$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/634014c2-d72a-3b57-9389-9c8dda7dbb67.roa File: 634014c2-d72a-3b57-9389-9c8dda7dbb67.roa (raw, json) Hash identifier: ZzZl/5JVLj0h3MYzuTVt4d4vp6BQdfvek0qDDOlUwWY= Subject key identifier: 7F:7B:66:EC:3D:80:2E:89:D9:CF:D8:B3:33:D3:B6:96:38:90:AD:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73DE6B074D1AE9EEF5F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/634014c2-d72a-3b57-9389-9c8dda7dbb67.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.25.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3d:e6:b0:74:d1:ae:9e:ef:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=5b71b256-bdc4-4273-8ec7-02d47b32e571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:08:35:84:26:72:51:19:41:8b:a9:e7:66: b1:53:28:ed:80:d2:66:07:56:45:69:70:84:e8:ea: 51:aa:78:45:a7:17:31:de:2e:6e:33:0d:97:15:b4: db:25:7e:14:74:13:f1:e5:6a:d9:38:52:4f:9b:b6: 88:81:6c:f2:48:e4:22:f0:e4:59:23:f1:e8:c9:89: 79:17:88:fd:41:9d:1e:4b:87:55:59:69:81:a3:e7: a4:09:3a:51:59:b9:9b:89:12:74:e8:0d:9b:77:4c: 82:03:be:4f:c3:aa:81:54:77:9e:f5:d5:64:62:15: 4e:8d:31:9b:b4:59:9d:22:aa:cc:40:fb:c3:2a:cd: c3:cb:30:de:b9:e1:b3:7f:41:d6:17:43:d8:91:93: aa:52:63:d3:b7:00:4c:ba:85:c7:52:55:f7:ed:ba: 33:f7:b5:c6:4d:32:97:df:3a:c4:fe:5d:37:35:4c: a3:a7:72:f1:69:04:81:4d:74:e2:73:5e:7f:7a:98: 05:37:5e:70:14:6d:28:13:65:3d:ee:9a:39:9c:5e: 70:cc:2f:98:d4:f6:75:ec:4c:ab:91:76:fd:f3:b2: 13:ab:38:9d:ae:18:56:8a:1a:b9:7b:3e:f0:fc:c5: 93:68:71:2d:c0:8b:d4:06:94:f4:1b:09:19:4b:56: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7B:66:EC:3D:80:2E:89:D9:CF:D8:B3:33:D3:B6:96:38:90:AD:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/634014c2-d72a-3b57-9389-9c8dda7dbb67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:88:d5:43:ec:e7:f9:3f:5e:b7:24:e2:f9:73:cc:06:96:1d: 1e:ba:c8:5e:79:eb:7f:8b:45:f1:68:3b:a7:26:b8:6c:cc:fb: 9b:22:6a:ba:56:75:8e:2b:e1:66:7f:10:e5:6a:d0:37:ff:d3: 3d:6a:2a:80:f1:17:cd:a6:9c:d8:04:46:6d:98:01:bb:88:5f: 0e:36:85:3b:bd:b8:b3:38:71:54:ec:84:cd:83:92:1e:ba:53: ef:66:1f:8e:7d:ba:37:41:96:27:2f:65:69:1d:fb:5e:2e:ce: 29:20:d1:7f:a1:bb:ea:05:00:fa:75:26:56:6f:5a:9e:f2:f5: d5:1a:bc:60:1f:98:f9:eb:42:32:8e:d4:db:0f:23:75:3d:63: a5:87:4b:3e:34:65:11:cc:1c:23:6d:a5:66:cc:2f:1f:9e:54: 2a:a1:09:3e:4f:a6:21:8e:e4:54:bc:04:45:e3:2b:07:e6:b8: aa:8b:32:a3:f7:e4:63:ec:06:c4:64:7e:f1:ba:96:8b:0f:d1: d0:13:f5:df:08:c5:98:05:a6:4b:ea:05:e9:ac:e9:1f:48:a4: e3:66:49:06:6b:fb:e4:d8:1e:09:b7:d8:41:83:7a:33:f2:13: 12:f9:4c:57:af:04:76:0d:1a:53:dd:de:18:df:d1:86:7c:a5: 2f:a7:7a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1z3msHTRrp7vXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NWI3MWIyNTYtYmRjNC00MjczLThlYzctMDJkNDdiMzJlNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWgINYQmclEZQYup52axUyjtgNJmB1ZFaXCE 6OpRqnhFpxcx3i5uMw2XFbTbJX4UdBPx5WrZOFJPm7aIgWzySOQi8ORZI/HoyYl5 F4j9QZ0eS4dVWWmBo+ekCTpRWbmbiRJ06A2bd0yCA75Pw6qBVHee9dVkYhVOjTGb tFmdIqrMQPvDKs3DyzDeueGzf0HWF0PYkZOqUmPTtwBMuoXHUlX37boz97XGTTKX 3zrE/l03NUyjp3LxaQSBTXTic15/epgFN15wFG0oE2U97po5nF5wzC+Y1PZ17Eyr kXb987ITqzidrhhWihq5ez7w/MWTaHEtwIvUBpT0GwkZS1ZxRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH97Zuw9gC6J2c/YszPTtpY4kK01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjM0MDE0YzItZDcyYS0z YjU3LTkzODktOWM4ZGRhN2RiYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRlOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCI1UPs5/k/Xrck4vlzzAaWHR66yF5563+LRfFoO6cmuGzM+5siarpW dY4r4WZ/EOVq0Df/0z1qKoDxF82mnNgERm2YAbuIXw42hTu9uLM4cVTshM2Dkh66 U+9mH459ujdBlicvZWkd+14uzikg0X+hu+oFAPp1JlZvWp7y9dUavGAfmPnrQjKO 1NsPI3U9Y6WHSz40ZRHMHCNtpWbMLx+eVCqhCT5PpiGO5FS8BEXjKwfmuKqLMqP3 5GPsBsRkfvG6losP0dAT9d8IxZgFpkvqBems6R9IpONmSQZr++TYHgm32EGDejPy ExL5TFevBHYNGlPd3hjf0YZ8pS+neuk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:18 2025 by rpki-client