$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa File: 49857a90-f490-31a1-a4af-0d9678a70395.roa (raw, json) Hash identifier: vJpICK4C1PMFq6nogfxLu81ICk9DDDyr6NBND1PSlUk= Subject key identifier: 03:79:D2:AB:A9:2F:42:0E:42:5C:98:FC:D5:7F:97:22:88:B0:1F:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B679730FEDB3787EF3C2BFFC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.29.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:30:fe:db:37:87:ef:3c:2b:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=916e9585-0e78-4e90-9bea-476e39c201fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:54:b1:29:7a:3c:31:ed:ca:2a:c2:e1:7b:ba: 45:9d:3a:a9:2b:44:5c:fd:bf:5a:00:5b:78:72:42: 1c:c4:6e:8b:b1:e0:a3:52:c6:47:f2:51:ac:36:06: ab:f2:73:8a:d9:8a:97:fa:82:75:aa:39:35:9f:15: 76:bf:cd:ed:23:a6:b7:b0:17:8f:3e:d3:98:77:d6: d2:ff:ad:e0:ae:37:e1:0d:7f:9c:23:77:63:b4:d6: 2a:a9:5e:6a:91:ae:43:eb:20:c8:c3:e6:cd:dc:33: cc:46:32:b9:a7:54:85:b3:c6:dd:a4:27:c8:e2:11: d3:ef:a4:d7:e5:49:c3:ad:c6:08:44:2e:b6:65:d6: 55:b1:ff:48:c7:0e:14:88:b5:2b:7a:0f:9d:ac:ad: fc:40:18:10:d2:e6:b4:4b:41:f7:f8:14:df:31:a7: 49:71:f3:e3:eb:ff:a9:31:71:0b:22:6e:6b:67:a1: 38:8a:cc:64:58:d4:6f:ec:46:ed:4d:aa:18:ca:27: f8:9c:c1:00:c6:49:33:6c:10:f0:07:d1:04:ce:67: 91:12:d0:f8:b8:4e:a6:d0:39:b3:ba:12:87:d4:a5: 17:05:76:91:e8:e3:61:67:69:27:21:52:fc:21:cf: 37:e1:e5:62:79:7c:d4:54:61:45:fb:05:d7:24:36: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:79:D2:AB:A9:2F:42:0E:42:5C:98:FC:D5:7F:97:22:88:B0:1F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:36:1d:45:95:41:9c:34:35:71:1c:46:2a:ef:a1:35:82:a8: f8:55:7f:9b:bf:82:6c:8b:ff:3b:29:a6:f9:09:7e:de:51:9e: e2:49:92:c7:43:4e:e4:7b:d8:4f:33:78:bb:38:e2:8d:f4:e4: fc:49:5a:31:50:ee:96:74:64:9a:9a:a6:d0:06:0e:2a:04:ee: d5:1f:44:2d:f9:a5:50:f0:26:0d:81:15:06:e2:4d:f3:2d:b7: ab:af:f9:ba:d5:43:ef:c1:50:4a:9d:64:91:81:72:8b:db:1d: 2c:1a:90:ea:fc:e1:c5:7d:3d:5c:09:e6:cd:66:6c:36:1d:db: c8:e8:51:0a:a8:6b:b4:67:63:4f:96:df:34:f6:3d:13:22:ba: 62:18:75:bc:ec:60:78:cc:8c:1a:e5:b8:a3:dd:1a:f6:7f:e4: aa:86:72:96:21:b1:92:3f:3a:c6:57:e4:f3:b9:a4:f1:e0:0b: 94:d6:be:a8:e1:2b:1a:d5:99:ba:35:46:3e:ab:f8:f1:44:fb: 06:62:d7:8f:c9:64:86:ab:d8:6b:ed:2d:83:38:32:94:0d:cc: e2:dc:7f:bf:83:b6:8f:5f:52:c4:f3:24:93:fd:7f:53:cd:f9: aa:ce:bd:14:23:ce:0c:53:0f:7e:49:d7:37:b5:30:4c:49:26: 20:1b:88:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzD+2zeH7zwr/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTE2ZTk1ODUtMGU3OC00ZTkwLTliZWEtNDc2ZTM5YzIwMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglSxKXo8Me3KKsLhe7pFnTqpK0Rc/b9aAFt4 ckIcxG6LseCjUsZH8lGsNgar8nOK2YqX+oJ1qjk1nxV2v83tI6a3sBePPtOYd9bS /63grjfhDX+cI3djtNYqqV5qka5D6yDIw+bN3DPMRjK5p1SFs8bdpCfI4hHT76TX 5UnDrcYIRC62ZdZVsf9Ixw4UiLUreg+drK38QBgQ0ua0S0H3+BTfMadJcfPj6/+p MXELIm5rZ6E4isxkWNRv7EbtTaoYyif4nMEAxkkzbBDwB9EEzmeREtD4uE6m0Dmz uhKH1KUXBXaR6ONhZ2knIVL8Ic834eVieXzUVGFF+wXXJDbAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN50qupL0IOQlyY/NV/lyKIsB+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDk4NTdhOTAtZjQ5MC0z MWExLWE0YWYtMGQ5Njc4YTcwMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE82HUWVQZw0NXEcRirvoTWCqPhVf5u/gmyL/zsppvkJft5RnuJJksdD TuR72E8zeLs44o305PxJWjFQ7pZ0ZJqaptAGDioE7tUfRC35pVDwJg2BFQbiTfMt t6uv+brVQ+/BUEqdZJGBcovbHSwakOr84cV9PVwJ5s1mbDYd28joUQqoa7RnY0+W 3zT2PRMiumIYdbzsYHjMjBrluKPdGvZ/5KqGcpYhsZI/OsZX5PO5pPHgC5TWvqjh KxrVmbo1Rj6r+PFE+wZi14/JZIar2GvtLYM4MpQNzOLcf7+Dto9fUsTzJJP9f1PN +arOvRQjzgxTD35J1ze1MExJJiAbiJM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:14 2025 by rpki-client