$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc5777f-2b8c-3f25-8d80-bda51ca296f4.roa File: 3dc5777f-2b8c-3f25-8d80-bda51ca296f4.roa (raw, json) Hash identifier: HiatSTBMd4jflpKGpolB73kmUZ0VDdu7+rRadmyHOG0= Subject key identifier: A7:D1:76:A4:26:68:4A:A2:B2:74:2F:11:C6:60:59:A3:D5:74:6B:D3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5FCA508BB2626156258ECC40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc5777f-2b8c-3f25-8d80-bda51ca296f4.roa Signing time: Wed 01 Oct 2025 05:57:08 +0000 ROA not before: Wed 01 Oct 2025 05:57:08 +0000 ROA not after: Tue 30 Dec 2025 06:57:08 +0000 asID: 19905 IP address blocks: 173.19.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:ca:50:8b:b2:62:61:56:25:8e:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 05:57:08 2025 GMT Not After : Dec 30 06:57:08 2025 GMT Subject: CN=1c5ac404-4590-47b0-a62d-9a771c2b0292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:9b:bf:70:9f:c2:c1:ed:66:5a:59:6a:6f: 29:99:af:19:e0:f7:d3:b1:21:0f:11:27:ac:03:71: 82:c9:bb:6b:ad:00:e1:c6:14:3d:5c:c0:18:5e:47: 73:72:42:21:e1:34:cf:31:81:57:7c:26:78:6d:fe: 53:fb:d5:22:05:09:3a:f1:37:52:ea:d0:89:1f:ab: dd:46:da:1f:cb:c9:0c:12:9e:b0:03:e4:c2:2a:e4: 0b:28:85:1a:b8:0f:bb:5d:f8:d8:03:72:c7:88:38: 94:65:b2:d9:ea:cc:e3:73:05:3b:52:0d:04:e6:f0: 48:92:bc:cd:f6:23:b0:3e:4e:dc:1b:8e:a6:27:fc: a2:7c:42:c3:0c:90:9e:29:20:79:50:24:30:da:55: 7c:fd:72:8e:1b:c0:3d:ac:89:10:db:29:9e:59:ed: 72:05:2f:c0:bd:ab:05:cb:35:38:ed:c6:44:09:81: 64:8b:0c:6b:5d:3e:a9:d1:b6:cc:1b:aa:2b:4b:83: 1f:2b:0d:61:ee:df:7a:64:11:87:a0:ba:cc:6f:db: 99:28:72:2e:71:05:b0:a3:43:2f:d1:bd:f8:8d:29: d8:60:92:5e:d9:21:31:f4:5e:02:6e:64:d1:ae:c4: 41:0b:8c:80:19:ea:3e:85:55:e3:0a:3d:39:25:6e: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D1:76:A4:26:68:4A:A2:B2:74:2F:11:C6:60:59:A3:D5:74:6B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc5777f-2b8c-3f25-8d80-bda51ca296f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5b:8e:27:fe:63:c2:a9:e6:ed:a6:6c:63:34:43:9c:33:81: 3e:a7:e4:39:50:b6:75:b9:c4:51:45:34:53:6b:84:63:90:b7: 5e:0a:b8:0d:30:cf:70:ff:bf:d8:69:57:86:02:49:dc:aa:67: c2:45:db:94:d0:6e:e5:e6:44:be:8d:a5:09:bb:8d:88:7b:78: 9b:99:47:2d:b5:7e:50:07:76:79:29:41:a5:9c:08:2f:21:e2: 5b:79:22:39:4f:0d:7c:e7:40:aa:1a:07:fa:fb:b7:cb:22:9b: 49:e8:98:52:83:28:24:4a:8c:db:9f:c4:e3:08:f7:c7:95:4a: 89:74:ff:aa:75:10:0d:09:a4:a6:96:c0:f3:0c:ca:c0:a3:59: 48:bf:2a:64:5f:7f:d7:40:36:2b:60:38:bc:6e:b1:b6:15:bc: 63:74:f4:78:85:8b:40:4f:d5:1d:aa:b9:e8:7f:87:c0:80:1c: 5e:4a:bc:6e:c8:e9:f0:c4:b1:46:4f:cf:00:85:b6:ff:06:86: 91:d0:eb:19:9b:b8:e3:27:e0:6f:b0:62:36:e1:3d:76:c1:64: 6d:c9:38:61:f6:61:d8:75:94:e7:a0:a4:5d:de:30:01:3a:be: 43:d3:37:26:00:61:b2:7e:51:ee:81:23:e1:aa:55:f5:cd:11: 05:ac:04:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfylCLsmJhViWOzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTA1NTcwOFoXDTI1MTIzMDA2NTcwOFowLzEtMCsGA1UEAxMk MWM1YWM0MDQtNDU5MC00N2IwLWE2MmQtOWE3NzFjMmIwMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiribv3CfwsHtZlpZam8pma8Z4PfTsSEPESes A3GCybtrrQDhxhQ9XMAYXkdzckIh4TTPMYFXfCZ4bf5T+9UiBQk68TdS6tCJH6vd Rtofy8kMEp6wA+TCKuQLKIUauA+7XfjYA3LHiDiUZbLZ6szjcwU7Ug0E5vBIkrzN 9iOwPk7cG46mJ/yifELDDJCeKSB5UCQw2lV8/XKOG8A9rIkQ2ymeWe1yBS/AvasF yzU47cZECYFkiwxrXT6p0bbMG6orS4MfKw1h7t96ZBGHoLrMb9uZKHIucQWwo0Mv 0b34jSnYYJJe2SEx9F4CbmTRrsRBC4yAGeo+hVXjCj05JW5AgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfRdqQmaEqisnQvEcZgWaPVdGvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RjNTc3N2YtMmI4Yy0z ZjI1LThkODAtYmRhNTFjYTI5NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRP0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9bjif+Y8Kp5u2mbGM0Q5wzgT6n5DlQtnW5xFFFNFNrhGOQt14KuA0w z3D/v9hpV4YCSdyqZ8JF25TQbuXmRL6NpQm7jYh7eJuZRy21flAHdnkpQaWcCC8h 4lt5IjlPDXznQKoaB/r7t8sim0nomFKDKCRKjNufxOMI98eVSol0/6p1EA0JpKaW wPMMysCjWUi/KmRff9dANitgOLxusbYVvGN09HiFi0BP1R2queh/h8CAHF5KvG7I 6fDEsUZPzwCFtv8GhpHQ6xmbuOMn4G+wYjbhPXbBZG3JOGH2Ydh1lOegpF3eMAE6 vkPTNyYAYbJ+Ue6BI+GqVfXNEQWsBAI= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:21 2025 by rpki-client