$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a3a67c6-3f3c-398f-b990-a699687863a6.roa File: 4a3a67c6-3f3c-398f-b990-a699687863a6.roa (raw, json) Hash identifier: d+SYJRfkBEAwRQVHaq/TQDgpfJgkhaEfbjUEMN0tkk8= Subject key identifier: A2:82:80:15:9B:F2:68:7C:9D:8F:BA:3C:A0:FD:E7:CB:1B:46:B7:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE50D66635922B2DBD2B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a3a67c6-3f3c-398f-b990-a699687863a6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.18.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:50:d6:66:35:92:2b:2d:bd:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a4bffde2-0595-4b0e-95a8-12cdcfde1e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:cf:8b:fb:2d:0b:c1:e7:61:14:5e:dc:c0: d8:01:0d:13:8e:95:e4:e0:e2:45:7d:77:c1:32:94: 1f:f8:00:1e:8d:69:ac:bc:23:b7:ee:0b:ae:de:5a: 11:e0:07:50:6b:b2:b0:93:ee:33:d4:a3:1a:9a:76: f6:35:3b:19:b7:9c:76:a6:6e:5d:cc:3f:6f:b9:1e: a6:f6:9a:c4:aa:b4:cb:4a:71:e6:8a:78:5d:64:1f: 61:26:e4:f8:4c:cc:7a:e0:0a:c5:8f:16:07:95:09: 4d:91:ac:b9:a3:a0:67:5a:f0:3f:81:5c:5f:f9:ef: cb:ba:cd:c2:9b:38:06:41:16:b4:dd:7e:85:9a:01: 66:30:28:1c:b3:b7:34:31:c7:6c:73:29:13:02:11: 2e:84:03:6e:ca:24:9d:9a:4d:f8:91:e1:f5:6e:54: 85:1e:ae:fe:b6:c4:f0:30:9c:cf:cd:6c:6c:7d:a9: 05:a8:b3:12:ff:a4:30:3c:c1:bd:35:66:ab:a8:47: 4f:d3:5e:85:19:7f:03:94:e5:a5:c0:0e:b6:e5:25: f3:d0:69:fa:c1:b9:97:71:c7:5f:d5:9a:0d:cc:d7: 4c:37:08:73:0c:97:50:f1:0a:4e:2d:f7:e4:b8:ed: 51:31:da:55:a3:b5:d3:18:be:16:b7:ac:dd:1b:53: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:82:80:15:9B:F2:68:7C:9D:8F:BA:3C:A0:FD:E7:CB:1B:46:B7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a3a67c6-3f3c-398f-b990-a699687863a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:78:31:62:dd:a5:0d:f3:20:28:6a:ac:62:21:64:11:1d:ef: 7a:34:5c:4a:ec:5c:9b:ca:56:5d:7f:f9:fe:14:51:b3:ea:a4: 78:ba:42:e6:a1:43:0e:70:d1:8d:1f:9e:d8:76:ee:2b:70:17: 79:f2:b0:e4:ae:cb:1c:c2:b4:d1:0d:b7:55:e3:81:a2:62:cf: a3:a8:2f:f5:04:34:3e:8a:9c:7b:32:9e:5c:a0:b0:d3:ae:84: 91:96:1f:5c:33:da:24:5b:4e:e5:e5:5a:ff:be:ed:c7:f0:bc: 67:c5:fa:49:b2:00:18:0b:7a:9d:fc:a5:e2:f3:21:d5:2a:b0: 9e:d5:bd:05:68:ac:8e:d1:47:57:19:65:b6:e1:1b:b0:9f:c1: bc:b7:cb:ef:d1:49:34:c6:86:f7:5b:e0:59:31:1d:63:c3:2e: bd:79:fb:56:48:e9:44:fa:90:dd:01:f1:0d:55:41:fa:1f:38: 87:fd:d6:91:ac:dc:bb:74:4e:18:1f:4e:ba:81:3d:d1:2e:96: 00:46:f7:f6:8e:ab:ac:06:58:d4:a4:12:40:2c:3f:d1:a2:32: 83:72:a4:3e:ae:c4:d9:79:6c:83:a9:d8:90:35:00:b2:01:01: 37:7d:13:de:ba:e3:b7:2e:da:2e:e9:19:e9:82:d3:eb:7b:2d: 9e:cc:dd:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzlDWZjWSKy29K0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTRiZmZkZTItMDU5NS00YjBlLTk1YTgtMTJjZGNmZGUxZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM3Pi/stC8HnYRRe3MDYAQ0TjpXk4OJFfXfB MpQf+AAejWmsvCO37guu3loR4AdQa7Kwk+4z1KMamnb2NTsZt5x2pm5dzD9vuR6m 9prEqrTLSnHminhdZB9hJuT4TMx64ArFjxYHlQlNkay5o6BnWvA/gVxf+e/Lus3C mzgGQRa03X6FmgFmMCgcs7c0McdscykTAhEuhANuyiSdmk34keH1blSFHq7+tsTw MJzPzWxsfakFqLMS/6QwPMG9NWarqEdP016FGX8DlOWlwA625SXz0Gn6wbmXccdf 1ZoNzNdMNwhzDJdQ8QpOLffkuO1RMdpVo7XTGL4Wt6zdG1OMmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKCgBWb8mh8nY+6PKD958sbRrfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGEzYTY3YzYtM2YzYy0z OThmLWI5OTAtYTY5OTY4Nzg2M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB4MWLdpQ3zIChqrGIhZBEd73o0XErsXJvKVl1/+f4UUbPqpHi6Quah Qw5w0Y0fnth27itwF3nysOSuyxzCtNENt1XjgaJiz6OoL/UEND6KnHsynlygsNOu hJGWH1wz2iRbTuXlWv++7cfwvGfF+kmyABgLep38peLzIdUqsJ7VvQVorI7RR1cZ ZbbhG7Cfwby3y+/RSTTGhvdb4FkxHWPDLr15+1ZI6UT6kN0B8Q1VQfofOIf91pGs 3Lt0ThgfTrqBPdEulgBG9/aOq6wGWNSkEkAsP9GiMoNypD6uxNl5bIOp2JA1ALIB ATd9E96647cu2i7pGemC0+t7LZ7M3RQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:44 2025 by rpki-client