$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa File: 5649878e-e982-39bb-9d15-912d6b1f027b.roa (raw, json) Hash identifier: bSj2JSaa+6ckCejRFJfOR6sTzvE0pWhBvaWdoud5FN0= Subject key identifier: 16:91:A1:57:7D:24:77:9E:8D:B5:8A:18:6F:B7:4F:52:53:31:E5:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B63674F9689FEF79AD7D70880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 19905 IP address blocks: 173.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4f:96:89:fe:f7:9a:d7:d7:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=d7d866f1-dc9e-4fa3-9bd2-3268e93ac6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:4c:c0:8b:54:4c:3c:a1:f3:70:4a:fe:b4: c2:d1:62:67:0d:64:5a:95:38:cd:5c:fa:55:3f:a6: b0:5f:b9:b9:63:c8:be:ee:fb:5c:5f:96:d4:70:55: d7:af:07:fb:15:5d:05:1f:62:12:79:03:30:c5:c6: b8:62:f0:fd:89:34:35:55:f8:20:6e:05:5f:96:ab: 7e:20:6b:4b:f8:67:70:fe:3e:a7:c2:21:30:65:c1: 85:f8:4d:28:39:48:1c:eb:34:e0:a1:54:0e:b4:4d: ff:e3:11:4f:a7:5b:99:4e:fe:0d:cd:41:38:be:f8: 05:d9:35:19:64:2c:cb:ca:c8:01:dc:66:ff:37:1d: a5:5f:d4:07:d9:5c:5e:f5:29:c5:ae:97:d4:fb:8f: 2b:3d:af:99:ff:53:a1:8e:de:a7:24:bc:d1:11:ed: 69:1b:2f:ff:cd:69:0c:cd:d2:20:2d:2a:a2:3d:76: b5:7e:9e:d8:4e:1a:8b:32:dc:5f:cf:47:19:81:66: 35:15:0c:5c:8e:09:9b:2a:5e:ad:1e:34:04:f9:cd: fa:cf:09:96:5b:4e:25:d3:7d:13:d5:d2:39:56:7f: 81:03:71:90:ba:5a:e3:82:d7:87:96:57:75:65:c8: 03:bc:85:f3:22:19:32:0b:8a:cb:dc:10:f6:98:83: 1f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:91:A1:57:7D:24:77:9E:8D:B5:8A:18:6F:B7:4F:52:53:31:E5:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3d:fe:bf:7f:59:6f:0e:38:7d:b6:66:5d:e3:ec:d7:17:1e: 57:90:2c:d5:69:c8:01:a6:d1:4f:75:b4:03:4b:90:df:6f:6a: 7b:1b:2c:fa:48:73:a6:48:00:4a:8e:90:34:cd:c2:65:19:80: 97:78:55:40:50:9b:bb:2b:e1:4c:8f:f2:5f:55:d5:51:dc:38: 32:24:d8:1b:a0:bf:fa:2a:cf:0f:f7:d9:36:ff:de:e3:d1:78: b9:1d:3c:a5:6c:50:2b:f7:a9:c4:55:eb:4f:8e:25:0e:28:4b: ee:55:27:fe:bc:94:f0:93:71:31:5d:b4:48:73:bf:9c:5e:25: c8:5b:11:b3:57:23:bb:c1:1b:06:19:4a:99:7f:a8:bb:a5:6f: 05:a7:3f:c0:27:a5:e1:ed:97:dc:cc:7d:05:8b:25:e4:4a:39: 18:e6:ce:ba:d4:e4:1d:8b:35:78:0a:a1:ac:66:c2:1d:29:f2: 1d:d8:b2:6e:2b:59:77:cc:bb:19:60:27:c2:a0:45:bc:74:f8: 92:b0:e6:39:1b:8b:df:10:1b:b8:cb:79:ce:54:83:65:71:0b: 24:e8:34:ad:1a:67:06:67:29:5e:04:81:af:39:6a:86:31:8b: ed:4c:b3:af:23:a2:a4:e4:9c:5a:ba:87:6d:d9:41:16:40:48: 01:22:f4:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0+Wif73mtfXCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZDdkODY2ZjEtZGM5ZS00ZmEzLTliZDItMzI2OGU5M2FjNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/RMwItUTDyh83BK/rTC0WJnDWRalTjNXPpV P6awX7m5Y8i+7vtcX5bUcFXXrwf7FV0FH2ISeQMwxca4YvD9iTQ1VfggbgVflqt+ IGtL+Gdw/j6nwiEwZcGF+E0oOUgc6zTgoVQOtE3/4xFPp1uZTv4NzUE4vvgF2TUZ ZCzLysgB3Gb/Nx2lX9QH2Vxe9SnFrpfU+48rPa+Z/1Ohjt6nJLzREe1pGy//zWkM zdIgLSqiPXa1fp7YThqLMtxfz0cZgWY1FQxcjgmbKl6tHjQE+c36zwmWW04l030T 1dI5Vn+BA3GQulrjgteHlld1ZcgDvIXzIhkyC4rL3BD2mIMfjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaRoVd9JHeejbWKGG+3T1JTMeXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTY0OTg3OGUtZTk4Mi0z OWJiLTlkMTUtOTEyZDZiMWYwMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM9/r9/WW8OOH22Zl3j7NcXHleQLNVpyAGm0U91tANLkN9vansbLPpI c6ZIAEqOkDTNwmUZgJd4VUBQm7sr4UyP8l9V1VHcODIk2Bugv/oqzw/32Tb/3uPR eLkdPKVsUCv3qcRV60+OJQ4oS+5VJ/68lPCTcTFdtEhzv5xeJchbEbNXI7vBGwYZ Spl/qLulbwWnP8AnpeHtl9zMfQWLJeRKORjmzrrU5B2LNXgKoaxmwh0p8h3Ysm4r WXfMuxlgJ8KgRbx0+JKw5jkbi98QG7jLec5Ug2VxCyToNK0aZwZnKV4Ega85aoYx i+1Ms68joqTknFq6h23ZQRZASAEi9IQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:51 2025 by rpki-client