$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5260bcc0-3eb6-3b7c-871a-a8cef6769149.roa File: 5260bcc0-3eb6-3b7c-871a-a8cef6769149.roa (raw, json) Hash identifier: gy0RSZQQ9oZ9+cjnQ7GpxpdL5OIcTpNfwcfy/JJvnKY= Subject key identifier: AF:15:C2:FF:25:7F:85:F1:DD:B3:1C:F4:DF:AA:C3:C7:5A:9D:92:28 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6202074515CCDFEE539BCCC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5260bcc0-3eb6-3b7c-871a-a8cef6769149.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.23.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:07:45:15:cc:df:ee:53:9b:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=6fafc88b-a5f0-4368-834d-751359588ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:4c:b2:0d:d9:e1:a1:6b:5c:d3:fc:05:27: d8:b7:ea:3e:58:89:a1:69:46:90:e0:8b:9a:12:6c: 31:05:34:a1:e6:6b:9c:8e:5f:ec:57:5d:56:30:99: d0:1a:77:36:af:8e:75:c5:cd:e2:13:c3:34:20:91: 62:91:29:61:00:d0:a3:5c:d4:f7:90:b0:74:fd:b7: c7:47:9d:76:2c:9a:b6:4b:80:ac:dc:fc:1c:93:b9: 29:5b:da:20:65:3f:b8:4e:59:a5:67:a6:2c:ef:95: 73:57:24:67:bf:49:36:32:5d:8d:04:66:e8:68:17: 93:46:36:b7:63:4e:c6:07:ec:95:63:24:67:46:60: 60:60:1e:48:f1:e4:7b:46:68:16:42:9e:01:c0:e2: 3d:4a:36:56:b6:fe:c5:ce:39:0e:36:69:ab:0a:5e: f2:87:81:ab:36:3c:c0:8b:17:71:84:95:b5:ae:0e: 20:7a:b1:a4:ca:a4:37:d9:3e:7c:63:05:2c:b7:ac: 53:2e:a8:cd:6f:3c:08:8a:43:bf:5e:10:e1:9d:81: 06:91:13:4a:33:1a:89:6f:41:62:7e:00:4b:d5:1c: c5:de:58:11:aa:d6:87:92:9d:7a:13:eb:ef:8e:46: 39:43:99:cd:29:58:8d:20:30:40:f6:58:2a:d2:91: 91:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:15:C2:FF:25:7F:85:F1:DD:B3:1C:F4:DF:AA:C3:C7:5A:9D:92:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5260bcc0-3eb6-3b7c-871a-a8cef6769149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d5:f4:6e:58:be:f0:fe:d0:dc:93:46:a7:bb:32:12:92:8a: b2:09:ae:a3:05:e8:40:3a:55:d3:65:b6:49:ab:04:dd:7b:8c: 83:77:1b:a7:ea:55:7f:da:61:55:cf:90:ed:a9:73:6f:97:5a: 54:ff:27:26:54:e9:3c:47:6f:f5:ac:44:44:78:1d:77:b6:56: f8:b7:13:0d:79:e4:0e:75:75:33:53:71:ad:35:98:0e:58:a6: 1c:15:39:23:72:1d:09:f9:87:ed:81:f6:56:ab:e0:dc:c9:d6: 91:10:29:ff:d0:c6:f5:33:4e:bd:36:84:95:dd:6a:22:de:69: c2:fe:92:3a:bc:7e:b3:6e:84:e3:ce:2c:10:f8:14:0f:5b:f0: 85:ec:a1:aa:05:bb:01:05:b5:ab:8f:7a:8d:c1:f5:0e:ef:82: 15:6c:3d:79:e7:e4:f7:37:68:6f:d7:c0:ef:83:df:30:3f:92: 5a:0d:a5:7b:06:a4:e7:03:d8:b8:4c:e9:8e:a9:af:23:74:d3: fa:b3:80:f9:de:77:ec:9e:58:fe:9b:7e:e4:9a:3b:5b:43:bc: 79:22:7e:c3:2d:2b:66:dc:95:a2:4a:56:ae:09:63:9f:ed:d2: c2:1d:d3:f0:8a:59:d5:11:d1:67:14:99:5b:18:10:52:c3:98: 30:13:6a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgdFFczf7lObzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NmZhZmM4OGItYTVmMC00MzY4LTgzNGQtNzUxMzU5NTg4ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fBMsg3Z4aFrXNP8BSfYt+o+WImhaUaQ4Iua EmwxBTSh5mucjl/sV11WMJnQGnc2r451xc3iE8M0IJFikSlhANCjXNT3kLB0/bfH R512LJq2S4Cs3Pwck7kpW9ogZT+4TlmlZ6Ys75VzVyRnv0k2Ml2NBGboaBeTRja3 Y07GB+yVYyRnRmBgYB5I8eR7RmgWQp4BwOI9SjZWtv7FzjkONmmrCl7yh4GrNjzA ixdxhJW1rg4gerGkyqQ32T58YwUst6xTLqjNbzwIikO/XhDhnYEGkRNKMxqJb0Fi fgBL1RzF3lgRqtaHkp16E+vvjkY5Q5nNKViNIDBA9lgq0pGRBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8Vwv8lf4Xx3bMc9N+qw8danZIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTI2MGJjYzAtM2ViNi0z YjdjLTg3MWEtYThjZWY2NzY5MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLV9G5YvvD+0NyTRqe7MhKSirIJrqMF6EA6VdNltkmrBN17jIN3G6fq VX/aYVXPkO2pc2+XWlT/JyZU6TxHb/WsRER4HXe2Vvi3Ew155A51dTNTca01mA5Y phwVOSNyHQn5h+2B9lar4NzJ1pEQKf/QxvUzTr02hJXdaiLeacL+kjq8frNuhOPO LBD4FA9b8IXsoaoFuwEFtauPeo3B9Q7vghVsPXnn5Pc3aG/XwO+D3zA/kloNpXsG pOcD2LhM6Y6pryN00/qzgPned+yeWP6bfuSaO1tDvHkifsMtK2bclaJKVq4JY5/t 0sId0/CKWdUR0WcUmVsYEFLDmDATauA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:41 2025 by rpki-client