$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b4f2227-28fc-30fc-992d-f780c8bc8a9a.roa File: 3b4f2227-28fc-30fc-992d-f780c8bc8a9a.roa (raw, json) Hash identifier: 2pTrhmxJgH9hjgkUkLCM5jhZuwqnjWh+g2pspiiu4X4= Subject key identifier: BB:81:A3:21:9C:25:D4:D7:76:AE:29:8D:EC:F8:1F:CA:53:5F:BF:A9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B3C6CE4EA9C05B355F5FAD840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b4f2227-28fc-30fc-992d-f780c8bc8a9a.roa Signing time: Thu 18 Sep 2025 13:55:37 +0000 ROA not before: Thu 18 Sep 2025 13:55:37 +0000 ROA not after: Wed 17 Dec 2025 14:55:37 +0000 asID: 30036 IP address blocks: 173.19.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:6c:e4:ea:9c:05:b3:55:f5:fa:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 18 13:55:37 2025 GMT Not After : Dec 17 14:55:37 2025 GMT Subject: CN=1fa40553-75ab-41cb-ae59-467b50e1c4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:e1:dc:95:5d:a6:0d:60:da:59:ed:25:4b: aa:db:77:e4:28:98:2d:cc:4d:4c:94:d1:16:e2:07: 27:90:f0:f3:db:a5:78:ce:04:ad:b5:28:69:55:7b: 6f:a2:11:07:d8:9e:81:e0:5f:8e:e6:1e:18:48:c6: a0:ae:24:aa:47:78:ec:79:d2:0c:df:6c:80:1b:b7: d3:25:62:90:b0:6e:b5:3a:8d:a6:47:7f:81:64:6e: a1:75:72:3d:71:12:b0:70:40:0d:5d:d0:44:47:32: 34:7e:ee:dd:65:ab:04:9b:89:82:75:64:07:51:43: 13:dc:b0:d7:03:8b:1e:26:b6:a7:07:86:3d:ac:f2: 81:e3:09:94:5c:37:ca:d5:11:49:3b:54:14:d0:41: 71:ba:19:96:af:15:98:66:24:5e:ba:80:98:83:e6: cb:b0:e3:5d:98:d3:83:0f:56:3d:26:d0:23:5d:37: 25:ff:a6:35:e6:e4:01:ca:47:88:92:ad:c9:6d:44: eb:de:e0:c2:d5:ed:e5:68:0f:64:cb:80:3e:1c:32: ec:27:4e:97:ab:f8:b2:35:a3:42:0d:5a:83:00:db: 1a:df:d1:23:f5:5f:18:0b:11:5c:3b:19:76:d7:d6: 4d:f9:ce:ea:d6:4c:22:47:a8:64:33:c0:3c:88:70: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:81:A3:21:9C:25:D4:D7:76:AE:29:8D:EC:F8:1F:CA:53:5F:BF:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b4f2227-28fc-30fc-992d-f780c8bc8a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:35:5d:8f:ed:8d:11:55:63:3e:06:f5:1b:55:7a:2b:e6:d0: 6d:ee:b0:19:7d:7c:10:16:72:e0:50:24:67:37:6f:89:9f:18: 87:e0:87:4c:ef:38:9b:91:3d:be:c9:b1:bd:4c:29:ad:e7:d0: 98:b5:b0:a5:1b:48:fd:d9:b2:fc:f7:40:80:37:e0:d2:a8:27: 28:e8:f9:4f:0d:1e:7d:28:7e:e6:e5:25:80:6a:0e:f3:b3:9a: f4:6d:49:17:0d:42:3c:1f:3f:be:43:fd:2e:34:c6:65:4e:07: 54:a2:3e:88:48:26:89:4b:c2:e1:f2:39:22:13:73:91:ec:62: 31:3d:fa:09:c5:5b:d0:88:62:9a:65:42:a5:a5:27:5f:f9:a3: fa:66:78:16:88:22:4e:a7:b9:7c:5c:3f:b0:80:20:30:89:21: b7:dc:ad:8a:8d:97:33:37:9e:f2:13:76:55:50:78:cd:14:2e: a5:84:10:48:5d:5d:45:53:80:10:48:34:f2:97:1c:74:c5:b5: a6:7e:5c:e5:16:b9:41:b5:b5:77:61:89:a3:fb:91:74:14:4e: c4:44:f7:05:30:3f:e9:b8:e0:d3:89:8f:9c:7b:98:7b:2b:50: 3f:b0:fb:01:87:70:44:09:84:15:38:13:0d:2e:82:7c:f6:03: 7d:27:be:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8bOTqnAWzVfX62EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxODEzNTUzN1oXDTI1MTIxNzE0NTUzN1owLzEtMCsGA1UEAxMk MWZhNDA1NTMtNzVhYi00MWNiLWFlNTktNDY3YjUwZTFjNGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrjh3JVdpg1g2lntJUuq23fkKJgtzE1MlNEW 4gcnkPDz26V4zgSttShpVXtvohEH2J6B4F+O5h4YSMagriSqR3jsedIM32yAG7fT JWKQsG61Oo2mR3+BZG6hdXI9cRKwcEANXdBERzI0fu7dZasEm4mCdWQHUUMT3LDX A4seJranB4Y9rPKB4wmUXDfK1RFJO1QU0EFxuhmWrxWYZiReuoCYg+bLsONdmNOD D1Y9JtAjXTcl/6Y15uQBykeIkq3JbUTr3uDC1e3laA9ky4A+HDLsJ06Xq/iyNaNC DVqDANsa39Ej9V8YCxFcOxl219ZN+c7q1kwiR6hkM8A8iHCgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuBoyGcJdTXdq4pjez4H8pTX7+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2I0ZjIyMjctMjhmYy0z MGZjLTk5MmQtZjc4MGM4YmM4YTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD01XY/tjRFVYz4G9RtVeivm0G3usBl9fBAWcuBQJGc3b4mfGIfgh0zv OJuRPb7Jsb1MKa3n0Ji1sKUbSP3Zsvz3QIA34NKoJyjo+U8NHn0ofublJYBqDvOz mvRtSRcNQjwfP75D/S40xmVOB1SiPohIJolLwuHyOSITc5HsYjE9+gnFW9CIYppl QqWlJ1/5o/pmeBaIIk6nuXxcP7CAIDCJIbfcrYqNlzM3nvITdlVQeM0ULqWEEEhd XUVTgBBINPKXHHTFtaZ+XOUWuUG1tXdhiaP7kXQUTsRE9wUwP+m44NOJj5x7mHsr UD+w+wGHcEQJhBU4Ew0ugnz2A30nvrM= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:36 2025 by rpki-client