7:28:4b:f9:df: 5d:d1:73:0b:db:89:11:0d:6f:b1:1b:26:14:6c:05: 10:43:4a:e3:72:aa:48:86:83:ba:e9:41:8c:6a:8f: b7:58:6e:97:bd:87:6d:d3:9e:e8:22:51:50:b2:b9: 9b:04:40:29:14:23:af:e9:d4:c7:75:d9:14:5d:7e: b7:d8:e2:20:27:d7:20:9b:48:ee:43:92:72:93:62: 83:5b:78:ce:24:22:c4:cc:dc:82:a7:2f:76:ac:37: 9d:7c:6b:15:7a:4e:a3:28:f3:55:09:53:d3:5a:9e: 87:1d:38:b1:d5:82:59:89:88:f5:d9:82:bb:d0:90: 46:ce:10:a8:bf:55:f9:a3:4a:c2:6a:82:b1:ec:1f: 70:79:dc:08:a3:77:a5:7d:89:f9:bc:ff:a1:e9:61: 76:13:63:9f:1c:8f:d2:17:ae:30:cc:5f:09:01:84: ff:d7:98:ce:44:84:8f:e8:72:8e:2b:33:c3:e1:a9: df:da:a9:90:80:61:ea:1e:e6:a4:b9:c0:1b:e4:e7: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9A:29:00:D9:17:3A:42:CB:DE:F0:FF:F2:F4:18:62:18:60:7F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d6:de:5c:20:63:e1:d8:82:c0:95:97:7a:25:b8:bd:0c:ef: f3:92:5f:c9:5b:e8:86:cc:b8:14:8a:cc:5f:dd:32:ce:3e:ff: b1:77:f1:23:13:e9:d3:fd:69:ce:f9:88:ed:06:be:19:34:54: 54:7a:b1:4b:4d:74:c5:92:a6:cb:57:11:ed:15:0b:af:17:18: ff:94:cb:51:8a:07:92:4c:00:ae:7c:de:7f:87:b6:0e:d6:91: 6f:34:5c:56:cb:80:b0:e0:c9:6b:f8:31:cc:00:73:b1:3e:84: ff:2a:7a:4b:28:4b:71:ab:3e:d5:90:b7:b3:52:d6:91:7d:04: 21:11:84:80:28:82:89:65:42:47:d1:96:64:0d:dc:82:6f:0d: e8:bd:2c:e1:03:90:9d:13:2c:9f:30:ef:41:c3:0e:c8:1a:ce: 57:57:49:98:11:41:c9:06:57:51:85:c4:a6:4d:dd:3e:03:6f: 33:d0:61:46:9b:7f:d8:6d:b7:b5:e3:84:14:de:33:bc:c0:bc: ea:e4:15:bb:78:aa:7c:e9:c6:6c:98:aa:36:43:39:7b:9e:9c: f7:0c:1c:26:d4:ca:cd:ed:aa:fb:03:c8:5c:c2:fb:a0:f2:95: 59:0c:62:1b:68:7f:af:2c:20:12:75:30:d1:00:9e:b3:07:08: 03:70:57:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfqp95ghXj7e5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjU4YmVhZWMtMDBkOC00YWJiLWI1YWUtY2VjYzUyZWI5NTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHwzqvIQCLOFGVvfv+a3+Tgyy/mT1HtjqaG2 y7wFkUNIsnhc4pI5TMXoYBbdkm0PwvJ5STQy5yhL+d9d0XML24kRDW+xGyYUbAUQ Q0rjcqpIhoO66UGMao+3WG6XvYdt057oIlFQsrmbBEApFCOv6dTHddkUXX632OIg J9cgm0juQ5Jyk2KDW3jOJCLEzNyCpy92rDedfGsVek6jKPNVCVPTWp6HHTix1YJZ iYj12YK70JBGzhCov1X5o0rCaoKx7B9wedwIo3elfYn5vP+h6WF2E2OfHI/SF64w zF8JAYT/15jORISP6HKOKzPD4anf2qmQgGHqHuakucAb5OfGaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOaKQDZFzpCy97w//L0GGIYYH8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRkZGUwYTAtNjM2My0z ZDNhLWFhZDctNGEyOWE1OWExZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvW3lwgY+HYgsCVl3oluL0M7/OSX8lb6IbMuBSKzF/dMs4+/7F38SMT 6dP9ac75iO0Gvhk0VFR6sUtNdMWSpstXEe0VC68XGP+Uy1GKB5JMAK583n+Htg7W kW80XFbLgLDgyWv4McwAc7E+hP8qeksoS3GrPtWQt7NS1pF9BCERhIAogollQkfR lmQN3IJvDei9LOEDkJ0TLJ8w70HDDsgazldXSZgRQckGV1GFxKZN3T4DbzPQYUab f9htt7XjhBTeM7zAvOrkFbt4qnzpxmyYqjZDOXuenPcMHCbUys3tqvsDyFzC+6Dy lVkMYhtof68sIBJ1MNEAnrMHCANwV9o= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:01 2025 by rpki-client