$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d065002-9ce9-3df8-bc35-88b2acf320ee.roa File: 4d065002-9ce9-3df8-bc35-88b2acf320ee.roa (raw, json) Hash identifier: 4AMmuHd7aWDxTmC82O/tryPhXPjWGq5EV+KryPzrvdg= Subject key identifier: 25:44:6E:75:1C:EB:C1:62:B2:A5:64:27:8C:C4:E5:FE:38:CD:65:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6202031076375C7B46BB00B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d065002-9ce9-3df8-bc35-88b2acf320ee.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.18.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:03:10:76:37:5c:7b:46:bb:00:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b6213118-e138-43f0-ba86-7d36167fc459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2f:b9:04:ab:56:32:d5:31:d2:15:0e:51:ff: 9b:9b:c3:4d:13:ec:ff:73:24:25:27:70:42:e4:af: cb:f8:ff:9b:7b:f4:c9:1e:9a:13:34:2f:77:22:56: 3c:43:28:b7:d8:7f:9c:de:a3:31:84:31:e0:f7:7c: f6:06:6e:14:1b:f9:7d:a8:a7:9b:2e:47:58:ed:dc: d3:7d:d8:60:db:0d:bd:81:b2:1b:41:21:f1:7a:75: bf:d3:3b:32:1a:00:31:9e:99:5e:5c:67:c9:fd:3d: 6b:26:14:bd:bb:21:55:b6:9a:fa:89:43:02:2d:42: 91:f8:80:20:1b:5c:c4:ad:68:21:dc:5a:27:b1:97: d1:59:86:f5:b1:ea:07:09:54:60:71:cb:9e:d0:56: 74:3b:f5:b4:db:04:b3:d5:64:f5:6e:04:cf:78:86: bf:33:b6:a0:b9:ed:5c:02:ca:da:bf:72:42:83:e2: 7a:42:d0:66:5b:61:50:87:1d:8b:1e:d4:b7:e0:5f: b9:94:9e:ab:00:7a:f0:84:3a:55:76:57:95:32:75: ba:e0:c0:4d:6c:77:d1:bc:6b:54:3b:f2:ab:76:48: 58:a6:3e:92:1b:3d:59:a9:23:8d:21:cd:b7:29:69: a1:13:3a:62:c7:b5:ec:7e:0c:03:78:80:64:2c:10: 4b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:44:6E:75:1C:EB:C1:62:B2:A5:64:27:8C:C4:E5:FE:38:CD:65:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d065002-9ce9-3df8-bc35-88b2acf320ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:38:f4:aa:00:03:12:0b:13:18:91:fc:fa:3c:23:36:8a:41: 83:2d:2d:74:6d:0d:d1:36:24:fd:19:0e:1e:01:91:1e:5c:52: 24:db:05:a6:de:e9:f0:c4:24:da:7c:dc:b7:ee:c9:7f:3d:fc: 1f:9f:9b:f6:c1:d1:2e:16:eb:76:6d:4d:79:e4:fa:cf:72:87: 23:e5:c5:7b:66:3f:24:1c:11:93:fc:6f:b8:f1:c0:03:ce:cd: 5d:da:a6:fe:d7:ac:11:7c:c1:50:09:be:e7:9f:04:bd:4f:ec: bc:62:56:22:3c:a6:b5:0b:35:40:63:ff:4a:74:bb:48:c2:70: 0c:e6:de:7c:9f:f1:07:7a:38:05:93:46:2a:f8:26:5e:e7:d9: 58:d3:17:1c:d5:42:d1:2b:a5:37:b2:ca:a4:df:f9:b3:a1:ff: 96:47:2e:de:52:9f:60:d8:0e:89:c1:da:0f:9f:0f:7a:36:7f: 71:45:1c:5e:44:c1:76:93:c6:49:7e:cd:3f:73:45:e7:ff:a4: 09:87:9a:59:e9:72:00:7a:a4:1c:21:76:ad:e1:3a:57:a5:03: 1a:12:5c:ac:b7:8c:3f:89:af:97:ea:be:fa:69:96:2d:73:39: a5:66:bb:2d:0f:16:de:43:21:df:9d:e8:de:94:90:56:61:a6: 1f:52:41:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgMQdjdce0a7ALAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjYyMTMxMTgtZTEzOC00M2YwLWJhODYtN2QzNjE2N2ZjNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i+5BKtWMtUx0hUOUf+bm8NNE+z/cyQlJ3BC 5K/L+P+be/TJHpoTNC93IlY8Qyi32H+c3qMxhDHg93z2Bm4UG/l9qKebLkdY7dzT fdhg2w29gbIbQSHxenW/0zsyGgAxnpleXGfJ/T1rJhS9uyFVtpr6iUMCLUKR+IAg G1zErWgh3FonsZfRWYb1seoHCVRgccue0FZ0O/W02wSz1WT1bgTPeIa/M7ague1c Asrav3JCg+J6QtBmW2FQhx2LHtS34F+5lJ6rAHrwhDpVdleVMnW64MBNbHfRvGtU O/KrdkhYpj6SGz1ZqSONIc23KWmhEzpix7XsfgwDeIBkLBBLWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVEbnUc68FisqVkJ4zE5f44zWVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGQwNjUwMDItOWNlOS0z ZGY4LWJjMzUtODhiMmFjZjMyMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRL6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo49KoAAxILExiR/Po8IzaKQYMtLXRtDdE2JP0ZDh4BkR5cUiTbBabe 6fDEJNp83LfuyX89/B+fm/bB0S4W63ZtTXnk+s9yhyPlxXtmPyQcEZP8b7jxwAPO zV3apv7XrBF8wVAJvuefBL1P7LxiViI8prULNUBj/0p0u0jCcAzm3nyf8Qd6OAWT Rir4Jl7n2VjTFxzVQtErpTeyyqTf+bOh/5ZHLt5Sn2DYDonB2g+fD3o2f3FFHF5E wXaTxkl+zT9zRef/pAmHmlnpcgB6pBwhdq3hOlelAxoSXKy3jD+Jr5fqvvppli1z OaVmuy0PFt5DId+d6N6UkFZhph9SQeM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:10 2025 by rpki-client