$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/510fcf2d-15dc-3f13-9b5c-3b514284e536.roa File: 510fcf2d-15dc-3f13-9b5c-3b514284e536.roa (raw, json) Hash identifier: ZSAq6aoaNyQ3Q7R7DASmPpR/AkA0BqW37XAU89GwKc0= Subject key identifier: EE:4F:0E:F5:E7:BB:06:27:CC:F1:92:09:BD:C5:96:BB:0F:D1:FA:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62022E165B50AB2106E93780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/510fcf2d-15dc-3f13-9b5c-3b514284e536.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.20.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2e:16:5b:50:ab:21:06:e9:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=aabcb26b-d24b-485d-9c98-cd9dc96fd7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:03:2c:c1:ae:56:78:42:a0:71:fe:f3:69: 7f:09:31:88:06:5f:8c:bb:05:5f:a8:f2:0a:fc:39: 3c:e9:63:1e:1a:c3:a4:9c:74:8a:b3:73:ff:60:ba: b5:0a:0d:d4:88:12:a8:e8:b2:2d:e7:5a:cd:67:7c: ae:85:8f:bd:cf:37:21:aa:77:10:0f:05:31:6c:0a: a0:c1:32:66:a7:e9:4f:95:85:73:56:8b:6f:47:e6: 0b:3a:d7:79:1e:25:fc:d7:0b:1c:d8:11:51:45:3e: a7:96:9d:57:9e:40:a5:a3:4e:df:15:48:e6:69:81: 29:9f:ac:17:d5:42:db:2f:48:b2:5f:79:60:e4:33: cb:39:f0:4b:19:b7:47:10:df:6d:a3:7c:df:d9:70: 0f:78:d7:d6:9a:de:a9:07:d6:48:99:50:18:84:c6: cb:2a:50:ac:80:eb:b3:24:84:79:93:4e:02:7b:60: fc:d4:af:f4:90:1a:5d:d3:3d:e0:e7:7f:1a:bd:58: 6e:5e:7a:2f:f0:a1:38:80:d1:ea:de:b9:88:c4:d6: 71:29:c5:f8:ad:09:4d:0b:68:6a:20:92:c9:43:3d: 0e:51:4b:91:03:85:63:b9:6d:fe:d0:07:ad:87:6c: 56:0e:97:b7:8a:59:1a:bf:4c:7f:39:13:d5:94:16: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4F:0E:F5:E7:BB:06:27:CC:F1:92:09:BD:C5:96:BB:0F:D1:FA:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/510fcf2d-15dc-3f13-9b5c-3b514284e536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ca:b3:e3:4d:b2:0b:ef:8b:b6:b2:18:a8:80:5e:32:8e:0c: 6d:5a:ba:5c:6c:52:10:26:8d:d2:80:bf:56:da:9e:fd:ad:6e: fa:74:b6:ab:2d:18:a0:40:28:85:4b:d1:73:21:04:ff:86:ae: 2c:6d:3e:a7:1f:d9:89:ab:dd:ea:31:3e:aa:73:51:37:e7:73: f9:75:ac:bd:a0:9e:f1:59:27:a8:cc:d8:f4:97:d5:47:51:39: 19:e8:02:61:be:9e:80:91:6b:b8:c4:c3:ad:d1:32:36:49:5b: d7:37:c6:5f:09:1a:24:63:7b:a0:50:55:93:a3:b1:03:eb:f0: 6d:69:11:00:66:4c:b1:a5:f7:aa:cf:77:b0:fd:14:08:4d:b8: b5:76:c6:a2:8f:ee:f4:ce:b0:ab:06:4f:b2:c2:8a:75:58:0e: ae:40:81:5c:39:c8:ef:04:b1:b1:e6:a0:5d:d1:36:06:11:24: 3e:80:80:73:be:6c:bc:51:33:42:3b:b5:05:a0:2c:4c:88:42: 9a:ae:01:33:1f:af:c4:77:97:87:13:29:ad:5b:b4:87:8b:e0: 86:f1:5a:dc:46:92:5b:69:79:47:10:8d:53:7a:02:f6:32:48: 15:50:d3:d9:20:9e:e5:35:7b:62:3c:6d:9d:cc:31:59:e7:71: 9a:1d:4f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAi4WW1CrIQbpN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWFiY2IyNmItZDI0Yi00ODVkLTljOTgtY2Q5ZGM5NmZkN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0kDLMGuVnhCoHH+82l/CTGIBl+MuwVfqPIK /Dk86WMeGsOknHSKs3P/YLq1Cg3UiBKo6LIt51rNZ3yuhY+9zzchqncQDwUxbAqg wTJmp+lPlYVzVotvR+YLOtd5HiX81wsc2BFRRT6nlp1XnkClo07fFUjmaYEpn6wX 1ULbL0iyX3lg5DPLOfBLGbdHEN9to3zf2XAPeNfWmt6pB9ZImVAYhMbLKlCsgOuz JIR5k04Ce2D81K/0kBpd0z3g538avVhuXnov8KE4gNHq3rmIxNZxKcX4rQlNC2hq IJLJQz0OUUuRA4VjuW3+0Aeth2xWDpe3ilkav0x/ORPVlBbR5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5PDvXnuwYnzPGSCb3FlrsP0fowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTEwZmNmMmQtMTVkYy0z ZjEzLTliNWMtM2I1MTQyODRlNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjKs+NNsgvvi7ayGKiAXjKODG1aulxsUhAmjdKAv1banv2tbvp0tqst GKBAKIVL0XMhBP+GrixtPqcf2Ymr3eoxPqpzUTfnc/l1rL2gnvFZJ6jM2PSX1UdR ORnoAmG+noCRa7jEw63RMjZJW9c3xl8JGiRje6BQVZOjsQPr8G1pEQBmTLGl96rP d7D9FAhNuLV2xqKP7vTOsKsGT7LCinVYDq5AgVw5yO8EsbHmoF3RNgYRJD6AgHO+ bLxRM0I7tQWgLEyIQpquATMfr8R3l4cTKa1btIeL4IbxWtxGkltpeUcQjVN6AvYy SBVQ09kgnuU1e2I8bZ3MMVnncZodT1o= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:43 2025 by rpki-client