$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91ae5a6d-cb6e-36d9-b5de-376ef20f0906.roa File: 91ae5a6d-cb6e-36d9-b5de-376ef20f0906.roa (raw, json) Hash identifier: PU7VOfYfRPfZwUHh0KcmazWWWGO4bINncwJny5zMnRU= Subject key identifier: 29:21:14:04:45:DA:E3:96:38:09:5C:63:48:43:48:EA:0B:B9:8B:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B052C18413C1F78B764493FC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91ae5a6d-cb6e-36d9-b5de-376ef20f0906.roa Signing time: Fri 29 Aug 2025 18:55:35 +0000 ROA not before: Fri 29 Aug 2025 18:55:35 +0000 ROA not after: Thu 27 Nov 2025 19:55:35 +0000 asID: 30036 IP address blocks: 173.29.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:2c:18:41:3c:1f:78:b7:64:49:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 29 18:55:35 2025 GMT Not After : Nov 27 19:55:35 2025 GMT Subject: CN=062ed86f-90a4-4112-9fb6-cb290258fee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:d1:46:00:bf:b0:bd:4e:d0:fc:b3:2d:22: 3d:1c:2a:dc:48:ff:5f:e5:84:bd:7e:bb:47:96:0d: ef:49:da:82:2d:0e:98:03:c8:1e:86:7b:48:ca:6e: 8d:e8:57:87:68:0e:3b:3b:86:e7:1f:bf:3b:2c:42: 00:2a:82:50:bd:86:54:1c:0e:df:99:f4:36:f9:bd: c4:4f:16:12:43:29:29:5b:4d:3c:da:8c:0e:13:0a: 8e:83:25:42:e8:39:03:70:8b:67:b1:00:16:7f:cf: e8:4e:aa:0b:43:93:8a:b5:b4:d5:73:54:40:82:37: 42:c4:3f:d9:6a:7a:e7:32:4f:52:e1:5b:06:c9:5f: 81:71:d6:78:6f:4f:3d:84:ac:49:43:9d:7a:0c:89: e5:0c:19:40:17:30:1a:a1:2c:20:98:f8:de:48:fa: 4b:32:d8:df:a3:db:28:5d:9a:85:11:86:08:23:ca: be:68:ed:47:f0:ed:15:81:7e:4a:65:17:b0:69:08: 16:bb:22:b6:a9:50:76:40:fa:52:81:a7:1e:f3:15: ed:b7:b2:06:60:2d:6e:26:49:27:00:8b:3f:5f:99: b6:b5:07:d6:eb:f1:0e:a5:c8:47:f7:a6:83:e6:d0: 22:32:d9:61:85:26:f9:c4:58:45:93:fc:1c:65:67: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:14:04:45:DA:E3:96:38:09:5C:63:48:43:48:EA:0B:B9:8B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91ae5a6d-cb6e-36d9-b5de-376ef20f0906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f7:fd:61:08:fb:d9:76:4c:b2:e1:b4:25:29:96:a4:f3:c9: cf:7c:1f:82:50:48:87:5e:8f:53:8a:7b:61:1b:a9:d5:8d:08: 41:54:87:e4:26:42:dd:66:47:87:8b:09:87:fb:5b:aa:8b:f0: 6f:2d:de:98:94:74:bb:56:5a:65:2c:cc:38:89:ae:bb:76:69: 46:69:4e:4e:e9:cd:ce:9d:86:84:0f:11:bb:89:48:6f:ff:39: b7:1d:3f:b7:99:bf:65:a4:82:0e:0f:5d:30:e0:51:9b:7a:4e: 33:02:77:cf:13:b1:47:e1:c0:60:68:7b:55:a1:35:67:d6:0f: f9:48:36:66:e3:3f:3b:93:b2:5b:25:5d:0e:f9:cb:98:5b:62: 39:3a:8c:f1:79:b1:70:08:95:56:25:32:13:89:3a:55:c9:09: ea:c8:4a:4b:71:af:d7:3d:f7:91:d4:df:08:a5:84:0a:0e:b9: 67:14:5e:30:6a:c6:5f:d2:c9:6d:60:80:ed:1c:c2:a5:01:52: e9:3b:46:b6:c3:16:54:9d:7b:25:d1:3d:2b:c3:ac:eb:8a:6d: 48:d6:3f:49:58:31:6f:16:33:65:42:55:84:c6:ae:c5:c0:45: 10:4c:dd:8e:3f:1b:16:06:0b:d1:55:a1:ce:11:a1:4b:58:6c: 6e:24:b4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsFLBhBPB94t2RJP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyOTE4NTUzNVoXDTI1MTEyNzE5NTUzNVowLzEtMCsGA1UEAxMk MDYyZWQ4NmYtOTBhNC00MTEyLTlmYjYtY2IyOTAyNThmZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhbRRgC/sL1O0PyzLSI9HCrcSP9f5YS9frtH lg3vSdqCLQ6YA8gehntIym6N6FeHaA47O4bnH787LEIAKoJQvYZUHA7fmfQ2+b3E TxYSQykpW0082owOEwqOgyVC6DkDcItnsQAWf8/oTqoLQ5OKtbTVc1RAgjdCxD/Z anrnMk9S4VsGyV+BcdZ4b089hKxJQ516DInlDBlAFzAaoSwgmPjeSPpLMtjfo9so XZqFEYYII8q+aO1H8O0VgX5KZRewaQgWuyK2qVB2QPpSgace8xXtt7IGYC1uJkkn AIs/X5m2tQfW6/EOpchH96aD5tAiMtlhhSb5xFhFk/wcZWdEIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkhFARF2uOWOAlcY0hDSOoLuYszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTFhZTVhNmQtY2I2ZS0z NmQ5LWI1ZGUtMzc2ZWYyMGYwOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv3/WEI+9l2TLLhtCUplqTzyc98H4JQSIdej1OKe2EbqdWNCEFUh+Qm Qt1mR4eLCYf7W6qL8G8t3piUdLtWWmUszDiJrrt2aUZpTk7pzc6dhoQPEbuJSG// ObcdP7eZv2Wkgg4PXTDgUZt6TjMCd88TsUfhwGBoe1WhNWfWD/lINmbjPzuTslsl XQ75y5hbYjk6jPF5sXAIlVYlMhOJOlXJCerISktxr9c995HU3wilhAoOuWcUXjBq xl/SyW1ggO0cwqUBUuk7RrbDFlSdeyXRPSvDrOuKbUjWP0lYMW8WM2VCVYTGrsXA RRBM3Y4/GxYGC9FVoc4RoUtYbG4ktAk= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:15 2025 by rpki-client