$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85b75bb4-7d90-3254-ab08-1076fd5a6969.roa File: 85b75bb4-7d90-3254-ab08-1076fd5a6969.roa (raw, json) Hash identifier: Pb8ROjTrO5kmZ1FGyjoR79Xatdp8LqFEnBi0v3DtYkM= Subject key identifier: BC:5C:0D:70:94:8A:03:14:74:92:E7:0F:E5:24:BF:F8:9D:DC:B6:80 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE57385063695F5674FB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85b75bb4-7d90-3254-ab08-1076fd5a6969.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.25.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:57:38:50:63:69:5f:56:74:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=50b99b31-ab1e-40c0-adcc-4f6018ae896b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:d6:3a:81:56:39:ee:0a:e1:26:91:81:7f: 27:05:41:b9:04:44:1e:b4:5f:23:9e:29:cd:b7:b4: ae:83:d0:c1:ef:7d:56:58:91:f0:58:72:36:c3:fe: df:4a:18:b5:d4:5f:d9:5d:df:d3:82:94:1b:20:b9: dd:99:d3:ad:c8:59:e6:f0:5f:6a:2d:9d:3b:9b:bb: 53:b9:b5:ce:f7:16:7c:66:dd:e2:d7:b8:9a:7b:0f: 20:bb:87:05:64:2a:14:e9:ac:21:17:82:cf:6a:64: 34:82:3f:61:2e:9b:8a:8c:26:29:e5:71:86:4c:bc: 64:5f:2c:e6:39:a5:d7:5c:8c:35:ec:b0:61:a7:ae: 39:d5:0d:2c:1f:a4:10:7e:b1:37:45:b6:88:cd:e5: 20:0b:cb:d2:1b:0c:f7:b7:a8:fd:bd:ea:2e:d3:fa: ed:cb:95:1a:ac:4d:61:d1:4b:88:5e:6f:f8:c6:10: ca:be:20:02:62:2a:9e:ba:67:e2:97:09:bf:44:be: 6b:4f:db:3f:c8:4b:cd:b6:6f:68:78:74:be:e8:99: 16:57:4e:ed:53:06:0b:e9:60:94:69:2a:54:c1:04: 39:a2:36:3f:09:04:8e:41:9c:21:3d:06:01:a1:af: 19:69:f7:b3:97:6d:1a:88:82:07:a2:83:40:5b:81: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5C:0D:70:94:8A:03:14:74:92:E7:0F:E5:24:BF:F8:9D:DC:B6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85b75bb4-7d90-3254-ab08-1076fd5a6969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ff:e3:24:51:be:b0:a7:10:b1:cc:a9:f0:d4:65:64:87:98: 0d:84:9c:26:5d:2d:27:63:6b:7c:3f:58:66:14:c4:5b:b6:d7: ba:19:ea:d9:46:b5:6f:94:de:2d:18:d8:8e:02:89:45:05:c7: 22:61:2a:1e:6b:e1:32:ae:55:6c:e1:53:c9:de:50:51:81:6d: 17:a8:95:14:60:18:4a:dc:fb:37:3e:20:68:1b:4f:cd:e1:ad: 30:a2:ad:ab:41:37:de:21:88:e5:60:bc:ea:26:1e:5d:ef:58: 27:44:cb:d4:5f:6c:42:2d:38:fe:fa:e2:af:b0:f9:ac:3d:4c: e7:d4:ea:97:97:f4:dc:38:12:23:c2:57:95:bf:ed:62:10:70: e1:01:8f:e1:40:84:e5:09:a3:a8:cd:b9:d5:77:cc:30:52:36: 96:87:46:b6:5c:e0:4a:06:9a:9d:18:ac:76:04:83:cd:0f:dd: 38:4e:30:7e:e9:87:0e:f2:62:37:50:02:8d:49:3e:8d:25:2b: ca:aa:50:5f:09:6c:06:93:21:b1:63:63:2c:b5:83:75:57:be: 26:be:a4:1e:c6:fc:84:ec:7d:e0:f4:60:34:76:21:62:80:c9: 3a:a0:ee:4e:c8:bb:6c:f9:d9:d5:e4:ee:63:d2:3a:7e:e4:f0: df:98:35:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzlc4UGNpX1Z0+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTBiOTliMzEtYWIxZS00MGMwLWFkY2MtNGY2MDE4YWU4OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgHWOoFWOe4K4SaRgX8nBUG5BEQetF8jninN t7Sug9DB731WWJHwWHI2w/7fShi11F/ZXd/TgpQbILndmdOtyFnm8F9qLZ07m7tT ubXO9xZ8Zt3i17iaew8gu4cFZCoU6awhF4LPamQ0gj9hLpuKjCYp5XGGTLxkXyzm OaXXXIw17LBhp6451Q0sH6QQfrE3RbaIzeUgC8vSGwz3t6j9veou0/rty5UarE1h 0UuIXm/4xhDKviACYiqeumfilwm/RL5rT9s/yEvNtm9oeHS+6JkWV07tUwYL6WCU aSpUwQQ5ojY/CQSOQZwhPQYBoa8Zafezl20aiIIHooNAW4EV9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxcDXCUigMUdJLnD+Ukv/id3LaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODViNzViYjQtN2Q5MC0z MjU0LWFiMDgtMTA3NmZkNWE2OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP/4yRRvrCnELHMqfDUZWSHmA2EnCZdLSdja3w/WGYUxFu217oZ6tlG tW+U3i0Y2I4CiUUFxyJhKh5r4TKuVWzhU8neUFGBbReolRRgGErc+zc+IGgbT83h rTCiratBN94hiOVgvOomHl3vWCdEy9RfbEItOP764q+w+aw9TOfU6peX9Nw4EiPC V5W/7WIQcOEBj+FAhOUJo6jNudV3zDBSNpaHRrZc4EoGmp0YrHYEg80P3ThOMH7p hw7yYjdQAo1JPo0lK8qqUF8JbAaTIbFjYyy1g3VXvia+pB7G/ITsfeD0YDR2IWKA yTqg7k7Iu2z52dXk7mPSOn7k8N+YNVE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:26 2025 by rpki-client