$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa File: a0aa556a-b40b-38ba-9476-baccbd5300b7.roa (raw, json) Hash identifier: 8vwLTI+D1cICe1IshFau5ksMCzzYjQn5U8vNiFmIQjQ= Subject key identifier: 25:59:83:61:71:70:D2:49:6C:CE:A0:0E:B3:C1:AA:E0:92:51:7A:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC890C91DF4BF604BAFD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.19.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:89:0c:91:df:4b:f6:04:ba:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c7e5d14f-3f29-4a96-8659-cf69558daea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:69:81:a8:b3:51:7c:92:8f:5d:a8:45:9f: c3:8b:5a:21:2b:38:89:8e:5b:c8:74:97:48:0d:b7: bd:95:7b:6b:41:12:91:f3:01:a5:87:b8:b9:6d:4e: 75:4e:fb:62:59:0e:6b:d2:b6:d2:a0:bc:a6:32:f8: 59:53:c9:12:77:13:6f:2c:8f:7b:92:53:c7:f1:bf: 82:82:89:79:6d:fc:01:67:b1:6a:3f:58:14:b0:4c: 61:e1:d8:78:a9:38:66:3d:d3:6b:cf:f7:c1:fa:6e: 81:84:1c:5a:2b:42:99:6c:af:ce:85:bb:f9:8d:45: cd:df:e2:3a:e8:a3:b0:3d:05:82:c0:3f:b9:81:6c: f2:f5:e2:98:1d:15:33:3c:2d:70:4d:15:cc:6d:8d: 2e:40:d7:c5:5a:ed:fa:69:c0:0a:e2:28:02:09:82: 6b:ac:23:fa:e0:69:76:5b:2b:94:ed:75:b5:89:2a: c9:be:5d:1d:d3:37:bc:eb:78:82:e6:9e:74:63:82: 6b:c4:99:0d:2f:5a:f8:64:f1:ea:c5:1a:8d:42:8c: 96:68:90:5c:3e:76:26:ef:aa:e7:6b:5f:81:10:81: 96:59:1d:25:39:66:07:d1:ff:c8:9e:7b:7e:98:90: 7f:18:a1:45:39:f5:b7:55:89:76:88:e2:2a:96:fe: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:59:83:61:71:70:D2:49:6C:CE:A0:0E:B3:C1:AA:E0:92:51:7A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fd:3e:89:72:51:d4:af:f8:10:bd:7f:9d:7a:94:17:49:c7: 2d:1a:84:55:7b:6b:d8:22:52:72:b8:cf:c3:2d:76:3c:84:69: d4:30:6b:28:3b:3a:19:74:a1:09:10:34:d3:2c:c7:ab:4f:fd: 34:40:03:38:04:49:e8:2c:31:d7:d8:4b:86:13:52:1e:e7:ae: e8:29:78:4e:df:c7:ff:88:40:64:b6:46:0b:22:26:71:1a:a2: 9b:6f:95:e3:a0:49:e0:81:ff:91:a7:62:04:6f:07:63:d5:e1: 90:5a:d6:71:81:89:ce:eb:44:42:4a:58:15:41:d1:60:8a:63: 3d:62:14:49:ba:ca:33:62:d5:d4:b3:f5:05:2d:a0:53:c3:5f: 27:72:58:ee:95:e3:05:fb:22:2a:f4:9c:e4:59:81:9d:14:9d: 7b:12:a0:92:8e:c5:4c:ef:50:bd:52:f4:fb:71:1a:5b:d6:43: 34:76:e4:23:42:ba:b3:03:c8:67:f0:ac:d1:1f:93:3d:aa:bc: 40:b4:cf:5d:2f:dc:52:37:7c:15:61:3e:3a:83:6b:e2:a6:ce: b1:2a:0f:0a:3b:73:db:ab:c2:24:75:4d:95:89:6a:d6:b8:73: dd:73:9f:6b:28:59:1b:c6:d6:ba:e3:e6:a0:36:68:05:69:11: 18:66:de:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIkMkd9L9gS6/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzdlNWQxNGYtM2YyOS00YTk2LTg2NTktY2Y2OTU1OGRhZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx41pgaizUXySj12oRZ/Di1ohKziJjlvIdJdI Dbe9lXtrQRKR8wGlh7i5bU51TvtiWQ5r0rbSoLymMvhZU8kSdxNvLI97klPH8b+C gol5bfwBZ7FqP1gUsExh4dh4qThmPdNrz/fB+m6BhBxaK0KZbK/Ohbv5jUXN3+I6 6KOwPQWCwD+5gWzy9eKYHRUzPC1wTRXMbY0uQNfFWu36acAK4igCCYJrrCP64Gl2 WyuU7XW1iSrJvl0d0ze863iC5p50Y4JrxJkNL1r4ZPHqxRqNQoyWaJBcPnYm76rn a1+BEIGWWR0lOWYH0f/Innt+mJB/GKFFOfW3VYl2iOIqlv7zxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVZg2FxcNJJbM6gDrPBquCSUXo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTBhYTU1NmEtYjQwYi0z OGJhLTk0NzYtYmFjY2JkNTMwMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz9PolyUdSv+BC9f516lBdJxy0ahFV7a9giUnK4z8MtdjyEadQwayg7 Ohl0oQkQNNMsx6tP/TRAAzgESegsMdfYS4YTUh7nrugpeE7fx/+IQGS2RgsiJnEa optvleOgSeCB/5GnYgRvB2PV4ZBa1nGBic7rREJKWBVB0WCKYz1iFEm6yjNi1dSz 9QUtoFPDXydyWO6V4wX7Iir0nORZgZ0UnXsSoJKOxUzvUL1S9PtxGlvWQzR25CNC urMDyGfwrNEfkz2qvEC0z10v3FI3fBVhPjqDa+KmzrEqDwo7c9urwiR1TZWJata4 c91zn2soWRvG1rrj5qA2aAVpERhm3vw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:34 2025 by rpki-client