$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dd298ee-24e0-3c13-b217-b234529b88ac.roa File: 4dd298ee-24e0-3c13-b217-b234529b88ac.roa (raw, json) Hash identifier: wyT30IOBsIiV6rWP00XVoNX6LnIhTpGIiM15t3TBu/0= Subject key identifier: 93:BA:46:55:97:8C:26:AF:E9:52:58:56:09:F0:C7:A1:F2:A6:49:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B328C60269B4FA4BEC7679B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dd298ee-24e0-3c13-b217-b234529b88ac.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.18.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:60:26:9b:4f:a4:be:c7:67:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=e8c950a6-2857-454b-acc9-4c9f1ec4ef69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:5e:c8:e0:b0:be:b3:4c:9b:fb:83:92:4d: 08:20:a0:20:7d:29:95:cd:14:5d:02:75:1a:e9:c2: 81:d9:15:83:ea:e3:44:4e:e1:e2:2d:02:b2:61:71: 0a:ed:d6:53:9d:71:9f:b5:fb:f7:9e:60:38:56:88: a0:cc:ef:1c:1a:96:73:3c:ee:01:82:26:27:eb:c6: 7e:a0:5e:08:5c:7d:7d:bc:76:51:34:89:80:ba:82: 31:fb:59:83:9d:8a:04:de:2e:12:9e:ec:5d:c1:e9: f8:97:18:b0:f4:90:4f:14:59:a5:0c:d2:1b:90:f7: b9:36:6e:99:6f:d3:9d:28:56:e8:47:34:89:78:1d: c4:1c:43:9b:2b:07:57:dc:e5:2d:44:80:e9:56:aa: e1:46:4f:c1:9f:57:62:d4:8a:77:1b:f1:da:fe:b5: 02:3d:43:8b:d9:74:3c:32:3c:10:4e:c3:5d:c6:ec: c8:80:ad:ef:ab:ec:9c:bb:72:17:78:10:1d:90:3f: 92:51:f5:b8:f2:8b:46:bf:7d:8f:34:d8:99:1d:49: e7:27:b9:14:c2:16:b0:89:67:71:4b:49:52:51:fb: ed:e6:94:8f:b0:35:0e:de:fa:cf:d1:e4:75:0f:b2: eb:ca:4b:cf:60:5d:45:ec:b1:fb:18:c8:78:da:a3: f0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BA:46:55:97:8C:26:AF:E9:52:58:56:09:F0:C7:A1:F2:A6:49:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dd298ee-24e0-3c13-b217-b234529b88ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a3:5a:9c:02:ab:f8:f0:4e:31:7f:2f:8a:d3:16:9f:e2:85: bc:26:c5:02:40:d4:a1:ec:45:9d:1f:14:9b:ef:54:48:e8:b9: 2e:38:1c:8a:91:2c:7f:ba:d2:6f:43:65:c9:db:b3:4d:b2:c0: 36:87:67:ed:57:92:bb:21:f9:5d:e6:a5:9d:e8:29:42:32:30: 2f:f4:cd:8a:b5:64:0b:ee:83:6b:e3:4b:85:ec:3e:70:9f:b5: 53:3d:c0:66:e2:d2:da:7c:be:2f:9c:c8:93:57:c9:3a:99:4f: 19:3f:d3:40:58:b8:90:ce:54:40:e9:76:d4:b1:18:5b:a9:6f: 57:d6:44:1e:25:88:91:8f:87:2d:af:62:2e:9e:98:2c:f0:fe: 68:da:63:b1:db:de:19:b3:e1:04:be:cb:23:14:37:35:6b:97: 9f:b1:a5:a6:c9:2f:30:df:6d:17:77:f9:22:3e:03:55:3b:01: 8d:fb:66:61:14:8e:85:5b:37:64:52:e5:61:8f:fb:4a:1d:98: 2e:a6:88:dc:c8:05:e8:51:b7:0c:a7:77:ac:60:fd:65:33:ea: ec:06:95:68:4d:54:0d:54:ae:d2:9b:43:a4:4d:41:17:e3:48: 0e:aa:09:b3:9c:b2:43:b0:4b:63:6d:cc:d8:a1:89:3a:a2:a3: 3b:b4:0a:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGAmm0+kvsdnm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZThjOTUwYTYtMjg1Ny00NTRiLWFjYzktNGM5ZjFlYzRlZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9ZeyOCwvrNMm/uDkk0IIKAgfSmVzRRdAnUa 6cKB2RWD6uNETuHiLQKyYXEK7dZTnXGftfv3nmA4VoigzO8cGpZzPO4BgiYn68Z+ oF4IXH19vHZRNImAuoIx+1mDnYoE3i4Snuxdwen4lxiw9JBPFFmlDNIbkPe5Nm6Z b9OdKFboRzSJeB3EHEObKwdX3OUtRIDpVqrhRk/Bn1di1Ip3G/Ha/rUCPUOL2XQ8 MjwQTsNdxuzIgK3vq+ycu3IXeBAdkD+SUfW48otGv32PNNiZHUnnJ7kUwhawiWdx S0lSUfvt5pSPsDUO3vrP0eR1D7LrykvPYF1F7LH7GMh42qPwswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO6RlWXjCav6VJYVgnwx6Hypkl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGRkMjk4ZWUtMjRlMC0z YzEzLWIyMTctYjIzNDUyOWI4OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFijWpwCq/jwTjF/L4rTFp/ihbwmxQJA1KHsRZ0fFJvvVEjouS44HIqR LH+60m9DZcnbs02ywDaHZ+1Xkrsh+V3mpZ3oKUIyMC/0zYq1ZAvug2vjS4XsPnCf tVM9wGbi0tp8vi+cyJNXyTqZTxk/00BYuJDOVEDpdtSxGFupb1fWRB4liJGPhy2v Yi6emCzw/mjaY7Hb3hmz4QS+yyMUNzVrl5+xpabJLzDfbRd3+SI+A1U7AY37ZmEU joVbN2RS5WGP+0odmC6miNzIBehRtwynd6xg/WUz6uwGlWhNVA1UrtKbQ6RNQRfj SA6qCbOcskOwS2NtzNihiTqiozu0Crs= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:26 2025 by rpki-client