$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b1cb2d-7cab-3d08-877b-dc73a8d5ebe5.roa File: 70b1cb2d-7cab-3d08-877b-dc73a8d5ebe5.roa (raw, json) Hash identifier: QVdwPCYtqd4/Y88Py6OJ+hzxspt0YHmmoIFZyAth32o= Subject key identifier: E4:EC:3D:9B:B4:7B:3B:A1:68:76:62:84:DE:86:9A:1F:AF:EF:E0:CA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCA3B857261EACF5055980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b1cb2d-7cab-3d08-877b-dc73a8d5ebe5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.16.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a3:b8:57:26:1e:ac:f5:05:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a8d1c1a3-9b4c-4e2b-900f-5c301207e926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:4b:0d:4d:0c:e5:84:37:2c:b0:65:e9:03: df:fc:06:20:6c:c0:4e:dc:45:46:43:b9:af:2c:d9: 56:5b:1c:48:11:13:48:ea:0a:e0:de:aa:f2:66:45: ab:2a:fa:e0:5f:30:21:5d:71:20:b4:8e:62:7a:65: 7e:88:9a:d9:60:ea:5f:a7:0f:0d:8b:2f:4a:c5:0e: f4:88:fb:82:e0:e4:de:09:c5:b9:d9:2e:7e:44:0a: 75:81:97:10:03:30:98:48:14:6b:4f:77:af:3b:90: dc:04:1f:37:ce:8c:ae:3d:2d:7a:07:63:31:bf:f9: de:36:71:e1:92:08:b5:93:92:4a:d2:9a:ca:9c:84: a6:5c:bc:06:49:37:b3:fd:93:3f:e9:5d:0e:31:9b: a5:a4:24:83:9e:48:a4:c3:a2:c0:5d:a2:68:9a:52: d2:ed:f3:53:d8:ae:43:54:55:11:22:55:81:27:3a: 06:1d:a9:17:6f:e4:7f:5d:46:78:66:69:30:b8:df: 50:6a:07:8f:1c:cb:18:a9:fa:0a:c1:38:d4:f4:a4: 1d:a1:e6:d8:30:33:77:a7:f3:d3:a1:f4:80:cc:cf: db:9f:b8:c4:c4:18:24:75:aa:94:98:25:35:a3:0e: e7:d1:62:08:7c:81:55:91:f0:f9:68:80:0b:70:99: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EC:3D:9B:B4:7B:3B:A1:68:76:62:84:DE:86:9A:1F:AF:EF:E0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b1cb2d-7cab-3d08-877b-dc73a8d5ebe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b3:0e:04:1f:44:91:1b:e3:c8:6e:58:59:3d:ad:05:14:74: ad:a0:4b:de:4e:fb:db:15:69:91:4c:54:0c:d3:be:86:10:38: 15:a5:c7:d4:c4:89:23:47:38:1e:54:3f:48:20:40:9e:24:00: 7e:22:84:5d:89:90:84:75:0f:7e:06:87:c4:28:40:21:ea:f2: 5e:93:04:f4:d7:32:9c:ad:8f:a5:04:48:1c:85:cc:0c:a4:3d: 75:b1:89:0e:f3:24:f9:4d:1c:d6:bc:bb:6d:a3:1a:63:5a:26: 02:b6:4f:92:23:65:78:cb:8c:07:53:39:e7:a9:0c:9a:22:68: 33:ac:a2:a1:19:46:52:5f:8f:b0:4a:a2:02:54:19:51:94:a4: de:ec:ea:84:56:06:5a:ca:80:81:8f:81:75:c2:3a:f2:1d:2a: 88:44:27:19:7d:cd:16:9e:d4:e7:1e:2b:34:9e:de:cc:f7:6d: 56:bb:c0:88:46:f7:8e:b3:84:30:2f:43:55:0c:87:3c:37:2d: 42:23:93:d0:a3:47:b2:3a:91:8a:fe:28:6b:e9:41:69:b1:7e: 54:df:06:0e:36:2e:4f:dc:25:7f:11:9d:17:65:59:c6:75:c7: 98:59:53:d0:04:3c:a2:b5:cf:3c:4e:b4:4e:7c:98:db:0f:98: ff:b5:64:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKO4VyYerPUFWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YThkMWMxYTMtOWI0Yy00ZTJiLTkwMGYtNWMzMDEyMDdlOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZFLDU0M5YQ3LLBl6QPf/AYgbMBO3EVGQ7mv LNlWWxxIERNI6grg3qryZkWrKvrgXzAhXXEgtI5iemV+iJrZYOpfpw8Niy9KxQ70 iPuC4OTeCcW52S5+RAp1gZcQAzCYSBRrT3evO5DcBB83zoyuPS16B2Mxv/neNnHh kgi1k5JK0prKnISmXLwGSTez/ZM/6V0OMZulpCSDnkikw6LAXaJomlLS7fNT2K5D VFURIlWBJzoGHakXb+R/XUZ4ZmkwuN9QagePHMsYqfoKwTjU9KQdoebYMDN3p/PT ofSAzM/bn7jExBgkdaqUmCU1ow7n0WIIfIFVkfD5aIALcJlc6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTsPZu0ezuhaHZihN6Gmh+v7+DKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzBiMWNiMmQtN2NhYi0z ZDA4LTg3N2ItZGM3M2E4ZDVlYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6zDgQfRJEb48huWFk9rQUUdK2gS95O+9sVaZFMVAzTvoYQOBWlx9TE iSNHOB5UP0ggQJ4kAH4ihF2JkIR1D34Gh8QoQCHq8l6TBPTXMpytj6UESByFzAyk PXWxiQ7zJPlNHNa8u22jGmNaJgK2T5IjZXjLjAdTOeepDJoiaDOsoqEZRlJfj7BK ogJUGVGUpN7s6oRWBlrKgIGPgXXCOvIdKohEJxl9zRae1OceKzSe3sz3bVa7wIhG 946zhDAvQ1UMhzw3LUIjk9CjR7I6kYr+KGvpQWmxflTfBg42Lk/cJX8RnRdlWcZ1 x5hZU9AEPKK1zzxOtE58mNsPmP+1ZIk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:19 2025 by rpki-client