$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa File: 84e3b569-c77e-369f-9d81-aa06c2742984.roa (raw, json) Hash identifier: N/ptU0kwpQvmijsjjtovx+Nv5VS/GqtwDcI1gI/1HHE= Subject key identifier: B7:6D:03:12:E1:E9:6C:7A:1B:65:36:10:88:C7:0D:D4:60:E8:2D:D1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62021AE7725E50A69265AF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.23.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1a:e7:72:5e:50:a6:92:65:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=bc9f26dd-3d74-429c-9e2c-3e3032169f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:59:30:02:8c:ca:de:d1:6b:27:bd:2b:6a:9c: fb:14:b8:91:71:e8:75:0f:c5:72:81:1e:03:c0:fc: 8e:f2:2d:a5:46:9a:ff:60:c7:da:f9:37:75:ae:f0: 2d:78:e2:33:93:15:af:71:d7:f9:99:d0:18:09:83: eb:74:79:46:19:13:f5:73:ba:1c:3d:0a:c1:a3:5d: 33:0e:a7:e4:df:d7:ac:ce:ab:20:47:08:27:7f:16: da:01:08:f4:e9:6f:8d:77:52:36:93:9e:b3:16:b6: bd:24:79:2e:54:9a:47:75:4d:0c:69:2e:60:75:14: 62:5a:14:f1:8a:e0:b0:54:6e:18:18:1d:da:44:f5: 4a:25:29:6f:9e:4f:46:36:cd:8d:e4:c4:9a:03:3c: a1:ac:4e:a1:46:bc:9e:ed:4e:79:e8:40:b6:75:94: 64:ac:94:b2:a7:34:f8:c5:12:8c:9e:aa:80:9a:a6: 9f:48:e2:57:9e:02:6e:be:70:57:e0:ec:1d:11:7d: 61:5a:ad:88:d4:8a:d8:b6:59:21:9a:3e:96:c2:4f: 93:10:35:e5:a8:93:78:58:6f:3c:37:58:71:1d:7a: 1d:a9:ae:da:13:fa:19:99:4f:cf:b9:19:30:e5:f2: 32:f4:de:e2:29:88:42:66:a4:7b:d5:03:13:d9:1d: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6D:03:12:E1:E9:6C:7A:1B:65:36:10:88:C7:0D:D4:60:E8:2D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ce:86:94:7d:fe:14:b8:63:da:7b:04:7c:0c:0d:c3:68:64: 6e:dd:82:dc:8e:3d:97:5f:fb:a6:2e:01:ed:b2:1a:60:bf:88: db:e4:48:23:be:67:3b:6c:f1:f4:5a:cd:e4:37:5d:99:e7:78: 70:21:87:54:b4:80:90:2b:00:7c:34:a2:08:6c:57:1a:b5:71: b7:6d:b4:d7:c1:41:cc:43:71:c5:4d:83:46:f3:20:2d:14:80: 6e:78:59:74:29:d7:e3:c4:8f:51:25:5a:dc:e5:36:42:d9:4e: 6b:a5:8a:10:ee:1f:c6:44:83:7f:19:fa:6d:33:be:92:da:ad: af:87:ef:77:24:d7:f6:cf:dd:54:f5:2a:d5:30:9c:7a:1d:60: 94:8f:e0:e6:bf:8b:72:ff:f3:5e:48:37:e3:08:1f:b8:cb:8e: 92:fa:c1:e4:3d:0f:8b:67:96:1a:e7:c1:0f:0f:39:00:8f:2f: 82:5b:58:75:ea:8c:6c:74:96:8e:10:0c:7d:2b:d2:79:17:12: 7b:04:a7:eb:0a:87:9f:81:74:8d:f2:8c:e1:b9:42:77:6c:42: fb:80:ca:e3:33:ee:2e:d4:c3:57:54:ba:29:2e:2b:4e:24:92: 61:61:1e:bf:c0:9c:22:9a:92:0d:5e:f1:73:78:df:6d:8e:65: 39:4f:8a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhrncl5QppJlrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmM5ZjI2ZGQtM2Q3NC00MjljLTllMmMtM2UzMDMyMTY5ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1kwAozK3tFrJ70rapz7FLiRceh1D8VygR4D wPyO8i2lRpr/YMfa+Td1rvAteOIzkxWvcdf5mdAYCYPrdHlGGRP1c7ocPQrBo10z Dqfk39eszqsgRwgnfxbaAQj06W+Nd1I2k56zFra9JHkuVJpHdU0MaS5gdRRiWhTx iuCwVG4YGB3aRPVKJSlvnk9GNs2N5MSaAzyhrE6hRrye7U556EC2dZRkrJSypzT4 xRKMnqqAmqafSOJXngJuvnBX4OwdEX1hWq2I1IrYtlkhmj6Wwk+TEDXlqJN4WG88 N1hxHXodqa7aE/oZmU/PuRkw5fIy9N7iKYhCZqR71QMT2R3V+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdtAxLh6Wx6G2U2EIjHDdRg6C3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRlM2I1NjktYzc3ZS0z NjlmLTlkODEtYWEwNmMyNzQyOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTOhpR9/hS4Y9p7BHwMDcNoZG7dgtyOPZdf+6YuAe2yGmC/iNvkSCO+ Zzts8fRazeQ3XZnneHAhh1S0gJArAHw0oghsVxq1cbdttNfBQcxDccVNg0bzIC0U gG54WXQp1+PEj1ElWtzlNkLZTmulihDuH8ZEg38Z+m0zvpLara+H73ck1/bP3VT1 KtUwnHodYJSP4Oa/i3L/815IN+MIH7jLjpL6weQ9D4tnlhrnwQ8POQCPL4JbWHXq jGx0lo4QDH0r0nkXEnsEp+sKh5+BdI3yjOG5QndsQvuAyuMz7i7Uw1dUuikuK04k kmFhHr/AnCKakg1e8XN4322OZTlPisg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:22 2025 by rpki-client