$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f7d552d-11ea-3bd9-9e60-370222ef7fae.roa File: 3f7d552d-11ea-3bd9-9e60-370222ef7fae.roa (raw, json) Hash identifier: Aox/vdX4qUWibVvCBcZ1jDwlhKRpIQveQFMkvHHCznM= Subject key identifier: AE:C7:A0:B0:52:9D:A0:2B:24:98:17:48:0E:B2:69:A9:B8:E7:5A:F9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201E8C0DD400E1B49103480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f7d552d-11ea-3bd9-9e60-370222ef7fae.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.29.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e8:c0:dd:40:0e:1b:49:10:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f2410ec5-637a-4510-9d71-276827dbce39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ee:f0:3e:a5:0d:a9:cd:fa:36:ac:32:2b:28: 92:46:53:bb:c5:94:68:5b:78:a4:c3:f6:00:1a:8b: d7:ca:96:76:39:d9:fc:51:a7:1a:1c:c3:3a:f0:85: 00:25:1f:6c:19:a7:c1:ab:72:5c:01:39:c4:b0:cd: 02:23:43:2d:81:11:aa:4b:df:88:31:76:21:a3:84: 49:f4:57:0f:36:73:39:98:c5:ed:1b:cc:6e:09:47: b8:64:ba:7a:a3:f1:06:ed:7e:ad:5a:d6:63:cb:54: 08:95:f6:60:cd:54:eb:34:8c:da:ce:19:96:0c:46: ca:17:72:fa:a5:89:a4:2d:76:fd:89:ce:a3:13:14: b2:cd:dd:f0:68:ef:a1:83:2d:99:95:85:1c:29:30: d2:4e:91:0a:dc:4d:eb:8c:ac:64:e6:38:1e:3e:72: 5a:94:af:42:fc:53:75:05:d9:11:35:7f:d8:62:25: 1c:2a:3a:6e:e9:4e:1c:7a:4a:d1:16:8f:33:5f:ba: 5a:a9:5a:fc:30:25:89:12:63:7d:18:a0:11:65:01: a6:2e:93:c1:4e:6a:90:fa:9b:9b:51:50:08:40:f1: 77:18:fc:a6:f0:10:e7:a7:8f:ef:34:d4:98:cc:51: 09:83:da:04:01:23:58:e1:11:12:2d:7b:4f:c1:50: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C7:A0:B0:52:9D:A0:2B:24:98:17:48:0E:B2:69:A9:B8:E7:5A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f7d552d-11ea-3bd9-9e60-370222ef7fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:88:4e:21:c6:73:53:16:32:f8:ba:55:7d:3c:e5:eb:1d:5d: b9:cc:0a:fb:96:f3:3b:18:92:f6:c4:7c:0a:98:2d:5a:38:23: 4e:38:ef:5d:ea:0d:25:a6:5a:8c:a6:9a:61:92:00:8c:f9:2a: d8:de:a6:a1:cc:19:6b:25:b2:c9:81:7f:ea:2e:00:38:c7:8a: f4:14:27:29:a0:14:89:d7:9f:1e:50:ca:82:d1:e8:d6:3b:ee: 4b:76:2f:b7:41:39:a4:ed:7e:ab:3a:c0:52:37:b3:b5:9e:8f: 6a:e3:28:fa:c8:a1:74:13:e1:27:2e:4b:de:d2:d9:d0:85:36: 83:1b:09:c0:0b:cd:6c:bf:d0:1a:e4:bf:eb:4a:ef:eb:bf:c5: 88:e2:ba:ae:0f:81:4e:94:84:96:8e:c5:31:ee:35:27:40:11: 9f:2d:ea:6e:ee:7e:6f:0e:66:be:3b:ed:c6:ac:bd:a1:13:bc: ec:84:8b:17:60:8f:b9:6d:16:4e:4e:34:09:52:90:0c:d4:bd: 62:83:ff:ba:00:b2:fc:e8:b5:75:2e:d4:1c:68:19:f5:9d:05: b8:8b:05:fe:a2:15:3c:e8:dc:24:e0:c1:2f:ac:67:20:89:31: 35:7f:f2:fd:44:f0:53:24:51:b9:c7:a1:fc:85:be:22:83:10: d1:af:fe:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAejA3UAOG0kQNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjI0MTBlYzUtNjM3YS00NTEwLTlkNzEtMjc2ODI3ZGJjZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku7wPqUNqc36NqwyKyiSRlO7xZRoW3ikw/YA GovXypZ2Odn8UacaHMM68IUAJR9sGafBq3JcATnEsM0CI0MtgRGqS9+IMXYho4RJ 9FcPNnM5mMXtG8xuCUe4ZLp6o/EG7X6tWtZjy1QIlfZgzVTrNIzazhmWDEbKF3L6 pYmkLXb9ic6jExSyzd3waO+hgy2ZlYUcKTDSTpEK3E3rjKxk5jgePnJalK9C/FN1 BdkRNX/YYiUcKjpu6U4cekrRFo8zX7paqVr8MCWJEmN9GKARZQGmLpPBTmqQ+pub UVAIQPF3GPym8BDnp4/vNNSYzFEJg9oEASNY4RESLXtPwVCh3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7HoLBSnaArJJgXSA6yaam451r5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y3ZDU1MmQtMTFlYS0z YmQ5LTllNjAtMzcwMjIyZWY3ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyITiHGc1MWMvi6VX085esdXbnMCvuW8zsYkvbEfAqYLVo4I044713q DSWmWoymmmGSAIz5KtjepqHMGWslssmBf+ouADjHivQUJymgFInXnx5QyoLR6NY7 7kt2L7dBOaTtfqs6wFI3s7Wej2rjKPrIoXQT4ScuS97S2dCFNoMbCcALzWy/0Brk v+tK7+u/xYjiuq4PgU6UhJaOxTHuNSdAEZ8t6m7ufm8OZr477casvaETvOyEixdg j7ltFk5ONAlSkAzUvWKD/7oAsvzotXUu1BxoGfWdBbiLBf6iFTzo3CTgwS+sZyCJ MTV/8v1E8FMkUbnHofyFviKDENGv/s8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:00 2025 by rpki-client