$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fef9613-2ad0-3684-ac8c-fa370152d410.roa File: 8fef9613-2ad0-3684-ac8c-fa370152d410.roa (raw, json) Hash identifier: 7ZqWOq49lKu++WSMJs2Dp7fxL3E2MqSO31LI6LS3fIg= Subject key identifier: 19:43:71:43:96:44:5A:E7:6F:DE:3C:73:C0:E9:B1:43:0B:9D:BD:82 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B1271643A3836107E80B137E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fef9613-2ad0-3684-ac8c-fa370152d410.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 173.23.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:64:3a:38:36:10:7e:80:b1:37:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=2edcfe9b-65f3-4f41-be0a-601a2b312497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:90:eb:46:35:35:9c:ac:ee:ac:38:fa:11: ff:ff:ab:c6:7b:c2:37:0a:e7:bb:10:0a:5f:62:a5: 67:22:c7:fc:51:1e:03:b2:da:2e:a5:f7:f5:ed:43: f2:c4:df:36:72:f9:a6:31:64:a0:3b:68:40:4a:84: b7:24:b2:b0:ba:c9:a1:af:03:88:2e:1d:24:c1:c7: 1b:6d:e3:e0:96:cd:e1:a5:9e:23:c0:36:70:02:1b: 80:5e:92:29:40:bc:83:e8:76:95:04:eb:2d:37:6e: 83:a2:b8:01:a7:6b:72:54:84:dc:33:7c:ab:44:a6: 56:de:1a:88:0d:66:fb:a9:c2:4b:d4:bd:e0:58:9f: c0:ec:04:3a:7e:c0:74:32:1e:4d:1a:50:dc:f0:c1: c0:98:83:3f:f3:a1:2b:d4:ba:b5:bd:f5:e1:f2:7f: e7:3b:67:b6:d1:78:f6:98:88:23:76:fb:73:eb:c4: 8a:7e:e0:76:78:0c:1b:4a:1e:2b:6d:23:f9:dd:84: d6:1a:0f:b7:6b:b8:2c:1d:a2:28:5b:58:35:cf:79: 5e:26:1d:63:23:61:27:1e:af:00:ad:07:2e:c1:40: 71:ce:ba:8a:26:99:f0:18:4a:ac:9d:c7:82:27:58: 28:27:ac:5d:11:ae:d6:a6:66:8c:3d:6a:25:3c:c2: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:43:71:43:96:44:5A:E7:6F:DE:3C:73:C0:E9:B1:43:0B:9D:BD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fef9613-2ad0-3684-ac8c-fa370152d410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d0:f8:7d:a7:74:cc:6f:b0:a5:df:e1:05:f0:bd:46:ee:a4: 04:01:32:bf:6b:45:16:93:ab:9e:48:48:49:10:90:79:f9:fa: ce:4a:eb:88:2f:be:4a:28:ef:b5:10:86:27:28:19:7d:52:27: 76:d1:61:c7:94:f4:31:35:95:7d:c1:72:ec:72:6e:b5:17:f1: 74:fd:4e:4b:b7:e3:16:0e:c8:23:2f:1e:05:7e:04:92:a6:f6: 3e:3d:73:a0:04:0f:1c:c3:78:d4:c0:49:6b:00:02:e9:08:23: 3e:f7:79:0d:b6:d3:43:aa:30:d5:88:93:63:c9:d8:ba:6c:90: 81:d0:51:bd:53:d8:45:55:bb:c5:67:6a:26:f8:7a:11:1e:3a: f9:00:b2:03:57:5f:2e:cc:32:61:39:35:ed:23:55:f1:dd:8a: 3f:93:16:70:7b:05:9a:7c:33:18:4a:7a:7c:16:0b:32:2a:e9: 8c:70:87:ff:47:a9:c3:33:f2:fd:e3:5b:ea:9e:1f:f3:54:55: 62:2a:ec:97:1f:24:e4:a1:2e:f1:b8:a3:db:23:88:09:60:83: bf:eb:22:f2:84:34:53:2a:f7:32:55:a3:97:86:96:b2:08:ee: cc:d3:4c:39:e6:08:f3:3e:99:dc:39:83:5a:a5:b0:ab:c2:0d: b7:56:fc:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWQ6ODYQfoCxN+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk MmVkY2ZlOWItNjVmMy00ZjQxLWJlMGEtNjAxYTJiMzEyNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxeQ60Y1NZys7qw4+hH//6vGe8I3Cue7EApf YqVnIsf8UR4Dstoupff17UPyxN82cvmmMWSgO2hASoS3JLKwusmhrwOILh0kwccb bePgls3hpZ4jwDZwAhuAXpIpQLyD6HaVBOstN26DorgBp2tyVITcM3yrRKZW3hqI DWb7qcJL1L3gWJ/A7AQ6fsB0Mh5NGlDc8MHAmIM/86Er1Lq1vfXh8n/nO2e20Xj2 mIgjdvtz68SKfuB2eAwbSh4rbSP53YTWGg+3a7gsHaIoW1g1z3leJh1jI2EnHq8A rQcuwUBxzrqKJpnwGEqsnceCJ1goJ6xdEa7WpmaMPWolPMKmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlDcUOWRFrnb948c8DpsUMLnb2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGZlZjk2MTMtMmFkMC0z Njg0LWFjOGMtZmEzNzAxNTJkNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPQ+H2ndMxvsKXf4QXwvUbupAQBMr9rRRaTq55ISEkQkHn5+s5K64gv vkoo77UQhicoGX1SJ3bRYceU9DE1lX3BcuxybrUX8XT9Tku34xYOyCMvHgV+BJKm 9j49c6AEDxzDeNTASWsAAukIIz73eQ2200OqMNWIk2PJ2LpskIHQUb1T2EVVu8Vn aib4ehEeOvkAsgNXXy7MMmE5Ne0jVfHdij+TFnB7BZp8MxhKenwWCzIq6Yxwh/9H qcMz8v3jW+qeH/NUVWIq7JcfJOShLvG4o9sjiAlgg7/rIvKENFMq9zJVo5eGlrII 7szTTDnmCPM+mdw5g1qlsKvCDbdW/Do= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:20 2025 by rpki-client