$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/697180c2-3787-3b4c-8077-e247ac33c8d2.roa File: 697180c2-3787-3b4c-8077-e247ac33c8d2.roa (raw, json) Hash identifier: 6XCOpJ1NSipm4A6a92BJZ7TmlZx2NRYEHBLAzfOIR5E= Subject key identifier: 20:9F:05:47:FD:F6:25:B4:A2:DC:08:9D:B1:F1:65:5D:D6:40:E7:D8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC8BC63D20102765017080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/697180c2-3787-3b4c-8077-e247ac33c8d2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.19.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:8b:c6:3d:20:10:27:65:01:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e8bdab7e-f9e5-4f14-a087-7398ef2f0c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b3:09:d4:e6:22:97:89:b8:b2:ab:db:db:16: 93:6d:03:3d:e2:c6:30:2c:68:0f:84:f9:4a:6a:ba: 44:22:77:66:13:05:96:96:e4:76:1c:08:b5:ac:24: 37:15:f3:86:b9:e5:8f:0d:bf:1f:da:50:22:6a:4c: 46:ca:d6:4c:eb:89:b4:67:00:9a:3c:4f:23:2d:b8: de:7d:20:11:76:36:98:d4:d1:d5:31:09:14:15:05: 13:4e:98:53:26:02:4e:1a:78:27:eb:8d:f8:7b:09: ba:dd:ca:8f:93:7b:06:42:cd:97:cb:e8:89:a2:82: 44:b6:c7:25:95:4d:b5:ef:76:b6:fe:02:b6:24:6c: 43:38:1c:16:9f:1b:25:8e:34:d6:56:b9:7f:a3:06: da:e9:a8:e0:c1:c2:eb:5a:2d:a9:a8:5b:80:e5:ed: f4:4c:a5:18:a4:08:8b:76:65:3b:bd:28:ce:3e:c5: 47:bb:3d:ff:d1:df:70:b6:e1:92:4c:7e:20:0e:34: e0:d3:53:37:53:ec:39:04:fe:17:ba:1d:07:3d:ae: 9b:1a:bb:42:e8:73:28:3e:3d:e4:4e:56:79:a1:55: 02:cf:b1:47:3e:13:78:07:fd:9e:a7:33:f7:49:f7: 25:8d:f8:5b:8d:1b:10:01:e7:75:08:55:e5:ff:f5: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:05:47:FD:F6:25:B4:A2:DC:08:9D:B1:F1:65:5D:D6:40:E7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/697180c2-3787-3b4c-8077-e247ac33c8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b5:88:2f:88:bf:42:19:7a:53:97:d6:49:56:d6:86:02:7d: 6c:5a:dd:21:8c:96:2f:e8:6f:8c:00:cc:0a:4d:67:88:59:d5: 6c:07:dc:dd:2a:a1:18:e3:86:ff:ad:db:67:86:fc:e1:5b:db: 94:86:01:98:58:67:6c:f9:3a:92:53:6a:4d:dc:e6:84:00:29: b5:c1:24:a6:ba:c6:ad:34:f5:87:d3:f9:90:98:69:7e:46:53: 4c:40:8b:bd:57:a0:3b:19:60:00:e1:88:14:90:a0:fc:46:a4: 64:0c:9a:cc:2d:af:16:c2:16:23:72:af:8e:9b:94:22:a9:65: f8:45:5f:d1:53:69:69:d5:af:c0:b7:93:af:b4:0b:8d:9c:48: 85:27:a6:3b:6c:b2:a6:7c:69:d2:64:8b:ed:d5:47:a2:e0:90: 53:fc:88:bd:2d:aa:29:b3:f9:30:02:58:fb:62:f5:88:c3:aa: 6f:54:76:8e:a5:ba:72:ea:a8:2f:b7:5f:d2:fd:01:55:98:6e: dc:eb:3c:ab:57:d7:c2:1d:14:b8:07:ca:c8:94:57:b1:9d:88: 50:a0:35:fc:c5:c7:61:6e:5b:4d:d2:00:95:20:49:14:81:3d: 30:d9:ab:52:80:94:fd:95:19:48:08:aa:9d:04:58:a7:8e:09: 53:68:03:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIvGPSAQJ2UBcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZThiZGFiN2UtZjllNS00ZjE0LWEwODctNzM5OGVmMmYwYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57MJ1OYil4m4sqvb2xaTbQM94sYwLGgPhPlK arpEIndmEwWWluR2HAi1rCQ3FfOGueWPDb8f2lAiakxGytZM64m0ZwCaPE8jLbje fSARdjaY1NHVMQkUFQUTTphTJgJOGngn6434ewm63cqPk3sGQs2Xy+iJooJEtscl lU2173a2/gK2JGxDOBwWnxsljjTWVrl/owba6ajgwcLrWi2pqFuA5e30TKUYpAiL dmU7vSjOPsVHuz3/0d9wtuGSTH4gDjTg01M3U+w5BP4Xuh0HPa6bGrtC6HMoPj3k TlZ5oVUCz7FHPhN4B/2epzP3SfcljfhbjRsQAed1CFXl//WWQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCfBUf99iW0otwInbHxZV3WQOfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjk3MTgwYzItMzc4Ny0z YjRjLTgwNzctZTI0N2FjMzNjOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRN3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF21iC+Iv0IZelOX1klW1oYCfWxa3SGMli/ob4wAzApNZ4hZ1WwH3N0q oRjjhv+t22eG/OFb25SGAZhYZ2z5OpJTak3c5oQAKbXBJKa6xq009YfT+ZCYaX5G U0xAi71XoDsZYADhiBSQoPxGpGQMmswtrxbCFiNyr46blCKpZfhFX9FTaWnVr8C3 k6+0C42cSIUnpjtssqZ8adJki+3VR6LgkFP8iL0tqimz+TACWPti9YjDqm9Udo6l unLqqC+3X9L9AVWYbtzrPKtX18IdFLgHysiUV7GdiFCgNfzFx2FuW03SAJUgSRSB PTDZq1KAlP2VGUgIqp0EWKeOCVNoA28= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:15 2025 by rpki-client