$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa File: 3c427830-987a-3e1f-b4e3-0546d0f346af.roa (raw, json) Hash identifier: Hl5tHFyM2NQInWSWpZzsy1xEsGFRtW11r7J9RBVl35k= Subject key identifier: 5E:4D:27:84:62:31:59:E2:21:B3:79:32:9C:29:AA:BF:D0:D1:90:B7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62022630DB3B813E57E0D500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.23.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:26:30:db:3b:81:3e:57:e0:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=489e7d09-3ec2-4cf1-9aeb-51f196cbf863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0e:a3:06:7a:36:79:70:0e:4d:89:6b:85:86: 53:a0:39:a3:5c:71:80:6e:1a:94:26:c1:4a:75:c2: 45:83:a0:93:ca:5a:15:f7:59:b0:77:c2:c1:32:29: 05:e8:58:cc:38:ee:74:85:40:8b:80:f8:15:55:3e: 73:aa:05:9e:13:e8:e7:1c:ea:66:d2:2b:3b:32:35: 6e:4e:13:e5:e9:b7:8b:50:95:3f:ca:5f:e8:46:67: c0:15:8b:d9:99:bd:f7:8b:13:79:42:e6:d0:6a:6c: 43:97:9c:2e:a7:49:15:1a:d1:3e:08:f6:01:b5:bd: a1:ef:b8:27:97:f3:01:1d:bc:b6:8b:19:d8:b8:ef: 56:09:ba:6a:2d:d3:21:3b:5b:68:53:6c:48:0e:59: 54:0e:5f:82:d2:5d:59:99:b8:bf:d4:95:c0:94:cc: 3d:7f:6f:e6:60:83:3b:94:be:a0:12:a7:84:35:a1: dd:4a:38:a0:d6:0f:3a:7a:13:a6:b4:58:2e:de:36: 3b:4e:3d:59:39:29:3e:1a:eb:8c:d9:6f:a3:f1:e1: 7a:a2:3b:6e:59:1b:04:c2:49:92:5f:ac:28:b6:ad: e0:20:e6:68:31:0e:2a:99:d0:90:a2:65:de:28:42: 69:67:d7:80:26:8c:4d:6a:7e:6c:df:19:8f:ca:09: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4D:27:84:62:31:59:E2:21:B3:79:32:9C:29:AA:BF:D0:D1:90:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:01:c4:27:43:1a:5d:ab:b5:45:bb:ef:25:cb:8f:89:33:de: b2:c4:cc:2b:d6:a0:66:7d:71:48:9d:08:a7:fd:fc:66:aa:5e: d7:cb:82:44:52:88:8a:3f:02:19:53:53:be:91:44:f8:9a:32: 17:cd:ab:3a:26:52:c7:d8:59:27:2b:4c:14:1f:3c:b1:9a:10: 9b:4b:1c:c7:04:2f:d7:7c:40:21:dd:31:c1:b8:04:ea:f2:16: 3e:9c:7c:95:4b:2b:05:00:3f:11:92:f1:9c:e3:32:1c:68:67: a0:3a:00:c4:32:bb:b3:6c:7f:d2:f0:c7:99:8c:c3:70:15:66: 4c:97:53:86:f5:1c:72:81:9c:2f:ec:b0:61:d2:0a:b6:2e:89: 17:f8:94:55:37:cf:51:be:c3:4e:b5:1e:7e:95:8f:9b:93:b9: c3:81:8e:66:e2:7d:62:90:17:0a:1c:60:03:71:d0:f6:bf:36: 53:f6:56:26:6c:98:0b:19:3a:36:9d:89:47:bf:fb:d5:d0:3f: 41:0b:0d:e7:75:3f:02:f8:7c:be:94:ea:0c:cb:7f:2a:39:5f: 9c:9b:83:52:87:ec:9b:86:0c:19:af:32:8a:c4:74:77:98:7f: c5:fc:8a:da:fd:f5:c1:9d:8e:b1:3b:da:74:61:b4:2e:84:e0: 52:82:4e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiYw2zuBPlfg1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDg5ZTdkMDktM2VjMi00Y2YxLTlhZWItNTFmMTk2Y2JmODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q6jBno2eXAOTYlrhYZToDmjXHGAbhqUJsFK dcJFg6CTyloV91mwd8LBMikF6FjMOO50hUCLgPgVVT5zqgWeE+jnHOpm0is7MjVu ThPl6beLUJU/yl/oRmfAFYvZmb33ixN5QubQamxDl5wup0kVGtE+CPYBtb2h77gn l/MBHby2ixnYuO9WCbpqLdMhO1toU2xIDllUDl+C0l1Zmbi/1JXAlMw9f2/mYIM7 lL6gEqeENaHdSjig1g86ehOmtFgu3jY7Tj1ZOSk+GuuM2W+j8eF6ojtuWRsEwkmS X6wotq3gIOZoMQ4qmdCQomXeKEJpZ9eAJoxNan5s3xmPyglXZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5NJ4RiMVniIbN5Mpwpqr/Q0ZC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2M0Mjc4MzAtOTg3YS0z ZTFmLWI0ZTMtMDU0NmQwZjM0NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcBxCdDGl2rtUW77yXLj4kz3rLEzCvWoGZ9cUidCKf9/GaqXtfLgkRS iIo/AhlTU76RRPiaMhfNqzomUsfYWScrTBQfPLGaEJtLHMcEL9d8QCHdMcG4BOry Fj6cfJVLKwUAPxGS8ZzjMhxoZ6A6AMQyu7Nsf9Lwx5mMw3AVZkyXU4b1HHKBnC/s sGHSCrYuiRf4lFU3z1G+w061Hn6Vj5uTucOBjmbifWKQFwocYANx0Pa/NlP2ViZs mAsZOjadiUe/+9XQP0ELDed1PwL4fL6U6gzLfyo5X5ybg1KH7JuGDBmvMorEdHeY f8X8itr99cGdjrE72nRhtC6E4FKCTvc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:27 2025 by rpki-client