$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa File: 856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa (raw, json) Hash identifier: F6GpNcYHD2i+gePQiG0Av817HzhbKGVz1gkLff2Vu0g= Subject key identifier: 41:05:E7:46:CC:04:A5:42:19:85:E8:05:54:DE:89:25:87:66:BE:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B4081DFFA5C3CA1EF4EE78680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19905 IP address blocks: 173.18.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:df:fa:5c:3c:a1:ef:4e:e7:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=1dad7fe7-1cf9-404d-ba79-0ff48f450667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:32:e1:fd:ef:fc:56:cf:00:d1:64:ed:8a: 43:7f:1e:06:ae:35:d4:bf:f3:64:39:3e:c8:19:e7: 19:9d:15:35:af:be:57:54:05:22:cf:e5:46:13:e6: 6a:2c:92:67:e8:76:01:c2:a8:dc:95:0d:7a:88:a5: d1:bf:e0:61:d9:13:53:31:e0:e8:27:b9:6e:ef:5f: 94:88:6b:9e:d5:18:23:02:79:87:01:40:ea:b4:ce: 86:63:fa:82:92:85:c2:53:6c:e8:89:57:14:58:76: c5:08:4b:2a:16:cd:89:98:bd:46:85:90:60:32:49: 2d:18:17:9a:4c:12:e6:af:d2:d1:4b:7a:74:7c:b4: 39:0b:99:bf:54:d6:80:6b:2c:c8:71:a0:2b:08:ba: 9f:35:fc:f4:b8:73:e1:d7:93:76:3d:79:ec:38:78: 73:2c:53:6a:9b:9f:39:ae:14:4b:1b:49:22:ca:32: 18:94:80:31:72:74:eb:57:d9:80:b5:f6:a6:92:22: 31:55:3d:dc:95:df:db:b3:c5:11:61:1e:3e:bf:41: 8f:71:32:4b:ab:ad:5e:1c:40:bd:7e:d6:bf:88:5a: d8:51:0c:72:80:03:78:83:45:c3:e1:11:48:4d:a7: 1e:b7:e0:0f:0e:25:8a:67:e1:ef:a2:df:e0:2e:91: a4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:05:E7:46:CC:04:A5:42:19:85:E8:05:54:DE:89:25:87:66:BE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b5:12:cb:fe:5d:3a:e5:48:50:66:49:e8:00:4b:93:ce:c5: cd:1b:5a:80:33:64:cf:48:a3:fe:13:a2:a0:99:68:2f:6d:33: 1c:a6:85:ea:18:31:09:fa:b1:b3:4b:6c:b1:bc:32:20:61:6b: 0a:1b:b4:f3:fe:03:83:50:82:c3:1d:8a:05:5e:59:51:c6:b8: 40:39:f4:54:26:90:6a:e5:c6:5d:c0:09:fb:de:3d:39:a7:99: cf:04:6c:f4:db:ec:54:e2:60:66:b6:a5:e2:b1:9b:13:8b:ba: 06:94:8e:2d:33:05:c8:64:2a:3f:7d:7f:9f:25:a5:4d:15:c0: be:f3:74:df:6e:e3:12:2f:6e:3d:69:b8:c4:24:56:86:b6:ed: 71:7f:c5:4d:4e:96:55:29:e5:7c:f5:bd:e7:45:a5:a0:ea:cc: 1d:50:c8:37:1c:32:6a:90:29:f6:f8:1c:f6:b6:53:c0:af:7e: d2:32:d8:92:bf:78:80:97:77:5b:5f:6f:69:89:0d:30:37:75: 5f:7c:2e:17:b9:e1:9a:94:66:a9:7e:61:8e:21:b4:e5:90:ac: 57:0a:f9:bb:69:7d:87:85:41:90:9c:2f:00:6b:3d:34:0c:ae: 47:63:cc:d3:dd:a7:55:d7:aa:2e:cc:ea:64:47:a5:ca:2b:5c: 07:f6:ab:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgd/6XDyh707nhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MWRhZDdmZTctMWNmOS00MDRkLWJhNzktMGZmNDhmNDUwNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Iy4f3v/FbPANFk7YpDfx4GrjXUv/NkOT7I GecZnRU1r75XVAUiz+VGE+ZqLJJn6HYBwqjclQ16iKXRv+Bh2RNTMeDoJ7lu71+U iGue1RgjAnmHAUDqtM6GY/qCkoXCU2zoiVcUWHbFCEsqFs2JmL1GhZBgMkktGBea TBLmr9LRS3p0fLQ5C5m/VNaAayzIcaArCLqfNfz0uHPh15N2PXnsOHhzLFNqm585 rhRLG0kiyjIYlIAxcnTrV9mAtfamkiIxVT3cld/bs8URYR4+v0GPcTJLq61eHEC9 fta/iFrYUQxygAN4g0XD4RFITacet+APDiWKZ+Hvot/gLpGkawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEF50bMBKVCGYXoBVTeiSWHZr51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODU2YTE0N2ItMTJkNi0z YjljLWExOWEtZDAzMmUzYzFjODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm1Esv+XTrlSFBmSegAS5POxc0bWoAzZM9Io/4ToqCZaC9tMxymheoY MQn6sbNLbLG8MiBhawobtPP+A4NQgsMdigVeWVHGuEA59FQmkGrlxl3ACfvePTmn mc8EbPTb7FTiYGa2peKxmxOLugaUji0zBchkKj99f58lpU0VwL7zdN9u4xIvbj1p uMQkVoa27XF/xU1OllUp5Xz1vedFpaDqzB1QyDccMmqQKfb4HPa2U8CvftIy2JK/ eICXd1tfb2mJDTA3dV98Lhe54ZqUZql+YY4htOWQrFcK+btpfYeFQZCcLwBrPTQM rkdjzNPdp1XXqi7M6mRHpcorXAf2qwU= -----END CERTIFICATE-----Generated at Sat Oct 11 02:46:01 2025 by rpki-client