$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7aa00dfc-0d8a-3e97-9a2f-4977c342c536.roa File: 7aa00dfc-0d8a-3e97-9a2f-4977c342c536.roa (raw, json) Hash identifier: BDp1AhgJFrXqq9+wTk7LhZQgxJMyQjGbEoAFQ2M8hOc= Subject key identifier: D0:64:59:45:4B:72:47:E4:FC:E7:F9:83:47:29:06:F6:A6:13:7A:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCBB70F2E987C371D8D580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7aa00dfc-0d8a-3e97-9a2f-4977c342c536.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.31.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:bb:70:f2:e9:87:c3:71:d8:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f1d8025a-6389-48f9-b433-4aaedb2adc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:b7:00:f7:b9:ab:7e:67:e8:e0:5d:60:a8: ed:83:14:c3:2d:b8:5c:82:73:88:8f:d3:89:6b:4d: 17:fb:38:d5:bb:7b:b2:44:ea:ad:51:83:39:d4:91: 65:67:b4:42:65:19:2a:25:30:6d:bb:88:fb:2c:2d: 41:13:2f:1c:b7:47:d3:37:24:2d:d0:13:93:98:dd: b8:c8:94:1f:86:b8:cc:4c:da:56:80:18:a5:26:b3: e8:9c:43:b2:b6:30:48:10:66:ae:88:75:1d:ad:96: de:98:42:8b:88:1f:03:f3:96:dc:0a:bd:9a:9c:5d: b1:c1:43:d0:27:92:d4:2e:fc:b1:77:21:92:4e:26: ae:dd:39:51:7f:56:e4:b6:9f:87:cc:a2:1f:34:12: 0b:d7:7a:6e:99:6f:ea:98:65:ff:f9:6a:a5:3d:d5: 78:ea:3a:1f:49:b7:ff:20:2a:9f:80:d3:fa:b3:fd: e9:a0:3a:5e:d3:ec:f1:e0:34:56:4c:b5:6e:0d:a1: e4:fd:9c:e4:59:47:cd:f6:4a:20:42:21:7c:ec:c0: 93:d5:c1:51:d2:3c:31:21:8b:ea:57:47:a4:2e:99: ac:50:ee:6f:04:97:6b:f4:b7:f6:34:a2:2f:01:6c: 1c:a6:9f:b5:4c:3e:68:58:e0:43:b3:17:37:06:4a: e7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:64:59:45:4B:72:47:E4:FC:E7:F9:83:47:29:06:F6:A6:13:7A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7aa00dfc-0d8a-3e97-9a2f-4977c342c536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:af:62:81:fd:e0:ba:5c:47:8d:a0:ba:16:1d:84:ce:0a:8c: 37:13:f0:6d:cd:b4:62:fd:ba:68:d6:06:bf:28:f1:55:ea:90: fb:ee:20:d6:69:61:a7:ff:57:4c:ff:0d:7c:e6:3d:c3:ed:9c: b7:76:28:b0:2e:11:c8:0e:2c:3a:58:49:83:04:05:a4:c2:de: 22:3a:de:72:84:fd:a8:a9:57:35:1c:4d:86:88:3f:64:70:22: 16:e7:cc:4e:67:56:e4:cf:96:42:a4:90:25:be:84:b9:0b:1f: 7a:28:63:1e:48:da:e9:bc:c3:23:91:94:83:0f:a1:a3:ec:e3: 8e:b6:d6:7b:f4:a5:58:62:a2:d4:eb:d8:18:a1:ee:52:a5:82: 7a:d8:a3:4f:de:11:2a:6f:ab:cc:40:64:2a:72:20:c4:3d:01: 7e:97:89:f4:46:93:86:1e:e3:68:0d:42:47:91:88:52:7a:c4: 9b:c5:77:4e:7b:31:92:6d:f7:2b:0c:77:ce:b0:31:06:64:9d: 9f:a9:59:a5:b4:2e:a5:ac:90:9d:15:a4:da:a4:b7:47:76:7f: d7:21:d8:6d:d5:cd:05:78:c1:8a:ab:41:b9:b2:0c:cc:53:12: 1a:b1:98:36:54:06:f1:8d:ce:aa:f7:2b:0a:33:d0:43:ea:be: e6:37:41:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLtw8umHw3HY1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjFkODAyNWEtNjM4OS00OGY5LWI0MzMtNGFhZWRiMmFkYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDe3APe5q35n6OBdYKjtgxTDLbhcgnOIj9OJ a00X+zjVu3uyROqtUYM51JFlZ7RCZRkqJTBtu4j7LC1BEy8ct0fTNyQt0BOTmN24 yJQfhrjMTNpWgBilJrPonEOytjBIEGauiHUdrZbemEKLiB8D85bcCr2anF2xwUPQ J5LULvyxdyGSTiau3TlRf1bktp+HzKIfNBIL13pumW/qmGX/+WqlPdV46jofSbf/ ICqfgNP6s/3poDpe0+zx4DRWTLVuDaHk/ZzkWUfN9kogQiF87MCT1cFR0jwxIYvq V0ekLpmsUO5vBJdr9Lf2NKIvAWwcpp+1TD5oWOBDsxc3BkrnYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBkWUVLckfk/Of5g0cpBvamE3p6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2FhMDBkZmMtMGQ4YS0z ZTk3LTlhMmYtNDk3N2MzNDJjNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGevYoH94LpcR42guhYdhM4KjDcT8G3NtGL9umjWBr8o8VXqkPvuINZp Yaf/V0z/DXzmPcPtnLd2KLAuEcgOLDpYSYMEBaTC3iI63nKE/aipVzUcTYaIP2Rw IhbnzE5nVuTPlkKkkCW+hLkLH3ooYx5I2um8wyORlIMPoaPs44621nv0pVhiotTr 2Bih7lKlgnrYo0/eESpvq8xAZCpyIMQ9AX6XifRGk4Ye42gNQkeRiFJ6xJvFd057 MZJt9ysMd86wMQZknZ+pWaW0LqWskJ0VpNqkt0d2f9ch2G3VzQV4wYqrQbmyDMxT EhqxmDZUBvGNzqr3Kwoz0EPqvuY3QUo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:47 2025 by rpki-client