$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71572da6-3cac-325e-aeb2-22a3d049e737.roa File: 71572da6-3cac-325e-aeb2-22a3d049e737.roa (raw, json) Hash identifier: nqwsulasnqlCOQHMZdVniontcscPP76Zz0X3AC81Uwo= Subject key identifier: F1:B9:AB:16:B1:05:30:94:85:DF:3F:DC:8E:BB:48:94:9A:76:53:D5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB073F4A8F02C4E697D88 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71572da6-3cac-325e-aeb2-22a3d049e737.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.23.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b0:73:f4:a8:f0:2c:4e:69:7d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e9727b16-7569-45f1-b277-ad25600ccac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:13:57:20:e2:5e:96:b4:22:4e:8e:04:04: 4e:2a:45:8b:be:b2:ce:08:2e:ee:f1:17:3c:08:77: cb:bf:0d:c5:d6:12:bf:42:51:d4:44:8f:3f:f4:e6: 18:28:28:84:00:6a:e1:67:10:25:63:bc:49:d9:32: a4:82:f1:87:1d:da:ea:1c:d6:da:c2:3a:f2:12:00: fc:e6:3f:58:c4:9e:34:9f:f3:33:44:0a:21:b2:ee: ba:23:7a:8e:62:4a:43:a1:81:a9:20:83:6c:cd:78: 1a:f2:40:c8:fb:d3:58:53:ae:81:39:29:dd:cf:2e: f6:ec:05:7e:04:c7:6f:17:9f:4d:a3:c5:e7:d2:8e: d8:cf:fd:07:92:97:22:13:fc:1b:23:04:55:f9:fc: f8:74:b6:57:cc:78:6c:66:ef:3e:b5:63:0d:4e:18: e7:db:06:89:d6:8f:6b:c2:bb:67:11:2b:7c:c5:8d: 5a:16:27:08:b5:e1:a2:01:e2:37:0d:71:27:91:b9: 71:5a:65:6a:5a:7e:76:7e:bb:55:28:f1:fe:de:7b: ea:35:49:fb:02:6c:70:d0:69:95:ad:9d:18:a2:a1: c1:3b:6c:a8:c4:ea:94:74:7a:36:bc:ef:5f:10:52: 04:76:38:bc:78:10:fd:bf:1c:af:b7:26:57:3d:f7: f4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B9:AB:16:B1:05:30:94:85:DF:3F:DC:8E:BB:48:94:9A:76:53:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71572da6-3cac-325e-aeb2-22a3d049e737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5c:30:b7:06:11:4b:85:95:3e:05:c8:37:0f:b0:ac:ad:51: bc:68:33:41:27:7d:07:11:2b:da:65:1d:f6:f5:92:ac:3b:ac: fc:94:74:8b:1f:f3:a8:64:34:96:dd:04:ce:07:7f:d0:72:38: 07:cc:dc:59:2a:6f:bd:d1:e0:d2:bd:04:96:72:3e:2a:f7:e3: 14:5e:68:65:1a:cb:81:96:d1:e5:89:d3:43:e4:d4:ba:14:eb: 0a:84:7e:ce:23:4f:54:f0:ca:ee:3e:71:ae:63:fc:b5:e1:f9: 73:1f:ee:a5:84:a1:13:ff:ef:d1:71:99:f1:c9:e8:22:c7:e6: 5e:45:2c:ec:bc:d8:1d:5c:21:11:21:dd:c7:cb:91:4c:a0:5a: ff:47:d9:a6:fb:da:80:a9:3c:62:44:99:9b:62:36:ca:c1:f3: 21:95:ba:92:20:83:49:19:fe:13:f6:1f:a9:17:42:f8:c7:6f: 62:40:7e:2a:58:82:03:90:65:7a:9c:ab:49:9f:5e:48:f5:41: 0f:26:11:75:0a:81:8b:00:7c:fd:7d:40:12:f0:26:38:84:65: 29:e4:5f:08:b4:dd:78:14:24:c3:a2:24:94:ab:b8:26:ca:8d: 05:7d:8f:7d:c0:a5:20:81:c0:e9:a2:66:87:6c:e7:5b:f2:51: dc:1b:d8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLBz9KjwLE5pfYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTk3MjdiMTYtNzU2OS00NWYxLWIyNzctYWQyNTYwMGNjYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05oTVyDiXpa0Ik6OBAROKkWLvrLOCC7u8Rc8 CHfLvw3F1hK/QlHURI8/9OYYKCiEAGrhZxAlY7xJ2TKkgvGHHdrqHNbawjryEgD8 5j9YxJ40n/MzRAohsu66I3qOYkpDoYGpIINszXga8kDI+9NYU66BOSndzy727AV+ BMdvF59No8Xn0o7Yz/0HkpciE/wbIwRV+fz4dLZXzHhsZu8+tWMNThjn2waJ1o9r wrtnESt8xY1aFicIteGiAeI3DXEnkblxWmVqWn52frtVKPH+3nvqNUn7Amxw0GmV rZ0YoqHBO2yoxOqUdHo2vO9fEFIEdji8eBD9vxyvtyZXPff0HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG5qxaxBTCUhd8/3I67SJSadlPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzE1NzJkYTYtM2NhYy0z MjVlLWFlYjItMjJhM2QwNDllNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlcMLcGEUuFlT4FyDcPsKytUbxoM0EnfQcRK9plHfb1kqw7rPyUdIsf 86hkNJbdBM4Hf9ByOAfM3Fkqb73R4NK9BJZyPir34xReaGUay4GW0eWJ00Pk1LoU 6wqEfs4jT1Twyu4+ca5j/LXh+XMf7qWEoRP/79FxmfHJ6CLH5l5FLOy82B1cIREh 3cfLkUygWv9H2ab72oCpPGJEmZtiNsrB8yGVupIgg0kZ/hP2H6kXQvjHb2JAfipY ggOQZXqcq0mfXkj1QQ8mEXUKgYsAfP19QBLwJjiEZSnkXwi03XgUJMOiJJSruCbK jQV9j33ApSCBwOmiZods51vyUdwb2OE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:44 2025 by rpki-client