$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a3ce6c3-da27-30f8-8758-75d760a69e39.roa File: 6a3ce6c3-da27-30f8-8758-75d760a69e39.roa (raw, json) Hash identifier: K9jjQ+smu/vmucP4MSJ+RsiFVP/sL9CUWlY9ndILGmM= Subject key identifier: AC:8C:37:F9:86:AB:46:58:A9:47:1A:20:3E:B0:2D:F4:62:F1:DA:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B2FC1BB4548EC54B5523CBD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a3ce6c3-da27-30f8-8758-75d760a69e39.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.29.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:bb:45:48:ec:54:b5:52:3c:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=cb8e899d-d4e9-4bb6-a8e1-deab35b863d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:76:88:fc:5c:ec:fc:fe:e9:e5:a6:b9:99: 25:7d:a6:b2:e7:82:e9:48:ba:d7:6d:18:34:f9:06: 9b:11:69:ad:c5:c2:11:46:d8:60:3b:f4:f6:6e:80: 4b:a6:ec:aa:45:e7:e6:17:34:06:c8:fc:96:90:3b: 93:bb:9b:9f:7d:f3:d3:45:19:e5:dd:c6:af:30:6b: 6a:d2:07:1f:ea:ef:6c:25:25:4c:a8:5d:bd:4c:dd: 0a:7f:e9:bc:ae:95:be:cf:cd:f4:53:52:18:30:6b: a3:14:87:7e:5c:3d:17:97:2d:87:b1:e6:80:a8:cd: ca:cd:35:ee:87:2a:26:a7:aa:ac:09:7c:5f:42:9b: 54:b4:24:48:f9:d3:dd:02:17:c4:61:5f:c5:86:80: 73:9e:b3:44:69:32:30:51:2d:b1:28:74:f0:94:28: 66:5d:b3:dc:91:5a:34:15:b8:ff:09:6b:46:c1:ed: 01:3b:73:11:ff:f4:eb:05:40:6f:92:31:29:bd:72: 58:67:03:0b:4a:5e:61:6e:bb:a0:df:35:2d:c9:81: bd:41:b7:4f:bb:b1:fb:6a:47:af:5d:21:05:99:7a: cc:bb:9d:44:36:c7:1d:3a:09:1b:16:2e:b2:99:4f: 87:15:8b:3f:20:0b:0e:e8:a0:ba:94:ed:c3:56:b9: b5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8C:37:F9:86:AB:46:58:A9:47:1A:20:3E:B0:2D:F4:62:F1:DA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a3ce6c3-da27-30f8-8758-75d760a69e39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3c:eb:cb:9e:ee:ae:f2:b3:f0:34:b7:fe:46:cb:33:03:f9: db:b8:cf:97:d5:fd:a0:94:bf:2b:f1:9d:3a:0c:be:8f:9d:4d: 7e:f5:97:80:31:b9:d5:47:f8:7e:a0:99:1c:6d:90:cd:e5:d0: 43:43:ce:a4:9e:17:88:07:88:fc:37:5a:61:3b:c0:6e:3a:da: 39:f9:b7:16:ad:ee:1b:4f:d5:c6:9c:cd:25:63:2d:14:c1:a6: 92:c2:db:34:d3:89:38:83:a5:29:b6:67:c6:5f:e3:d8:72:f5: fb:76:5c:fa:46:49:38:ac:6a:4c:ee:47:1e:f2:36:ce:3c:d5: 68:29:62:f9:9e:fb:c9:eb:28:d2:1d:45:d6:78:40:da:60:01: af:0a:3a:c6:f4:76:ea:93:10:c4:da:0e:c6:a7:01:db:3a:8e: 71:8e:eb:fc:51:6d:3a:f6:b1:92:b0:3d:2a:32:53:89:23:b0: e0:42:ff:a3:94:a9:ea:4e:7c:5a:7f:2c:80:ef:21:74:a6:df: 08:e3:f2:18:31:f2:4b:3f:81:f8:cf:6c:bc:3e:7b:43:39:82: af:20:2e:d7:9d:36:56:8e:1b:31:5e:ea:3b:38:c7:f0:c1:63: d8:0f:7e:c5:a9:1e:9a:33:f6:1b:0d:25:b3:30:12:fe:20:ec: f1:66:0e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbtFSOxUtVI8vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk Y2I4ZTg5OWQtZDRlOS00YmI2LWE4ZTEtZGVhYjM1Yjg2M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoF2iPxc7Pz+6eWmuZklfaay54LpSLrXbRg0 +QabEWmtxcIRRthgO/T2boBLpuyqRefmFzQGyPyWkDuTu5ufffPTRRnl3cavMGtq 0gcf6u9sJSVMqF29TN0Kf+m8rpW+z830U1IYMGujFId+XD0Xly2HseaAqM3KzTXu hyomp6qsCXxfQptUtCRI+dPdAhfEYV/FhoBznrNEaTIwUS2xKHTwlChmXbPckVo0 Fbj/CWtGwe0BO3MR//TrBUBvkjEpvXJYZwMLSl5hbrug3zUtyYG9QbdPu7H7akev XSEFmXrMu51ENscdOgkbFi6ymU+HFYs/IAsO6KC6lO3DVrm1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyMN/mGq0ZYqUcaID6wLfRi8do1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmEzY2U2YzMtZGEyNy0z MGY4LTg3NTgtNzVkNzYwYTY5ZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk868ue7q7ys/A0t/5GyzMD+du4z5fV/aCUvyvxnToMvo+dTX71l4Ax udVH+H6gmRxtkM3l0ENDzqSeF4gHiPw3WmE7wG462jn5txat7htP1caczSVjLRTB ppLC2zTTiTiDpSm2Z8Zf49hy9ft2XPpGSTisakzuRx7yNs481WgpYvme+8nrKNId RdZ4QNpgAa8KOsb0duqTEMTaDsanAds6jnGO6/xRbTr2sZKwPSoyU4kjsOBC/6OU qepOfFp/LIDvIXSm3wjj8hgx8ks/gfjPbLw+e0M5gq8gLtedNlaOGzFe6js4x/DB Y9gPfsWpHpoz9hsNJbMwEv4g7PFmDiw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:15 2025 by rpki-client