$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/564a2b2b-cb25-3b90-ac0a-5e58189053b4.roa File: 564a2b2b-cb25-3b90-ac0a-5e58189053b4.roa (raw, json) Hash identifier: skt23k5kJImqSv1eSdtIWzZwcQqx1aqstpoQFYDYr9c= Subject key identifier: BC:3F:5E:30:53:0D:6C:73:0E:6D:BE:74:C9:86:1B:86:96:A4:7B:C3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B4DC1ED7D7D2B33FD6051A000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/564a2b2b-cb25-3b90-ac0a-5e58189053b4.roa Signing time: Wed 24 Sep 2025 18:55:41 +0000 ROA not before: Wed 24 Sep 2025 18:55:41 +0000 ROA not after: Tue 23 Dec 2025 19:55:41 +0000 asID: 30036 IP address blocks: 173.23.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:c1:ed:7d:7d:2b:33:fd:60:51:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 18:55:41 2025 GMT Not After : Dec 23 19:55:41 2025 GMT Subject: CN=c5e0c757-0e0f-4322-b11e-b4be0107b7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:41:62:6a:ff:de:1c:8d:a8:5b:09:3a:f9: f0:45:ae:86:f0:26:a7:47:ee:35:38:27:0b:01:d6: 29:cf:41:82:61:0a:e8:5a:54:d4:88:dc:39:48:dd: 90:41:82:c8:cd:90:02:d3:11:61:91:44:bf:08:d9: 0f:90:9a:c2:e4:85:0d:6e:c7:0d:be:88:a3:1e:fd: 72:57:6a:63:c6:01:96:15:26:fc:8c:c2:7d:df:e5: 02:f7:e1:02:2b:10:cc:45:21:42:1f:31:2c:47:6f: 49:0b:66:df:9b:43:e4:59:e7:72:c1:70:51:e2:d3: 03:de:15:7b:43:a2:09:de:99:8f:20:0c:d4:41:94: d5:f0:98:ba:2c:6e:c6:ac:5c:ab:24:80:b5:77:3d: bb:27:69:6a:87:a8:e1:a0:21:5f:c6:e7:6d:f6:89: 9c:80:df:4b:54:02:82:70:6a:f6:fb:3c:73:04:46: 2c:62:28:3b:0c:b9:d8:9b:75:2d:27:ec:e4:c7:2d: aa:15:5b:bd:88:f1:36:c2:e9:e8:b2:c9:bf:41:40: cd:6e:bf:6e:0d:6b:0c:ff:7f:5d:a2:4d:f0:b1:39: 78:6c:9b:58:a0:57:f1:b6:e4:9f:99:5d:1a:7f:30: 44:e4:de:20:df:3e:55:fe:37:9b:c3:01:e1:ba:45: de:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3F:5E:30:53:0D:6C:73:0E:6D:BE:74:C9:86:1B:86:96:A4:7B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/564a2b2b-cb25-3b90-ac0a-5e58189053b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fd:db:e5:95:ef:5f:e8:55:de:09:63:da:fb:ba:a1:b3:4c: a8:7c:53:18:9e:94:de:d8:b7:24:9c:a1:76:5e:c5:2c:0f:d7: 4b:37:79:17:79:66:e5:3d:4a:91:07:60:2a:09:1f:80:9c:77: db:53:a5:41:6a:84:85:41:3a:3c:16:63:cf:e7:f8:71:1b:28: bb:c5:a0:ce:80:e9:f1:44:47:7c:f9:c8:36:58:c4:aa:6d:d9: e6:fb:92:92:e5:5f:36:75:7c:8e:43:33:5e:7d:2a:4a:48:76: 05:19:d2:e7:15:99:84:2e:ff:ea:bc:a4:7a:5e:5d:c9:ef:16: 57:2d:75:91:65:1b:b2:fe:ec:54:56:f3:de:74:1c:a8:e1:6f: 8f:a6:2f:15:93:3f:8e:6b:5b:ad:87:46:de:d8:84:ef:97:4e: de:09:68:46:4a:a6:79:1e:c1:26:eb:a0:5f:94:55:6b:f9:25: 89:3e:c1:90:a3:da:91:31:b3:e2:43:0f:83:ad:fb:1c:29:2f: c7:b1:4e:76:60:7f:f8:db:c6:7c:85:f0:ca:33:27:6e:26:28: 3c:bc:76:11:5e:4e:67:c8:da:d0:ee:89:0d:35:9f:0e:48:bc: bc:38:4c:ce:50:1c:3a:7d:f7:bb:08:4a:8f:34:31:3c:d2:a3: 66:97:87:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNwe19fSsz/WBRoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNDE4NTU0MVoXDTI1MTIyMzE5NTU0MVowLzEtMCsGA1UEAxMk YzVlMGM3NTctMGUwZi00MzIyLWIxMWUtYjRiZTAxMDdiN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+ZBYmr/3hyNqFsJOvnwRa6G8CanR+41OCcL AdYpz0GCYQroWlTUiNw5SN2QQYLIzZAC0xFhkUS/CNkPkJrC5IUNbscNvoijHv1y V2pjxgGWFSb8jMJ93+UC9+ECKxDMRSFCHzEsR29JC2bfm0PkWedywXBR4tMD3hV7 Q6IJ3pmPIAzUQZTV8Ji6LG7GrFyrJIC1dz27J2lqh6jhoCFfxudt9omcgN9LVAKC cGr2+zxzBEYsYig7DLnYm3UtJ+zkxy2qFVu9iPE2wunossm/QUDNbr9uDWsM/39d ok3wsTl4bJtYoFfxtuSfmV0afzBE5N4g3z5V/jebwwHhukXeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw/XjBTDWxzDm2+dMmGG4aWpHvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTY0YTJiMmItY2IyNS0z YjkwLWFjMGEtNWU1ODE4OTA1M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr92+WV71/oVd4JY9r7uqGzTKh8UxielN7YtyScoXZexSwP10s3eRd5 ZuU9SpEHYCoJH4Ccd9tTpUFqhIVBOjwWY8/n+HEbKLvFoM6A6fFER3z5yDZYxKpt 2eb7kpLlXzZ1fI5DM159KkpIdgUZ0ucVmYQu/+q8pHpeXcnvFlctdZFlG7L+7FRW 8950HKjhb4+mLxWTP45rW62HRt7YhO+XTt4JaEZKpnkewSbroF+UVWv5JYk+wZCj 2pExs+JDD4Ot+xwpL8exTnZgf/jbxnyF8MozJ24mKDy8dhFeTmfI2tDuiQ01nw5I vLw4TM5QHDp997sISo80MTzSo2aXh/A= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:29 2025 by rpki-client