$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6571c6de-d050-38cd-884d-26690e864931.roa File: 6571c6de-d050-38cd-884d-26690e864931.roa (raw, json) Hash identifier: NgjHfXDpAPayY8LcZpQ1xV+lWe8BsoSRuAzk6ZIYEEM= Subject key identifier: 78:57:AE:CD:27:80:63:12:03:FE:BE:30:3E:C3:5C:99:7A:0A:86:14 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D7299C41367794D90A4680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6571c6de-d050-38cd-884d-26690e864931.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.30.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:29:9c:41:36:77:94:d9:0a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=b3889da8-fb7d-405f-b733-50e827cf7b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:38:1a:cd:33:dc:06:63:30:5f:1e:10:59: 43:e2:a6:b8:68:23:bf:0a:13:f2:77:e2:0c:70:bd: 20:8f:e2:8a:f1:7e:ce:24:3b:da:e1:a9:5b:4f:1d: f3:83:ec:f4:df:95:14:2d:24:65:85:3f:92:2f:0d: ea:05:74:50:66:2e:cd:58:00:a3:1a:a8:8a:95:31: e5:e3:61:80:b9:d5:2e:5e:9d:56:c2:ef:8e:a3:63: ef:10:c9:6c:c2:a8:15:41:0d:f3:58:ce:90:c2:07: 29:c6:df:2c:b7:b8:49:82:93:fe:42:86:b2:56:18: cd:55:0b:6e:06:19:5b:c4:bd:58:25:ef:7c:e2:1f: 95:c7:2d:1f:22:bb:4b:47:b6:f6:03:08:d3:3d:7d: f3:f5:9f:42:fc:e4:21:f7:45:7a:b2:34:78:c1:42: 50:ca:c4:81:33:30:58:87:eb:c3:a7:d1:77:62:33: ae:2a:13:29:b9:8c:0d:c9:ce:df:0a:50:f7:6f:c9: a5:2d:aa:61:19:c0:19:cb:5d:a2:b3:8c:9f:c7:f6: bc:7b:88:f4:bb:eb:82:07:74:ab:cb:e9:0f:21:8a: 24:c6:c6:6b:27:9e:67:7a:77:5d:79:56:57:ea:76: 74:61:61:65:3a:a1:38:f2:63:e4:bb:be:a7:79:bb: f0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:57:AE:CD:27:80:63:12:03:FE:BE:30:3E:C3:5C:99:7A:0A:86:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6571c6de-d050-38cd-884d-26690e864931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6b:30:fe:ec:70:a1:a9:4e:d0:b8:a3:6f:c6:a6:79:c2:fb: f6:40:e4:45:57:43:97:5b:a3:d5:80:11:fd:29:0a:62:e1:c5: f1:55:ef:b0:21:bd:ca:9f:42:d9:e3:b6:9f:26:16:5c:3a:c4: b7:00:03:47:66:45:38:6b:ad:92:47:56:37:9e:95:01:32:eb: 89:b6:8c:25:a2:b4:52:b8:b5:3d:d3:df:cf:22:22:4c:ef:51: 3b:e5:74:90:4b:00:41:7d:87:90:a2:f1:85:43:4d:06:fb:87: 7e:a5:0b:5d:bf:c2:c8:bc:76:8c:32:c2:5b:c2:1e:48:6a:f4: fb:4d:0a:9e:5d:f7:4f:25:a4:9d:b8:bb:1f:0f:db:0b:22:d1: 86:03:07:e6:6a:30:a5:5b:ac:b5:62:0b:7a:a6:08:f4:c4:e1: 0e:97:16:08:6b:ee:46:34:62:b7:62:6c:13:cf:96:28:d0:59: 3b:23:0d:87:71:f5:42:7a:ec:6c:f5:25:b6:b8:09:21:f9:44: ad:cb:26:1e:dd:8f:12:5c:1b:70:b8:22:e8:3c:6a:a8:36:a6: 5c:a6:28:4a:a7:6c:64:d2:6b:0a:8e:3e:61:2a:a6:55:f1:e3: f9:39:86:a8:55:28:21:8a:0b:a1:b3:07:83:44:4b:06:ba:fb: 5b:fb:f5:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1ymcQTZ3lNkKRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk YjM4ODlkYTgtZmI3ZC00MDVmLWI3MzMtNTBlODI3Y2Y3YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX04Gs0z3AZjMF8eEFlD4qa4aCO/ChPyd+IM cL0gj+KK8X7OJDva4albTx3zg+z035UULSRlhT+SLw3qBXRQZi7NWACjGqiKlTHl 42GAudUuXp1Wwu+Oo2PvEMlswqgVQQ3zWM6Qwgcpxt8st7hJgpP+QoayVhjNVQtu BhlbxL1YJe984h+Vxy0fIrtLR7b2AwjTPX3z9Z9C/OQh90V6sjR4wUJQysSBMzBY h+vDp9F3YjOuKhMpuYwNyc7fClD3b8mlLaphGcAZy12is4yfx/a8e4j0u+uCB3Sr y+kPIYokxsZrJ55nenddeVZX6nZ0YWFlOqE48mPku76nebvwXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhXrs0ngGMSA/6+MD7DXJl6CoYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjU3MWM2ZGUtZDA1MC0z OGNkLTg4NGQtMjY2OTBlODY0OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR5vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNrMP7scKGpTtC4o2/GpnnC+/ZA5EVXQ5dbo9WAEf0pCmLhxfFV77Ah vcqfQtnjtp8mFlw6xLcAA0dmRThrrZJHVjeelQEy64m2jCWitFK4tT3T388iIkzv UTvldJBLAEF9h5Ci8YVDTQb7h36lC12/wsi8dowywlvCHkhq9PtNCp5d908lpJ24 ux8P2wsi0YYDB+ZqMKVbrLViC3qmCPTE4Q6XFghr7kY0YrdibBPPlijQWTsjDYdx 9UJ67Gz1Jba4CSH5RK3LJh7djxJcG3C4Iug8aqg2plymKEqnbGTSawqOPmEqplXx 4/k5hqhVKCGKC6GzB4NESwa6+1v79Rs= -----END CERTIFICATE-----Generated at Sat Oct 11 02:55:58 2025 by rpki-client