$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73fdc8a5-4c93-3037-9a7a-9874e4d6c73f.roa File: 73fdc8a5-4c93-3037-9a7a-9874e4d6c73f.roa (raw, json) Hash identifier: h7cmsp4eM7ICjKvHm6mhhU1u0USXTPwcLqjTsJFLZuo= Subject key identifier: 89:9B:44:A5:BF:32:B8:75:28:2D:BD:AF:34:83:D2:5A:95:A3:08:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62023802163F56C463AEA780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73fdc8a5-4c93-3037-9a7a-9874e4d6c73f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 170.52.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:38:02:16:3f:56:c4:63:ae:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4b9cf34d-ab03-4b8e-8da8-48a564d3e9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d7:4e:39:7f:b3:16:6e:56:7d:bd:83:33:b5: 64:39:40:ef:cc:b8:d5:8a:fc:44:5e:e1:26:33:ee: 87:10:7e:76:a6:57:ec:d7:a2:9e:db:f6:f7:f7:17: 81:37:93:d6:91:5a:60:b6:c6:02:f7:24:a2:90:ac: 68:aa:59:62:be:5c:76:02:0e:39:2a:70:02:c6:84: 0c:47:37:dc:af:88:20:25:36:a8:9f:08:65:a2:48: ad:93:8f:a6:9c:75:eb:ce:57:88:12:2d:6c:6a:08: 46:5b:b9:f6:8e:22:f3:c2:d8:f5:8b:46:2e:14:14: 6d:10:e4:a5:de:c7:5a:6b:76:ff:dc:07:3d:05:ac: bb:7c:12:50:b3:51:b4:96:23:25:39:e9:b3:27:c8: 1f:83:8d:9f:f4:57:6f:4f:66:a4:f1:84:d4:ca:82: 20:2b:28:d3:40:e8:50:75:a2:5c:b5:8b:de:32:16: 01:d6:4d:c8:59:5d:a1:43:b3:af:a5:b7:0b:c8:a7: 4d:0b:3d:4d:f2:44:f5:c2:65:d0:9f:c3:ef:e8:67: fe:ca:f6:cf:99:32:39:83:b2:a8:93:a2:80:49:34: 5d:5c:85:42:08:e8:3a:64:5d:31:c0:e4:92:db:c6: f5:fa:d8:b9:90:4d:fe:e9:41:4d:d4:59:29:20:24: 68:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9B:44:A5:BF:32:B8:75:28:2D:BD:AF:34:83:D2:5A:95:A3:08:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73fdc8a5-4c93-3037-9a7a-9874e4d6c73f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:14:e2:3f:f6:bc:4b:21:e1:2f:0c:29:67:b4:c1:55:1b:2a: fa:56:b1:6c:11:9a:f9:9d:4d:67:4e:8f:5b:b0:ff:59:04:97: 15:bc:e1:7a:ab:23:80:39:61:db:3e:04:75:5a:cd:87:58:52: ac:4a:ff:8d:97:70:07:19:2a:f5:33:f8:7c:76:ef:c7:a7:24: 6f:6a:a3:14:b1:99:e9:3a:a3:95:9d:51:b9:0b:b2:5a:82:6f: ea:a8:1c:36:0b:31:5b:30:92:a3:6b:c4:05:16:08:a7:46:0d: 56:78:e4:2d:83:5c:00:39:33:b0:90:7f:68:af:94:56:60:f5: d6:2a:f7:a1:2c:94:95:a3:b6:6f:cc:aa:2d:a8:4a:91:6b:13: ac:e2:10:d1:4b:4c:69:9b:6d:47:2d:7d:45:3b:bf:59:a2:7e: 04:ab:ef:86:7f:5f:75:1c:99:d0:87:ee:72:21:fe:75:24:61: 20:c8:9d:e1:4f:d9:62:14:d9:c0:f6:fd:92:f0:1b:93:9a:42: af:b4:bd:d1:13:9a:d1:6e:8f:28:9e:34:4c:28:29:77:6e:86: 3e:c2:cf:00:f3:d2:ef:22:ac:e2:22:6e:e1:ca:25:3d:4d:50: 47:12:22:c0:54:61:79:8d:f9:6b:a8:f5:b1:0f:d9:01:04:51: 32:da:b4:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjgCFj9WxGOup4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGI5Y2YzNGQtYWIwMy00YjhlLThkYTgtNDhhNTY0ZDNlOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9dOOX+zFm5Wfb2DM7VkOUDvzLjVivxEXuEm M+6HEH52plfs16Ke2/b39xeBN5PWkVpgtsYC9ySikKxoqllivlx2Ag45KnACxoQM Rzfcr4ggJTaonwhlokitk4+mnHXrzleIEi1saghGW7n2jiLzwtj1i0YuFBRtEOSl 3sdaa3b/3Ac9Bay7fBJQs1G0liMlOemzJ8gfg42f9FdvT2ak8YTUyoIgKyjTQOhQ daJctYveMhYB1k3IWV2hQ7OvpbcLyKdNCz1N8kT1wmXQn8Pv6Gf+yvbPmTI5g7Ko k6KASTRdXIVCCOg6ZF0xwOSS28b1+ti5kE3+6UFN1FkpICRoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImbRKW/Mrh1KC29rzSD0lqVowhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzNmZGM4YTUtNGM5My0z MDM3LTlhN2EtOTg3NGU0ZDZjNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUU4j/2vEsh4S8MKWe0wVUbKvpWsWwRmvmdTWdOj1uw/1kElxW84Xqr I4A5Yds+BHVazYdYUqxK/42XcAcZKvUz+Hx278enJG9qoxSxmek6o5WdUbkLslqC b+qoHDYLMVswkqNrxAUWCKdGDVZ45C2DXAA5M7CQf2ivlFZg9dYq96EslJWjtm/M qi2oSpFrE6ziENFLTGmbbUctfUU7v1mifgSr74Z/X3UcmdCH7nIh/nUkYSDIneFP 2WIU2cD2/ZLwG5OaQq+0vdETmtFujyieNEwoKXduhj7CzwDz0u8irOIibuHKJT1N UEcSIsBUYXmN+Wuo9bEP2QEEUTLatFY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:26 2025 by rpki-client