$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa File: 3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa (raw, json) Hash identifier: msiU5nW++K/PqC/1YkUEojq5RZTIj6CyGsFLAhW/8cQ= Subject key identifier: 4A:B8:39:B8:9F:20:40:82:10:5D:35:56:69:9B:8D:B6:F3:58:8F:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67972F062E46CE7B12607780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.23.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:2f:06:2e:46:ce:7b:12:60:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8100979c-c4b8-4a23-874d-ab333406b5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:52:46:be:68:53:64:37:e3:d7:39:e0:8a: 19:ed:8f:d5:5f:57:b5:fa:c7:af:ba:d6:37:77:19: 12:21:9b:89:04:33:cd:79:d6:31:4c:8f:76:ef:05: b7:f2:d8:ee:bb:32:b9:1e:32:b7:7a:4c:14:06:96: 10:ac:bd:f2:8c:96:d8:8b:f1:b4:3a:35:c9:43:4b: 6e:ec:e7:93:fc:c6:15:e1:14:c5:5c:40:56:a1:fd: 38:7e:f6:f1:77:21:4b:b9:c6:d7:66:cf:a9:4b:63: 49:4b:42:2a:59:81:6a:d6:47:1a:c1:fd:95:27:8f: 20:d4:9e:ad:c6:68:32:75:75:e6:f0:9a:d7:06:f1: 65:f9:f1:ef:27:54:92:36:3e:c1:72:c9:77:3b:83: ad:b0:f3:ab:c9:c3:22:0d:4b:2a:a7:b3:e8:32:24: 92:f7:a1:95:fb:37:ce:16:f7:85:5b:03:72:fc:39: 04:f2:b6:2f:1a:d9:e9:34:25:77:1f:3c:9b:2f:c0: 65:b0:b9:8e:ca:c6:20:5b:88:fa:11:1d:16:53:42: be:31:99:64:5f:66:7b:a0:84:8d:46:e7:57:e3:41: 61:e6:00:1b:e6:88:90:3a:28:95:d3:8f:e4:5f:9b: 8f:9f:b1:49:c9:1a:88:90:33:2c:d9:93:02:8a:d4: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B8:39:B8:9F:20:40:82:10:5D:35:56:69:9B:8D:B6:F3:58:8F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6a:33:61:ef:37:37:66:fc:e5:aa:e8:6a:a3:19:3b:5e:c9: 14:64:8f:10:8c:13:df:7f:83:4e:ad:74:5a:40:14:14:68:e6: 14:1f:03:6a:ad:be:ce:83:97:33:41:f2:12:32:0e:49:2c:9c: ea:be:ed:92:30:9d:ce:27:b4:67:2e:1e:73:a9:4b:f5:80:26: 11:24:34:7c:d1:bb:5d:25:61:28:af:01:3c:89:f9:d6:c1:06: 8e:45:ba:f7:53:e8:8f:87:a7:09:eb:aa:36:78:ba:b8:3c:de: ab:07:f2:73:ea:56:a5:34:08:6c:51:e7:87:88:8b:d3:8c:25: 83:d5:a5:e4:34:0b:bd:3b:f5:f0:cd:80:a9:f1:a4:71:18:d7: 6f:c5:bc:1f:72:62:ef:84:d9:6d:e1:d8:ba:78:f2:80:7a:6b: 3f:df:e9:74:9a:7a:8e:40:e8:bd:dd:a1:55:c3:0b:4d:e5:93: 33:8f:d9:c8:49:0a:82:98:9c:b8:15:2f:eb:08:91:83:e9:03: a1:2d:f2:f4:f9:31:5c:87:d7:52:1f:15:d3:ae:fb:3a:8f:19: db:cf:de:fc:d9:73:d0:98:4e:bf:1a:6d:28:03:54:62:bc:8b: ae:f7:00:71:bd:13:1e:2a:1a:c2:3d:af:66:0d:b6:6e:25:19: 72:44:1b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnly8GLkbOexJgd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODEwMDk3OWMtYzRiOC00YTIzLTg3NGQtYWIzMzM0MDZiNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit1SRr5oU2Q349c54IoZ7Y/VX1e1+sevutY3 dxkSIZuJBDPNedYxTI927wW38tjuuzK5HjK3ekwUBpYQrL3yjJbYi/G0OjXJQ0tu 7OeT/MYV4RTFXEBWof04fvbxdyFLucbXZs+pS2NJS0IqWYFq1kcawf2VJ48g1J6t xmgydXXm8JrXBvFl+fHvJ1SSNj7Bcsl3O4OtsPOrycMiDUsqp7PoMiSS96GV+zfO FveFWwNy/DkE8rYvGtnpNCV3HzybL8BlsLmOysYgW4j6ER0WU0K+MZlkX2Z7oISN RudX40Fh5gAb5oiQOiiV04/kX5uPn7FJyRqIkDMs2ZMCitTMKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq4ObifIECCEF01VmmbjbbzWI88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2MzNTI1MDQtMmJiZi0z OGIyLWI2ZTMtZjlkNjU5NjU5NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrReAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1qM2HvNzdm/OWq6GqjGTteyRRkjxCME99/g06tdFpAFBRo5hQfA2qt vs6DlzNB8hIyDkksnOq+7ZIwnc4ntGcuHnOpS/WAJhEkNHzRu10lYSivATyJ+dbB Bo5FuvdT6I+HpwnrqjZ4urg83qsH8nPqVqU0CGxR54eIi9OMJYPVpeQ0C7079fDN gKnxpHEY12/FvB9yYu+E2W3h2Lp48oB6az/f6XSaeo5A6L3doVXDC03lkzOP2chJ CoKYnLgVL+sIkYPpA6Et8vT5MVyH11IfFdOu+zqPGdvP3vzZc9CYTr8abSgDVGK8 i673AHG9Ex4qGsI9r2YNtm4lGXJEGxg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:24 2025 by rpki-client