$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa File: 97978250-1bd4-3852-9992-24ba25c2e9b8.roa (raw, json) Hash identifier: CwT+JIHsy3tGUaUsReKC+cH2Zmsp1tkIQXEp/grywr4= Subject key identifier: 77:2D:57:C1:43:7B:3B:FA:4C:EB:8E:65:C7:F0:70:71:4D:96:94:5B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62023C4928BE4EE0560A8A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.19.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:3c:49:28:be:4e:e0:56:0a:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e5340cf3-b0dd-47e9-bf61-e509de25e0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:73:cf:1c:e7:05:1c:ef:ce:40:08:de:89: ec:e6:d3:82:4f:f1:1a:29:d8:e6:4f:cf:87:0a:7d: 0e:08:4d:86:2a:6d:e3:74:4b:f4:f2:40:5d:ea:27: de:94:e5:bf:b1:30:ad:a5:7a:72:96:7a:bb:a4:f3: cd:f2:0c:a7:8b:37:f5:56:fc:5f:dc:5c:c2:ad:29: 8d:5d:c8:ad:26:2d:ce:d2:fd:bb:f5:03:02:57:e4: 2f:47:07:c6:60:c0:93:31:99:36:99:d5:39:97:f5: 84:03:56:6e:5b:37:76:d5:b4:62:eb:46:06:b4:c1: 2d:9e:cd:13:1d:92:1a:5a:1c:cf:56:40:8d:64:61: f8:8a:c6:9b:27:4c:33:61:c5:c3:8d:c6:8d:71:f9: 03:20:9e:e3:8b:55:f2:68:58:28:5a:0b:d2:45:bf: dd:d0:aa:c7:94:f2:6d:8d:62:cd:79:1a:d6:9a:f3: 97:09:82:ab:e9:c7:63:ea:64:0c:39:18:07:9f:34: 0b:99:3c:3c:26:ec:1a:6b:3c:eb:49:d8:22:f3:68: 67:8c:c2:7b:7f:db:2c:a3:f2:cc:0d:4f:f2:78:a9: fa:0a:00:1a:ae:8a:af:87:44:04:ec:ce:5d:c2:d9: 5e:2c:f8:35:06:92:29:c8:6e:e5:55:60:f7:c3:2c: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:57:C1:43:7B:3B:FA:4C:EB:8E:65:C7:F0:70:71:4D:96:94:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:70:e4:98:e3:67:e6:d6:c3:cd:89:0b:42:b9:f1:bc:d4:63: 20:f5:2e:d7:80:0d:17:f9:69:c8:3f:0d:41:13:57:e1:16:60: 9d:b8:a5:d0:92:b8:85:e4:19:0f:8c:94:41:8e:c5:39:23:f3: 6d:15:e5:17:a2:fe:98:75:ae:b9:6e:f7:c7:90:1e:72:95:00: c8:5a:41:0b:29:79:09:2f:06:84:a0:98:79:4c:f9:89:94:5d: 75:39:de:cf:05:f9:de:3a:ed:73:57:c1:6a:db:cd:cb:57:ae: df:3c:16:14:d9:6d:38:48:d5:33:0c:f3:bb:c6:17:d0:e0:c0: 59:cc:63:20:d5:9b:35:99:d5:b6:57:01:3c:42:45:a5:02:9e: 93:52:df:68:8f:ec:14:ae:86:57:a4:ce:ac:c8:5b:09:6d:32: 2b:56:93:81:c6:5f:66:db:74:62:24:4d:0e:77:f3:49:a9:5c: 15:0f:be:82:aa:8a:e4:89:e8:8c:60:c3:a2:3b:2f:d4:4b:14: 4d:6e:36:f7:3b:9c:6d:93:72:b9:45:d3:2c:86:b9:62:15:c2: 55:0a:51:3c:96:61:7c:8e:6e:4d:79:fb:60:03:1b:73:b4:5b: a5:b2:2b:15:6e:71:bc:be:fe:6a:d3:58:47:47:27:88:98:21: 7c:4a:a8:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjxJKL5O4FYKigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTUzNDBjZjMtYjBkZC00N2U5LWJmNjEtZTUwOWRlMjVlMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOhzzxznBRzvzkAI3ons5tOCT/EaKdjmT8+H Cn0OCE2GKm3jdEv08kBd6ifelOW/sTCtpXpylnq7pPPN8gynizf1Vvxf3FzCrSmN XcitJi3O0v279QMCV+QvRwfGYMCTMZk2mdU5l/WEA1ZuWzd21bRi60YGtMEtns0T HZIaWhzPVkCNZGH4isabJ0wzYcXDjcaNcfkDIJ7ji1XyaFgoWgvSRb/d0KrHlPJt jWLNeRrWmvOXCYKr6cdj6mQMORgHnzQLmTw8JuwaazzrSdgi82hnjMJ7f9sso/LM DU/yeKn6CgAaroqvh0QE7M5dwtleLPg1BpIpyG7lVWD3wyySCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHctV8FDezv6TOuOZcfwcHFNlpRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTc5NzgyNTAtMWJkNC0z ODUyLTk5OTItMjRiYTI1YzJlOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChw5JjjZ+bWw82JC0K58bzUYyD1LteADRf5acg/DUETV+EWYJ24pdCS uIXkGQ+MlEGOxTkj820V5Rei/ph1rrlu98eQHnKVAMhaQQspeQkvBoSgmHlM+YmU XXU53s8F+d467XNXwWrbzctXrt88FhTZbThI1TMM87vGF9DgwFnMYyDVmzWZ1bZX ATxCRaUCnpNS32iP7BSuhlekzqzIWwltMitWk4HGX2bbdGIkTQ5380mpXBUPvoKq iuSJ6Ixgw6I7L9RLFE1uNvc7nG2TcrlF0yyGuWIVwlUKUTyWYXyObk15+2ADG3O0 W6WyKxVucby+/mrTWEdHJ4iYIXxKqBU= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:03 2025 by rpki-client