$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3695b8ae-fab9-3f4d-ba61-96923ce7e728.roa File: 3695b8ae-fab9-3f4d-ba61-96923ce7e728.roa (raw, json) Hash identifier: aijjAgW2ezvr98BddRnNrQk//xhtuzNUfYIxFpHIZRw= Subject key identifier: 47:48:9B:F4:1B:8E:B4:92:1D:DD:88:6F:8A:8F:B7:72:0F:D9:65:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475C5FC4AEAE42A6F6EC1800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3695b8ae-fab9-3f4d-ba61-96923ce7e728.roa Signing time: Mon 22 Sep 2025 11:56:13 +0000 ROA not before: Mon 22 Sep 2025 11:56:13 +0000 ROA not after: Sun 21 Dec 2025 12:56:13 +0000 asID: 19905 IP address blocks: 173.22.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:5f:c4:ae:ae:42:a6:f6:ec:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:13 2025 GMT Not After : Dec 21 12:56:13 2025 GMT Subject: CN=dc6132c3-45d6-4de4-a16d-f5459c69e07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:03:bc:e6:02:e4:45:3b:c3:a2:52:a3:12:03: 1c:aa:7a:b0:cf:bd:8b:d4:ad:6a:6d:ee:a6:5c:f9: 6c:db:8e:3f:29:0a:cb:37:61:92:16:90:84:e7:65: 39:ee:35:4c:57:27:ff:9c:c9:fc:d2:f6:5d:6a:7b: ac:05:ef:f6:10:8e:8d:a0:46:2b:c1:61:bf:e4:3b: 57:ff:f6:52:40:22:47:38:a9:17:9b:16:da:80:cc: 74:72:8d:1f:04:d2:ad:ee:98:03:fe:1f:f2:ed:a6: 21:c7:4d:fd:37:a6:bc:ae:92:1b:5e:3f:89:84:3c: d7:e1:15:73:85:e0:43:50:1e:14:d2:f1:8f:2f:89: 85:e2:05:4d:8b:ea:3b:17:ff:20:58:7b:ab:cf:02: c8:b4:e0:53:c1:24:35:f6:03:11:05:77:f6:1c:6f: d2:a2:3a:48:51:87:96:99:1f:b0:70:9d:c1:38:0e: be:a0:9c:e6:ed:e6:44:09:63:64:d3:30:1b:54:dd: 3c:f4:bf:de:fb:10:ce:16:7c:88:eb:d0:5c:c7:78: 1a:a3:92:a5:4f:a4:d5:ce:ba:15:bc:10:e9:55:99: d7:4b:c1:4e:89:5e:61:ab:50:2a:53:b0:3f:a1:5d: 23:70:ea:3e:af:cf:e6:54:65:28:a6:9a:68:f7:84: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:48:9B:F4:1B:8E:B4:92:1D:DD:88:6F:8A:8F:B7:72:0F:D9:65:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3695b8ae-fab9-3f4d-ba61-96923ce7e728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0b:91:32:4d:89:67:86:76:87:8e:d1:0d:c6:ba:96:5c:f6: 01:02:45:e0:fa:01:99:c7:16:a6:3a:a8:82:c1:d9:22:70:c6: 2d:a0:6f:9e:70:ae:dc:be:df:e1:c0:7b:86:cb:25:04:53:e0: af:e2:42:bf:72:16:3d:fc:53:e0:04:1d:9c:dd:26:9a:78:5f: 5e:17:9a:7d:d7:bb:90:24:7b:e1:7a:ed:de:37:d9:46:58:a2: e1:23:70:83:07:5c:5d:13:03:1e:f3:34:3f:36:21:a2:3a:1e: ec:53:0a:2f:35:98:f6:34:5d:94:6e:e3:c9:e4:5d:3e:49:bb: e0:f7:16:40:f8:11:81:a7:63:8d:ed:4a:64:e5:2a:dc:10:78: 45:d4:a5:52:77:73:3e:46:f6:d4:cc:40:8a:89:8f:60:15:da: 4c:6c:1f:6d:32:e0:ff:9e:e4:5b:31:79:5a:48:d5:22:50:96: 2d:00:4a:cf:50:ae:d7:6f:93:52:a5:37:e6:07:89:15:7f:c6: 35:de:ec:78:e7:25:41:23:dd:c2:59:0f:d4:2b:fa:0b:20:41: 80:2b:70:8e:c8:6b:66:d2:c0:98:9f:b6:af:9e:db:0a:9b:b5: 30:cb:0f:87:ad:5a:5c:37:97:59:48:17:b9:2d:33:cc:22:2b: d2:24:5d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXF/Erq5CpvbsGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTYxM1oXDTI1MTIyMTEyNTYxM1owLzEtMCsGA1UEAxMk ZGM2MTMyYzMtNDVkNi00ZGU0LWExNmQtZjU0NTljNjllMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAO85gLkRTvDolKjEgMcqnqwz72L1K1qbe6m XPls244/KQrLN2GSFpCE52U57jVMVyf/nMn80vZdanusBe/2EI6NoEYrwWG/5DtX //ZSQCJHOKkXmxbagMx0co0fBNKt7pgD/h/y7aYhx039N6a8rpIbXj+JhDzX4RVz heBDUB4U0vGPL4mF4gVNi+o7F/8gWHurzwLItOBTwSQ19gMRBXf2HG/SojpIUYeW mR+wcJ3BOA6+oJzm7eZECWNk0zAbVN089L/e+xDOFnyI69Bcx3gao5KlT6TVzroV vBDpVZnXS8FOiV5hq1AqU7A/oV0jcOo+r8/mVGUopppo94ReUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdIm/QbjrSSHd2Ib4qPt3IP2WXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzY5NWI4YWUtZmFiOS0z ZjRkLWJhNjEtOTY5MjNjZTdlNzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcLkTJNiWeGdoeO0Q3GupZc9gECReD6AZnHFqY6qILB2SJwxi2gb55w rty+3+HAe4bLJQRT4K/iQr9yFj38U+AEHZzdJpp4X14Xmn3Xu5Ake+F67d432UZY ouEjcIMHXF0TAx7zND82IaI6HuxTCi81mPY0XZRu48nkXT5Ju+D3FkD4EYGnY43t SmTlKtwQeEXUpVJ3cz5G9tTMQIqJj2AV2kxsH20y4P+e5FsxeVpI1SJQli0ASs9Q rtdvk1KlN+YHiRV/xjXe7HjnJUEj3cJZD9Qr+gsgQYArcI7Ia2bSwJiftq+e2wqb tTDLD4etWlw3l1lIF7ktM8wiK9IkXfk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:30 2025 by rpki-client