$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa File: 41821b7b-ed24-3365-9e0e-7db6422bd17d.roa (raw, json) Hash identifier: IFiLxA/oR5aBCkPZLK9Kja0PliFZAnnqGzcltcvwLPQ= Subject key identifier: 49:40:B1:AB:F2:6A:08:06:5F:F3:7D:8A:82:4F:01:69:1D:AD:25:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201E297E6D410EAB7191C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.16.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e2:97:e6:d4:10:ea:b7:19:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c9b13ff6-97f4-487e-9f45-f43c399a7da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ed:e8:88:97:88:2b:84:e2:db:43:65:0e:5b: f8:f1:8b:10:b9:2f:9c:a5:84:d4:7a:ac:ef:e3:75: f3:ce:22:e6:f6:36:3e:24:c6:78:36:b2:c3:5a:68: a2:2a:2c:62:3c:4a:c6:a5:93:44:71:cd:19:0a:75: ea:82:7e:43:b3:02:db:1d:a3:28:1e:9c:d0:e2:e3: 06:10:c4:3d:09:6c:fb:9f:af:8d:1b:ca:cf:a3:c8: 01:68:8c:1a:b8:5a:a5:df:58:ae:c0:f9:80:1d:1a: b5:1c:f1:a0:58:cc:ce:0d:b6:f9:47:09:d3:7a:9c: 6b:5b:d4:92:0d:0c:c3:6c:9a:fe:26:49:4e:a3:64: db:ae:cf:88:ac:4a:3e:c8:10:0b:a0:12:25:3c:2c: 5d:f7:7e:c1:15:ad:73:a2:c2:39:55:2f:37:46:18: a2:6d:a0:a5:19:51:a0:15:3e:fa:97:63:c6:db:a0: e3:70:26:d2:e1:e4:5c:a6:7d:0f:11:22:91:2a:f9: 75:65:84:bd:07:0e:64:c9:5f:d6:ab:48:bf:f5:9b: b1:1d:dc:53:08:2b:1f:24:7b:ba:bd:45:51:59:65: e0:08:f5:ff:e5:18:8b:39:15:56:5f:0f:e1:7e:3f: c6:c7:64:93:b8:55:e5:71:a2:de:f5:26:ca:2e:9c: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:40:B1:AB:F2:6A:08:06:5F:F3:7D:8A:82:4F:01:69:1D:AD:25:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41821b7b-ed24-3365-9e0e-7db6422bd17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:05:dc:56:9a:b1:fa:19:f7:a5:7e:29:59:79:c3:00:ef:1a: b8:48:b7:28:d8:ae:0b:01:0a:e0:c7:68:6b:61:5c:43:64:5c: 83:2d:02:63:b8:e9:1d:69:0f:81:69:5d:10:20:fa:a8:7e:b1: 9f:34:13:9d:ac:8c:6a:ed:b9:02:4b:50:79:19:e9:7f:df:40: 7a:59:58:74:df:0b:34:f6:96:79:8a:94:89:3d:28:49:9f:35: 40:b4:d8:e0:58:b7:5a:26:9e:da:0d:ea:d7:8c:08:7a:e4:65: 35:85:17:3c:de:1f:cb:e2:c6:5a:08:c0:b2:05:e8:45:e9:7c: bd:11:69:b5:e1:00:94:2a:03:d1:ad:ab:99:84:7f:5e:8d:cc: c8:cc:e4:d3:90:da:48:65:f6:f2:6d:4d:ad:36:89:3d:91:03: fb:6e:61:b9:76:45:a3:0c:fc:e7:1d:69:f4:22:03:90:3d:f9: c8:db:fb:f5:09:7f:98:47:3c:6f:2c:7e:19:50:0a:31:50:74: b4:47:de:ed:da:4a:89:cb:48:0a:f4:34:c1:11:5a:fa:f5:58: 61:87:7f:44:34:ef:1d:f2:89:0e:7b:98:63:39:ac:48:1c:37: d3:62:f5:ec:84:2f:2d:dd:76:d4:24:d3:62:85:6c:d0:80:fb: 1b:0a:b6:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeKX5tQQ6rcZHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzliMTNmZjYtOTdmNC00ODdlLTlmNDUtZjQzYzM5OWE3ZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku3oiJeIK4Ti20NlDlv48YsQuS+cpYTUeqzv 43XzziLm9jY+JMZ4NrLDWmiiKixiPErGpZNEcc0ZCnXqgn5DswLbHaMoHpzQ4uMG EMQ9CWz7n6+NG8rPo8gBaIwauFql31iuwPmAHRq1HPGgWMzODbb5RwnTepxrW9SS DQzDbJr+JklOo2Tbrs+IrEo+yBALoBIlPCxd937BFa1zosI5VS83RhiibaClGVGg FT76l2PG26DjcCbS4eRcpn0PESKRKvl1ZYS9Bw5kyV/Wq0i/9ZuxHdxTCCsfJHu6 vUVRWWXgCPX/5RiLORVWXw/hfj/Gx2STuFXlcaLe9SbKLpyX1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElAsavyaggGX/N9ioJPAWkdrSX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDE4MjFiN2ItZWQyNC0z MzY1LTllMGUtN2RiNjQyMmJkMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwF3FaasfoZ96V+KVl5wwDvGrhItyjYrgsBCuDHaGthXENkXIMtAmO4 6R1pD4FpXRAg+qh+sZ80E52sjGrtuQJLUHkZ6X/fQHpZWHTfCzT2lnmKlIk9KEmf NUC02OBYt1omntoN6teMCHrkZTWFFzzeH8vixloIwLIF6EXpfL0RabXhAJQqA9Gt q5mEf16NzMjM5NOQ2khl9vJtTa02iT2RA/tuYbl2RaMM/OcdafQiA5A9+cjb+/UJ f5hHPG8sfhlQCjFQdLRH3u3aSonLSAr0NMERWvr1WGGHf0Q07x3yiQ57mGM5rEgc N9Ni9eyELy3ddtQk02KFbNCA+xsKtvc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:08 2025 by rpki-client