$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa File: a0388682-f011-3f25-a315-590c70213ae3.roa (raw, json) Hash identifier: 5RUqgvZki6B1yY4ORehc6m4zQtPG592ptlfX0a7MyAo= Subject key identifier: EE:9A:06:FB:5C:0A:08:C1:18:17:33:5B:74:F1:E4:79:5B:76:89:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475C625976A5D5364E39A3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa Signing time: Mon 22 Sep 2025 11:56:14 +0000 ROA not before: Mon 22 Sep 2025 11:56:14 +0000 ROA not after: Sun 21 Dec 2025 12:56:14 +0000 asID: 19905 IP address blocks: 173.23.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:62:59:76:a5:d5:36:4e:39:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:14 2025 GMT Not After : Dec 21 12:56:14 2025 GMT Subject: CN=d8ce4be2-93d2-4797-94d4-6efba41e1c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:c3:3f:dc:bc:d9:76:ed:ff:4f:3f:be:03: f3:e6:6a:71:9a:e3:da:0c:b3:f1:9c:a0:e6:f7:9c: f3:e3:79:d2:13:62:72:eb:ff:3a:30:3e:d1:cc:ea: 6d:c6:df:ab:06:1b:0e:39:3f:84:34:2b:61:51:a0: 05:89:85:f7:dc:1b:6b:ba:19:f9:d6:ef:38:d5:59: 8a:ff:83:58:83:c3:90:55:d3:4f:cb:c8:99:f5:ed: 4e:66:dc:37:f2:ca:01:06:4b:74:81:6c:64:52:f2: 46:60:86:3a:91:dd:a0:26:ba:32:f2:11:b4:f8:58: 92:19:14:5a:c3:31:90:98:75:bd:15:45:19:bd:6c: c4:9f:11:4b:1b:1c:3a:c8:e8:32:c6:bb:d2:3c:29: 00:a0:41:79:6a:6d:63:a1:8e:7a:c8:5b:70:79:c8: c0:e8:c7:5d:8e:56:7b:6a:c9:fa:a1:f8:3c:98:01: 1e:af:e2:be:c0:b6:8e:cf:9c:ff:fb:bb:dd:a2:c6: 55:5f:e8:d7:28:e9:b1:eb:68:81:90:49:59:ab:65: d1:40:0a:98:e2:5b:0e:80:7a:32:59:21:a2:97:e5: b7:e6:bf:26:4c:94:a3:52:74:b5:ba:cd:6b:3f:c3: 6b:71:0e:bb:82:3d:ae:ed:22:0a:51:5f:e8:cd:31: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9A:06:FB:5C:0A:08:C1:18:17:33:5B:74:F1:E4:79:5B:76:89:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0388682-f011-3f25-a315-590c70213ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:13:f5:ce:00:23:de:9a:ae:df:9b:a0:d4:b3:77:04:3a:5a: c4:38:44:f8:a9:9e:7c:b4:86:29:08:40:47:0c:86:29:c1:fb: 0e:12:84:51:51:56:2a:91:71:3b:03:01:a9:40:cf:da:61:e6: 74:67:38:3c:2a:69:12:53:5b:c8:68:35:7e:8f:32:86:c1:00: c1:ad:fb:c1:77:01:8e:a6:fa:3f:77:17:c9:45:a0:10:0c:6f: 25:54:54:29:cf:df:e4:fd:13:4a:e9:7b:2a:d2:c6:bd:0d:7e: c2:4c:92:ff:70:eb:c4:4b:f4:06:da:01:10:03:da:a8:e2:ee: a7:24:b9:f5:33:2e:f2:b0:86:05:7a:84:a0:b5:1f:6c:fc:cf: 7e:64:7b:8a:dc:c6:35:a0:d9:00:24:3d:33:a6:b2:72:19:79: 13:b5:ab:4d:4d:f7:23:cd:15:a0:fd:3d:b1:3c:bd:06:4f:ad: 44:f8:75:d4:00:21:4b:c8:71:df:a9:83:90:0a:ff:bc:43:5a: 9e:cf:c7:18:d9:01:a2:30:55:d4:f6:c9:12:68:28:e2:df:db: ec:a7:64:d8:7f:5c:b3:55:be:cb:e8:37:77:8b:96:d2:aa:20: 4e:f6:09:ca:ce:ca:0d:ec:cc:14:68:6d:9f:04:ba:da:f0:e0: d3:fd:83:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXGJZdqXVNk45o8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTYxNFoXDTI1MTIyMTEyNTYxNFowLzEtMCsGA1UEAxMk ZDhjZTRiZTItOTNkMi00Nzk3LTk0ZDQtNmVmYmE0MWUxYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BfDP9y82Xbt/08/vgPz5mpxmuPaDLPxnKDm 95zz43nSE2Jy6/86MD7RzOptxt+rBhsOOT+ENCthUaAFiYX33Btruhn51u841VmK /4NYg8OQVdNPy8iZ9e1OZtw38soBBkt0gWxkUvJGYIY6kd2gJroy8hG0+FiSGRRa wzGQmHW9FUUZvWzEnxFLGxw6yOgyxrvSPCkAoEF5am1joY56yFtwecjA6MddjlZ7 asn6ofg8mAEer+K+wLaOz5z/+7vdosZVX+jXKOmx62iBkElZq2XRQAqY4lsOgHoy WSGil+W35r8mTJSjUnS1us1rP8NrcQ67gj2u7SIKUV/ozTG/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6aBvtcCgjBGBczW3Tx5Hlbdok+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTAzODg2ODItZjAxMS0z ZjI1LWEzMTUtNTkwYzcwMjEzYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUT9c4AI96art+boNSzdwQ6WsQ4RPipnny0hikIQEcMhinB+w4ShFFR ViqRcTsDAalAz9ph5nRnODwqaRJTW8hoNX6PMobBAMGt+8F3AY6m+j93F8lFoBAM byVUVCnP3+T9E0rpeyrSxr0NfsJMkv9w68RL9AbaARAD2qji7qckufUzLvKwhgV6 hKC1H2z8z35ke4rcxjWg2QAkPTOmsnIZeRO1q01N9yPNFaD9PbE8vQZPrUT4ddQA IUvIcd+pg5AK/7xDWp7PxxjZAaIwVdT2yRJoKOLf2+ynZNh/XLNVvsvoN3eLltKq IE72CcrOyg3szBRobZ8Eutrw4NP9g4E= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:27 2025 by rpki-client