$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa File: 7ddf2659-7157-340a-a60b-bc3915120be3.roa (raw, json) Hash identifier: t4be3yGYvU4uJTAvfs+94++1dazXhUliQ7zSsLGAZkw= Subject key identifier: 35:58:01:6A:D1:B1:E3:73:E6:74:BB:59:40:2B:7C:E9:CC:CB:35:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE5D74C471BAA8C6F2E660 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.29.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:5d:74:c4:71:ba:a8:c6:f2:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=18749b6a-8533-4dc6-af5b-3e39e18de1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d8:fa:65:e0:5b:6d:01:19:8f:80:6f:20:48: 6e:58:92:70:4d:89:b6:ef:bd:0e:37:64:e5:98:77: 92:6a:ed:f7:ad:9d:87:cf:5d:88:ff:9c:e9:14:40: c9:46:c2:7c:30:1e:59:db:55:37:df:0e:70:d8:26: d3:96:73:0c:b8:0e:fd:6b:9b:d1:a0:11:89:d1:b9: 41:7b:bb:4c:c3:48:56:cb:4f:7d:02:50:7f:5e:7f: be:e7:7e:8c:59:9a:6d:d6:e2:77:54:5c:2f:6b:35: 69:08:4e:fe:a3:5a:c9:6a:87:fd:80:62:65:05:91: 04:cc:cb:98:cb:a2:a6:82:86:df:3c:3a:41:4c:c6: b1:d4:75:ae:cf:54:d8:68:69:62:a2:ef:e8:cd:d5: 06:e4:4e:2a:98:d7:4b:16:b0:33:60:12:f2:38:36: de:e0:c3:c0:eb:6f:79:12:69:a1:f5:89:21:16:48: 09:38:39:a6:dd:1c:3c:57:ee:26:41:56:90:c0:60: 51:a3:9b:b4:22:4e:f4:1e:42:57:46:74:8c:2d:89: b8:8a:3f:55:96:37:b4:bc:de:ea:3a:f6:73:ff:0c: 8e:b0:ee:97:bb:0d:2d:eb:c4:97:90:68:c3:9f:65: b8:79:ca:b6:41:e6:b2:c2:5d:b8:00:20:e0:8d:ff: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:58:01:6A:D1:B1:E3:73:E6:74:BB:59:40:2B:7C:E9:CC:CB:35:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ac:d9:ff:8d:5c:90:99:02:74:b4:c7:44:82:92:1f:ee:05: 63:ca:e0:ea:e4:49:c1:c3:a4:68:5b:15:fd:f6:64:d3:ae:d7: e1:f8:de:d3:53:c2:21:a5:f1:7d:5d:0b:79:dc:08:33:ff:b8: 68:95:ec:0c:4d:61:61:bc:f0:67:a1:25:a2:d1:9c:a1:3e:c3: 91:c7:3a:69:0d:57:0b:e7:40:4a:54:bc:51:a8:9c:f4:2f:f2: be:f1:1e:5e:20:65:03:82:68:a4:99:46:5f:9c:32:23:6b:34: 3b:44:d8:1a:e4:fc:b0:62:20:64:a7:9b:90:3b:e2:a7:d6:29: 21:26:4b:37:5e:ef:3c:15:18:3b:34:fd:a3:fd:85:f5:08:f5: 88:1e:67:8a:d0:d9:11:c8:3b:d8:65:f5:00:8a:2d:e3:99:a1: aa:f0:b0:83:7b:15:37:5a:ee:e1:e7:92:4f:69:51:79:48:7e: 3a:dd:12:69:2f:72:22:a6:c0:ea:d3:11:b0:b3:64:9d:b8:2e: 20:83:6b:ea:b8:dd:5f:55:47:0f:23:ef:00:fd:04:e9:6a:da: 59:bd:bf:02:ca:17:fc:4a:c9:cb:8b:3a:4b:87:35:54:a1:d4: 43:f8:e6:52:ae:a0:aa:f8:53:8f:c5:7a:d7:48:2c:fd:a6:82: 3a:f4:2a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzl10xHG6qMby5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTg3NDliNmEtODUzMy00ZGM2LWFmNWItM2UzOWUxOGRlMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNj6ZeBbbQEZj4BvIEhuWJJwTYm2770ON2Tl mHeSau33rZ2Hz12I/5zpFEDJRsJ8MB5Z21U33w5w2CbTlnMMuA79a5vRoBGJ0blB e7tMw0hWy099AlB/Xn++536MWZpt1uJ3VFwvazVpCE7+o1rJaof9gGJlBZEEzMuY y6KmgobfPDpBTMax1HWuz1TYaGliou/ozdUG5E4qmNdLFrAzYBLyODbe4MPA6295 Emmh9YkhFkgJODmm3Rw8V+4mQVaQwGBRo5u0Ik70HkJXRnSMLYm4ij9Vlje0vN7q OvZz/wyOsO6Xuw0t68SXkGjDn2W4ecq2Qeaywl24ACDgjf97YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVYAWrRseNz5nS7WUArfOnMyzUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2RkZjI2NTktNzE1Ny0z NDBhLWE2MGItYmMzOTE1MTIwYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABas2f+NXJCZAnS0x0SCkh/uBWPK4OrkScHDpGhbFf32ZNOu1+H43tNT wiGl8X1dC3ncCDP/uGiV7AxNYWG88GehJaLRnKE+w5HHOmkNVwvnQEpUvFGonPQv 8r7xHl4gZQOCaKSZRl+cMiNrNDtE2Brk/LBiIGSnm5A74qfWKSEmSzde7zwVGDs0 /aP9hfUI9YgeZ4rQ2RHIO9hl9QCKLeOZoarwsIN7FTda7uHnkk9pUXlIfjrdEmkv ciKmwOrTEbCzZJ24LiCDa+q43V9VRw8j7wD9BOlq2lm9vwLKF/xKycuLOkuHNVSh 1EP45lKuoKr4U4/FetdILP2mgjr0Kmc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:27 2025 by rpki-client