$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa File: 85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa (raw, json) Hash identifier: gOiMFP6pUUkghe6RfZ2OOGtAT9SxH3AFWvS8bX6dmko= Subject key identifier: 64:BF:D6:A8:5A:80:49:86:21:83:92:01:DE:8D:75:C0:DB:D0:66:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C73FA83D270BDE0C8D800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:73:fa:83:d2:70:bd:e0:c8:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=819d8ec5-c7f9-4ad6-972a-45717cb879ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:07:2e:1a:e7:02:f0:de:7c:87:72:48:80: 98:4f:82:3a:59:36:54:4f:dd:6c:5f:8a:53:b8:98: 01:a5:6c:22:97:49:66:9c:c4:8d:7d:52:0e:92:b6: c4:65:81:ea:cc:92:fa:44:f4:d5:fd:0c:2a:bf:78: 82:dc:e1:68:f0:98:05:53:6f:09:5d:38:83:c5:cf: fb:ee:d8:84:f6:6e:08:2c:24:81:ed:4c:fb:cf:f5: 4c:92:36:8b:9f:fa:78:8b:f4:9a:44:b1:41:9e:0c: a1:d1:53:21:ae:81:8c:4f:1c:2d:cf:5f:af:5d:bf: 5f:b4:7d:d7:ae:c7:cc:c4:6f:ec:4b:c0:69:ae:1d: c3:87:0d:2d:10:9c:d6:f7:20:f0:16:7a:85:d9:70: 94:d5:de:5d:bc:a7:24:43:73:67:0d:dd:c1:24:10: 46:52:cd:f4:16:f6:b0:f6:8c:42:38:d2:53:80:8c: f4:78:9b:58:61:fe:62:db:cd:b4:e3:3a:8d:5c:7f: 7f:06:78:8e:9e:8a:64:90:b9:2d:fc:1a:0f:31:0a: e3:68:7b:4c:08:96:a9:91:b5:8d:e7:db:93:f1:e9: 2c:e1:51:32:19:98:2b:dc:e6:84:f7:05:70:41:86: 23:56:2a:b7:30:47:f6:ae:a3:62:c4:6b:cf:e6:15: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:D6:A8:5A:80:49:86:21:83:92:01:DE:8D:75:C0:DB:D0:66:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e3:11:99:99:45:c3:4d:97:34:13:00:77:c5:4d:dc:9f:71: f9:81:78:70:5a:5f:43:0b:ce:9b:4e:dc:a3:bc:dc:83:76:92: 83:9d:99:ad:34:90:8a:84:7d:63:a1:b1:9c:ee:71:90:aa:cb: b6:e0:4a:d7:24:c7:46:c5:f4:46:54:b3:a1:77:07:91:b6:5e: 7c:8c:12:70:ee:2c:84:74:0c:9e:17:37:da:87:26:f7:1b:9e: b1:be:b7:e7:1e:7c:33:6b:3a:06:69:60:58:16:2e:e8:a8:f5: f2:5a:3c:6e:0e:01:70:0b:ad:e8:bf:0d:98:a4:57:91:a4:0f: 54:0c:17:53:a9:59:bf:32:8b:be:78:6a:0e:a5:3e:1e:51:54: e2:bd:a1:e1:14:a0:9d:56:c8:3e:5e:48:73:bb:ca:f4:18:84: 8e:ca:41:bb:15:46:21:f0:63:e3:9d:3b:03:57:e0:d5:a2:df: 32:0a:2f:35:94:cc:6d:59:70:8d:f5:61:f5:29:2d:b0:6a:37: bb:9d:82:fb:75:97:a7:0d:d6:a0:45:c2:35:b8:18:78:79:85: aa:88:92:85:de:a5:f8:f3:f1:58:19:a6:94:b9:8f:88:fd:26: 1f:50:01:c8:3d:91:ef:f9:08:71:c2:30:70:79:f8:1a:44:49: 79:9f:66:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHP6g9JwveDI2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ODE5ZDhlYzUtYzdmOS00YWQ2LTk3MmEtNDU3MTdjYjg3OWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGgHLhrnAvDefIdySICYT4I6WTZUT91sX4pT uJgBpWwil0lmnMSNfVIOkrbEZYHqzJL6RPTV/Qwqv3iC3OFo8JgFU28JXTiDxc/7 7tiE9m4ILCSB7Uz7z/VMkjaLn/p4i/SaRLFBngyh0VMhroGMTxwtz1+vXb9ftH3X rsfMxG/sS8Bprh3Dhw0tEJzW9yDwFnqF2XCU1d5dvKckQ3NnDd3BJBBGUs30Fvaw 9oxCONJTgIz0eJtYYf5i28204zqNXH9/BniOnopkkLkt/BoPMQrjaHtMCJapkbWN 59uT8eks4VEyGZgr3OaE9wVwQYYjViq3MEf2rqNixGvP5hW/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS/1qhagEmGIYOSAd6NdcDb0GZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVmYjI5ZGMtMTdlMi0z OGY3LTlhYTgtNmFkZmExMDk0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbjEZmZRcNNlzQTAHfFTdyfcfmBeHBaX0MLzptO3KO83IN2koOdma00 kIqEfWOhsZzucZCqy7bgStckx0bF9EZUs6F3B5G2XnyMEnDuLIR0DJ4XN9qHJvcb nrG+t+cefDNrOgZpYFgWLuio9fJaPG4OAXALrei/DZikV5GkD1QMF1OpWb8yi754 ag6lPh5RVOK9oeEUoJ1WyD5eSHO7yvQYhI7KQbsVRiHwY+OdOwNX4NWi3zIKLzWU zG1ZcI31YfUpLbBqN7udgvt1l6cN1qBFwjW4GHh5haqIkoXepfjz8VgZppS5j4j9 Jh9QAcg9ke/5CHHCMHB5+BpESXmfZsU= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:27 2025 by rpki-client