$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44325c01-52b5-3353-9c28-f6e2ff1cf270.roa File: 44325c01-52b5-3353-9c28-f6e2ff1cf270.roa (raw, json) Hash identifier: 7iJQj3jJM//QRXvbggmKwCK8hT7fvUZ8eNxmxajReJQ= Subject key identifier: B6:0C:9C:C9:36:01:0D:02:E8:F3:DD:5B:09:07:F9:B0:97:40:F6:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B61735BDF3F8B6D156908BC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44325c01-52b5-3353-9c28-f6e2ff1cf270.roa Signing time: Wed 01 Oct 2025 20:13:33 +0000 ROA not before: Wed 01 Oct 2025 20:13:33 +0000 ROA not after: Tue 30 Dec 2025 21:13:33 +0000 asID: 19905 IP address blocks: 173.16.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:73:5b:df:3f:8b:6d:15:69:08:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:13:33 2025 GMT Not After : Dec 30 21:13:33 2025 GMT Subject: CN=1b52565f-6eb9-4e7e-9d97-4f7edffedf38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e0:71:92:c1:2d:ca:3b:7c:fd:15:f0:88:a7: 37:37:52:21:f9:0d:31:92:32:6d:17:5a:60:4c:9e: c7:92:5c:07:78:56:ce:c2:1c:b2:d5:10:64:0c:be: 74:01:d4:7a:92:53:92:bd:f7:08:bb:c2:c4:5c:5b: 57:c5:af:07:ed:c5:6a:e2:71:e8:c7:4a:18:66:e7: 64:45:04:6c:57:29:0f:dc:46:b5:f6:b5:de:ed:cf: 95:4e:fb:ed:db:a2:82:e4:d1:4d:2a:79:b1:02:2f: 8e:5f:e5:48:5a:5a:1d:b2:6c:d6:97:52:d2:48:38: 82:cd:8f:9f:2e:6b:c9:9f:a5:db:5f:99:50:44:55: 91:d1:95:59:d7:e6:e5:73:d0:8c:27:a4:4d:e0:5b: a1:91:ef:46:16:a3:11:ec:1b:40:a7:4a:59:d0:73: 75:7d:cc:9e:41:20:59:63:44:34:d8:09:70:f4:29: c8:60:5f:ab:f9:77:eb:de:ae:00:c8:69:4a:87:c5: 45:79:d3:5b:3c:93:b7:a4:b7:7c:7b:50:3e:6e:46: 56:a2:85:ba:c3:66:47:31:38:f1:2b:f3:71:c9:1e: ef:2d:de:ef:ff:a2:9d:1e:88:d8:f6:4d:f9:15:ed: 9c:d4:d9:d6:ad:d0:72:50:e6:01:9f:3b:6c:61:44: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:9C:C9:36:01:0D:02:E8:F3:DD:5B:09:07:F9:B0:97:40:F6:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44325c01-52b5-3353-9c28-f6e2ff1cf270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9c:04:d4:b6:20:06:64:8f:46:73:c4:93:65:5a:4d:c2:32: f4:3f:0f:b5:78:31:27:6c:5a:e0:0e:08:5b:b2:0e:02:7f:41: 0b:9e:9e:11:9c:33:02:00:3f:de:40:8b:c4:62:c8:1b:5d:4c: 3e:31:a7:a5:39:20:9e:f6:8a:63:19:a6:7a:64:2a:43:ff:4b: 53:da:60:23:c9:34:75:a6:85:c2:03:56:40:08:7b:22:aa:71: 87:fc:9d:67:c5:f2:e6:9e:f5:fe:9e:2f:f7:6b:3b:36:e5:c2: 0f:f5:a4:cc:ab:e2:ac:09:f9:ab:cc:ff:48:85:94:ff:da:18: 16:e1:40:a6:40:26:eb:5d:dd:90:7a:de:f3:d9:a5:33:9e:d3: 50:33:bc:00:1c:0e:7d:d0:6b:2a:9f:6d:7d:58:e4:4b:d8:4a: 7f:9d:65:33:56:5c:2f:9c:fc:56:73:e7:ed:be:04:56:a9:07: 8f:f1:f6:62:61:b4:21:f5:1e:04:1d:15:b1:d5:59:11:e6:21: 2d:c3:aa:11:de:83:df:46:fc:d4:da:19:fe:bf:40:f0:e5:f6: c3:d5:1c:db:19:85:c0:7c:59:e3:c1:82:e0:a7:1f:6c:af:96: bf:6a:cc:e8:9b:fd:c9:5d:c0:33:db:2b:3a:58:6c:7a:cd:5d: 10:8c:b9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthc1vfP4ttFWkIvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTMzM1oXDTI1MTIzMDIxMTMzM1owLzEtMCsGA1UEAxMk MWI1MjU2NWYtNmViOS00ZTdlLTlkOTctNGY3ZWRmZmVkZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeBxksEtyjt8/RXwiKc3N1Ih+Q0xkjJtF1pg TJ7HklwHeFbOwhyy1RBkDL50AdR6klOSvfcIu8LEXFtXxa8H7cVq4nHox0oYZudk RQRsVykP3Ea19rXe7c+VTvvt26KC5NFNKnmxAi+OX+VIWlodsmzWl1LSSDiCzY+f LmvJn6XbX5lQRFWR0ZVZ1+blc9CMJ6RN4Fuhke9GFqMR7BtAp0pZ0HN1fcyeQSBZ Y0Q02Alw9CnIYF+r+Xfr3q4AyGlKh8VFedNbPJO3pLd8e1A+bkZWooW6w2ZHMTjx K/NxyR7vLd7v/6KdHojY9k35Fe2c1NnWrdByUOYBnztsYUTyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYMnMk2AQ0C6PPdWwkH+bCXQPaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDQzMjVjMDEtNTJiNS0z MzUzLTljMjgtZjZlMmZmMWNmMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRATMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABacBNS2IAZkj0ZzxJNlWk3CMvQ/D7V4MSdsWuAOCFuyDgJ/QQuenhGc MwIAP95Ai8RiyBtdTD4xp6U5IJ72imMZpnpkKkP/S1PaYCPJNHWmhcIDVkAIeyKq cYf8nWfF8uae9f6eL/drOzblwg/1pMyr4qwJ+avM/0iFlP/aGBbhQKZAJutd3ZB6 3vPZpTOe01AzvAAcDn3QayqfbX1Y5EvYSn+dZTNWXC+c/FZz5+2+BFapB4/x9mJh tCH1HgQdFbHVWRHmIS3DqhHeg99G/NTaGf6/QPDl9sPVHNsZhcB8WePBguCnH2yv lr9qzOib/cldwDPbKzpYbHrNXRCMucU= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:32 2025 by rpki-client