$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa File: 989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa (raw, json) Hash identifier: HBFevVXwFX/cUcg1WL0ssxaZWkRhB+k0sp6B5xsPMZM= Subject key identifier: A8:9A:29:97:AB:B5:65:C1:C3:8E:A1:7A:E8:B2:E6:76:41:E7:95:AA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201E5C2E16BFE7641FC78C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e5:c2:e1:6b:fe:76:41:fc:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=34f5e2b6-e103-4e87-bcb2-27f700386da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:58:47:53:e3:6d:69:d3:7e:68:f0:af:0b: 57:53:52:3a:24:76:e9:f1:cb:9c:f7:31:ac:ce:86: 87:97:31:63:bf:83:20:20:a6:e0:25:54:a8:98:af: d2:13:b0:6b:37:37:69:eb:ba:e4:7a:96:bc:b0:9b: d7:49:3f:36:02:67:e3:9a:47:02:e4:00:bb:3a:1d: e7:81:33:5e:7a:3b:d9:9d:73:e4:f4:83:ca:7c:1d: e6:09:9f:32:0a:3f:cb:54:69:de:f7:15:96:dc:db: 0f:d3:92:fd:7e:97:e7:6b:f7:86:24:e1:1f:20:51: f3:8d:9c:1a:b2:99:72:17:4c:ca:da:c4:08:05:2b: 18:45:db:4f:3c:a1:d4:e5:44:fe:f0:df:a1:95:1a: a0:c1:ac:40:4b:20:fe:4d:72:98:df:4e:63:34:b6: 20:04:59:ca:4a:9d:86:d5:ec:7d:c2:fd:88:96:2f: ce:90:14:50:aa:f8:98:d5:d1:f7:57:f5:5c:a1:a6: f4:e5:37:35:2f:9a:07:37:1c:eb:e1:bb:78:d3:97: 62:bd:78:dd:64:3f:35:62:07:9a:4c:c8:7a:1e:91: 50:e2:54:67:4e:e2:b1:13:5a:16:1c:07:bb:e7:6f: 88:05:0f:10:4b:c0:26:2d:69:5e:63:3f:7c:26:50: 66:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9A:29:97:AB:B5:65:C1:C3:8E:A1:7A:E8:B2:E6:76:41:E7:95:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ca:57:63:8b:6f:ef:a3:f4:83:0f:e7:c5:f8:84:f8:e0:fc: 58:b1:bb:17:c3:4a:bc:3b:70:ce:04:35:d0:cb:87:bd:7f:ac: b3:e3:05:03:82:7e:93:20:cb:90:dd:9e:46:6a:05:17:0a:bc: 8a:d2:ba:6b:54:11:2f:f9:11:c6:b4:c9:80:18:32:fc:75:0d: 37:19:0e:17:92:bd:98:19:66:63:f7:ce:c4:6e:e4:c4:92:fa: 6c:d6:3e:86:f6:c6:f7:3e:5a:5e:f4:41:6a:a7:71:89:4d:e9: 9d:2b:a1:cc:65:18:2b:ca:00:c4:6c:5f:83:3e:98:03:fc:63: db:98:0e:44:db:66:cf:57:0a:3c:19:33:bd:d6:b0:61:d4:22: 62:f6:b2:cb:62:44:a1:d0:2d:d3:f8:0e:e4:0d:fa:44:86:52: 83:39:4d:e4:7a:72:b6:fa:ba:aa:51:31:fe:48:64:b9:08:35: d6:5f:26:37:67:fc:a2:1b:84:bf:cf:a0:57:45:1d:b7:14:54: 7d:60:be:a8:10:d3:4b:53:89:56:e7:81:64:4f:09:77:f8:df: ec:20:1f:cb:ac:b9:84:5c:f2:12:d2:c1:13:c6:6d:35:08:e6: df:e3:73:1d:1a:8c:31:ea:d4:33:98:b6:45:36:17:51:c3:34: 5e:09:3e:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeXC4Wv+dkH8eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MzRmNWUyYjYtZTEwMy00ZTg3LWJjYjItMjdmNzAwMzg2ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3FYR1PjbWnTfmjwrwtXU1I6JHbp8cuc9zGs zoaHlzFjv4MgIKbgJVSomK/SE7BrNzdp67rkepa8sJvXST82AmfjmkcC5AC7Oh3n gTNeejvZnXPk9IPKfB3mCZ8yCj/LVGne9xWW3NsP05L9fpfna/eGJOEfIFHzjZwa splyF0zK2sQIBSsYRdtPPKHU5UT+8N+hlRqgwaxASyD+TXKY305jNLYgBFnKSp2G 1ex9wv2Ili/OkBRQqviY1dH3V/Vcoab05Tc1L5oHNxzr4bt405divXjdZD81Ygea TMh6HpFQ4lRnTuKxE1oWHAe752+IBQ8QS8AmLWleYz98JlBm4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiaKZertWXBw46heuiy5nZB55WqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTg5ZjdmYzEtMWViNS0z ZDJmLTkxYmYtYTZlNTY1N2NhMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzKV2OLb++j9IMP58X4hPjg/FixuxfDSrw7cM4ENdDLh71/rLPjBQOC fpMgy5DdnkZqBRcKvIrSumtUES/5Eca0yYAYMvx1DTcZDheSvZgZZmP3zsRu5MSS +mzWPob2xvc+Wl70QWqncYlN6Z0rocxlGCvKAMRsX4M+mAP8Y9uYDkTbZs9XCjwZ M73WsGHUImL2sstiRKHQLdP4DuQN+kSGUoM5TeR6crb6uqpRMf5IZLkINdZfJjdn /KIbhL/PoFdFHbcUVH1gvqgQ00tTiVbngWRPCXf43+wgH8usuYRc8hLSwRPGbTUI 5t/jcx0ajDHq1DOYtkU2F1HDNF4JPkw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:07 2025 by rpki-client