$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82b311c5-3c4d-31f6-89ee-0ff27154e35a.roa File: 82b311c5-3c4d-31f6-89ee-0ff27154e35a.roa (raw, json) Hash identifier: V4erqsJcFJ9yuKmYgKLEaz5taSBnBtEovmkSUjHmbVw= Subject key identifier: 02:F1:E8:15:95:9A:84:FA:75:0E:41:E4:90:ED:A5:14:EE:E3:5A:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201D783A7C47D2858885F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82b311c5-3c4d-31f6-89ee-0ff27154e35a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.29.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d7:83:a7:c4:7d:28:58:88:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f557f7f6-87af-464e-8cdb-7e357493871f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:24:9c:6c:2d:35:03:9a:af:d7:7f:7b:38: 4d:d1:83:92:d7:49:60:75:ab:f9:36:4b:ce:9a:4a: 2d:f8:cc:b7:76:bb:94:51:50:35:1f:39:d5:cf:e6: 81:e1:ce:99:42:87:a6:2b:01:a9:5a:c9:98:f0:b1: e0:93:ca:30:0a:87:69:73:b1:6a:2e:ee:16:55:26: c3:47:ca:2a:b0:e4:95:67:88:14:86:a7:2c:ed:f6: f1:3f:ef:09:41:a1:4c:ad:68:a0:59:4e:a5:86:5e: c8:16:9a:8b:9d:1a:b2:96:d7:a0:a6:6c:d5:02:3f: 90:69:be:a9:4a:a7:ef:3a:08:d6:fb:24:f0:0d:27: 36:c1:9e:ae:15:4a:9f:3a:f6:85:92:a1:89:fd:3f: 18:65:75:bc:16:ec:8c:6f:b7:26:77:ce:04:a3:f5: d4:9e:f4:69:00:f5:b3:ea:ac:66:91:87:a3:60:1c: 02:63:bf:aa:d9:2f:00:ae:75:57:68:0e:66:24:07: b6:da:df:4f:19:2e:4a:d7:6f:38:40:bb:ea:47:4d: 96:68:73:b0:1b:ea:94:6a:f8:fb:b8:97:24:af:96: 9f:c6:ec:7a:ce:1b:1f:83:6c:51:86:67:4c:00:1c: 37:83:23:ac:88:e4:b8:6b:38:38:66:a8:d0:79:b9: f3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F1:E8:15:95:9A:84:FA:75:0E:41:E4:90:ED:A5:14:EE:E3:5A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82b311c5-3c4d-31f6-89ee-0ff27154e35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:63:25:75:47:e5:77:11:8e:5e:f1:e6:bc:d5:f1:ea:f3:5c: b8:97:3f:c4:16:33:5f:b5:ff:54:bd:d4:b3:1b:4f:ff:3e:99: d8:72:3d:8f:ad:b6:4b:1b:ff:0c:12:37:88:11:06:8d:7c:34: ff:d6:87:d9:21:5c:17:99:90:6b:37:e5:6e:b7:46:21:d6:16: 7f:0c:03:f3:23:a9:60:98:e6:b0:97:8f:58:6b:09:09:d4:db: 35:b3:a3:35:91:fd:ae:b4:10:28:f3:a5:01:c7:81:09:b2:16: 2f:36:84:4c:c4:28:d1:16:d3:0c:b6:2e:50:62:87:71:f2:6d: db:fd:ae:1b:3c:96:c2:ce:2b:5a:5d:1b:9f:85:7b:20:08:14: 0c:6a:32:7f:13:12:0d:57:20:51:2b:c9:fa:01:56:c9:c7:00: 97:83:72:07:b0:27:87:ce:da:ea:06:50:b0:74:70:34:fd:ad: 7c:60:84:7c:fa:65:69:de:e7:b6:c1:c0:f8:a6:79:d7:e7:a9: c2:04:69:68:76:43:6e:82:f3:6c:72:4e:73:0c:24:62:d8:14: 08:36:04:b0:f9:88:83:af:13:28:8c:39:71:a1:ea:09:f3:73: 56:e2:b7:9e:c9:a3:ec:31:1d:ff:fc:f6:0d:55:9f:f1:59:80: 29:08:99:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdeDp8R9KFiIX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjU1N2Y3ZjYtODdhZi00NjRlLThjZGItN2UzNTc0OTM4NzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlEknGwtNQOar9d/ezhN0YOS10lgdav5NkvO mkot+My3druUUVA1HznVz+aB4c6ZQoemKwGpWsmY8LHgk8owCodpc7FqLu4WVSbD R8oqsOSVZ4gUhqcs7fbxP+8JQaFMrWigWU6lhl7IFpqLnRqyltegpmzVAj+Qab6p SqfvOgjW+yTwDSc2wZ6uFUqfOvaFkqGJ/T8YZXW8FuyMb7cmd84Eo/XUnvRpAPWz 6qxmkYejYBwCY7+q2S8ArnVXaA5mJAe22t9PGS5K1284QLvqR02WaHOwG+qUavj7 uJckr5afxux6zhsfg2xRhmdMABw3gyOsiOS4azg4ZqjQebnznwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALx6BWVmoT6dQ5B5JDtpRTu41o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODJiMzExYzUtM2M0ZC0z MWY2LTg5ZWUtMGZmMjcxNTRlMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtjJXVH5XcRjl7x5rzV8erzXLiXP8QWM1+1/1S91LMbT/8+mdhyPY+t tksb/wwSN4gRBo18NP/Wh9khXBeZkGs35W63RiHWFn8MA/MjqWCY5rCXj1hrCQnU 2zWzozWR/a60ECjzpQHHgQmyFi82hEzEKNEW0wy2LlBih3Hybdv9rhs8lsLOK1pd G5+FeyAIFAxqMn8TEg1XIFEryfoBVsnHAJeDcgewJ4fO2uoGULB0cDT9rXxghHz6 ZWne57bBwPimedfnqcIEaWh2Q26C82xyTnMMJGLYFAg2BLD5iIOvEyiMOXGh6gnz c1bit57Jo+wxHf/89g1Vn/FZgCkImTc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:36 2025 by rpki-client