$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87712887-f1c7-309c-8b22-7270d183ad5b.roa File: 87712887-f1c7-309c-8b22-7270d183ad5b.roa (raw, json) Hash identifier: evjM7PQE7ZbGKRnR5EeVOKGznXUN+WYgwpqO4cz5Z/k= Subject key identifier: 84:6E:E5:62:5A:41:75:12:AE:9F:16:E2:55:01:EB:E1:99:CF:F3:52 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D742AC04CEB4F939327B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87712887-f1c7-309c-8b22-7270d183ad5b.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.16.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:42:ac:04:ce:b4:f9:39:32:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=f4cdc9d7-113b-420a-b3d6-c9de9e2b8864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:5d:e4:c4:76:f8:74:e0:68:5e:86:4c:8e: 49:b8:2a:ed:e7:ad:15:f4:37:89:f6:92:d8:e6:cb: f4:e8:d5:58:4d:f8:4c:40:2d:fb:81:52:0b:7b:63: cc:0d:97:66:b0:34:4f:38:92:47:ee:76:13:79:a1: 42:bf:c9:35:f3:10:f4:57:f4:a8:a9:50:7a:a6:90: 8c:ec:b1:01:b1:8b:ec:49:f4:d5:ca:b6:83:0d:a3: 30:58:fd:f8:89:46:30:f6:7d:a1:98:0b:43:65:88: 4a:9e:4e:c1:a0:e9:f9:fe:ba:31:2a:12:bc:31:a0: e5:11:ac:c4:ed:d5:03:f8:df:4d:aa:5d:d7:58:60: 1c:0c:67:36:cb:4d:ea:92:80:c1:f9:40:e4:53:d6: 59:36:57:d0:8d:27:59:23:48:74:ca:7f:e6:61:4b: 2d:01:36:18:0f:00:5e:0c:e5:7f:68:c3:e2:7f:b2: f0:fe:a5:be:17:09:fe:0f:ad:f1:ee:9f:d8:5a:d5: e4:27:71:d2:64:50:e5:f9:ac:56:9e:c3:95:d1:bf: 95:6e:86:74:21:66:08:2c:70:54:47:92:6e:fe:35: 31:49:5c:f1:5d:5b:34:fe:36:22:3a:2a:07:19:01: f0:c8:c9:dd:80:ce:d1:17:b7:0c:67:4a:c8:a1:08: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6E:E5:62:5A:41:75:12:AE:9F:16:E2:55:01:EB:E1:99:CF:F3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87712887-f1c7-309c-8b22-7270d183ad5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1c:71:1f:71:f8:f6:c9:36:5a:dc:83:74:4a:2f:4e:1f:34: 6d:fc:c9:24:19:78:c1:f1:4f:d3:3c:e6:52:6c:38:f6:01:71: 34:64:5b:a4:ec:b9:9d:c9:ed:ff:85:29:d9:18:73:22:0b:36: e3:1a:11:1e:00:0b:bb:1a:dc:8e:00:a1:b4:6e:cf:a7:60:9d: d8:02:11:03:6e:d2:ab:8d:17:b9:b6:fe:4b:ea:87:11:8b:b2: d2:6f:90:b0:5c:01:63:e0:c4:22:d4:79:91:79:fe:28:31:ce: 82:73:79:3f:82:b3:05:20:0a:76:98:42:ad:89:b7:5c:81:5f: 97:e9:0f:c5:dc:d8:9a:b6:e4:c5:a0:75:cc:b2:1a:d8:1a:39: 7d:3f:8c:75:6f:62:24:69:03:bd:e3:1d:97:b9:b5:76:d3:c4: 00:cb:f6:5f:11:ee:99:c8:c9:4f:17:24:f3:eb:53:19:11:f0: b9:49:f2:df:c1:38:37:c0:c2:f4:8a:04:ec:07:34:34:f2:a2: 3d:38:d2:93:da:c1:65:d4:e5:9d:4b:b2:57:ed:4e:ef:4e:e5: 18:01:85:db:f5:83:16:7d:de:7b:98:17:52:2e:0d:cf:9f:ed: 48:ee:eb:4f:11:68:62:af:8e:4b:aa:bc:b7:8a:61:eb:25:58: a8:e4:e7:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10KsBM60+Tkye4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjRjZGM5ZDctMTEzYi00MjBhLWIzZDYtYzlkZTllMmI4ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswpd5MR2+HTgaF6GTI5JuCrt560V9DeJ9pLY 5sv06NVYTfhMQC37gVILe2PMDZdmsDRPOJJH7nYTeaFCv8k18xD0V/SoqVB6ppCM 7LEBsYvsSfTVyraDDaMwWP34iUYw9n2hmAtDZYhKnk7BoOn5/roxKhK8MaDlEazE 7dUD+N9Nql3XWGAcDGc2y03qkoDB+UDkU9ZZNlfQjSdZI0h0yn/mYUstATYYDwBe DOV/aMPif7Lw/qW+Fwn+D63x7p/YWtXkJ3HSZFDl+axWnsOV0b+VboZ0IWYILHBU R5Ju/jUxSVzxXVs0/jYiOioHGQHwyMndgM7RF7cMZ0rIoQgQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRu5WJaQXUSrp8W4lUB6+GZz/NSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODc3MTI4ODctZjFjNy0z MDljLThiMjItNzI3MGQxODNhZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcccR9x+PbJNlrcg3RKL04fNG38ySQZeMHxT9M85lJsOPYBcTRkW6Ts uZ3J7f+FKdkYcyILNuMaER4AC7sa3I4AobRuz6dgndgCEQNu0quNF7m2/kvqhxGL stJvkLBcAWPgxCLUeZF5/igxzoJzeT+CswUgCnaYQq2Jt1yBX5fpD8Xc2Jq25MWg dcyyGtgaOX0/jHVvYiRpA73jHZe5tXbTxADL9l8R7pnIyU8XJPPrUxkR8LlJ8t/B ODfAwvSKBOwHNDTyoj040pPawWXU5Z1LslftTu9O5RgBhdv1gxZ93nuYF1IuDc+f 7Uju608RaGKvjkuqvLeKYeslWKjk5/U= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:08 2025 by rpki-client