$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa File: a23c0de1-1441-3458-bc00-40d7cbcba868.roa (raw, json) Hash identifier: uME1XZS8VrAvz2ViekC383LWuYjl61vHhcWCrS514Vk= Subject key identifier: 35:39:D3:21:25:0C:5A:97:17:F4:0A:65:17:2A:97:C7:B8:74:BC:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201D8052DE65ADFC184A840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.25.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d8:05:2d:e6:5a:df:c1:84:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=033fe583-255e-47ce-bfa6-098fa8482560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9b:18:da:1c:fc:86:1d:57:ff:7f:81:c9:dc: 6d:ae:81:32:21:56:c0:1a:37:98:52:bf:c8:dc:cb: 58:ff:3c:db:62:b1:ab:82:0a:c5:05:c0:d5:41:c8: 62:9d:d2:ac:2c:97:52:67:70:6d:31:11:c9:5e:ec: 49:13:19:33:b9:d6:74:5a:c8:64:78:c8:03:e1:4a: 47:6c:69:f1:7c:c7:36:3b:a9:73:d9:27:26:12:0b: 15:54:cb:f4:34:3f:b8:14:62:24:ea:e1:fd:e2:8f: 5b:b6:be:92:4e:e2:e1:9e:e7:2b:4a:48:e9:1f:76: 5c:9a:a8:23:78:03:d6:d6:3d:ef:b6:09:e6:22:e7: fd:36:9c:5b:a6:13:ae:89:79:dc:91:eb:cb:74:db: 30:52:8a:1d:9c:d8:d6:7f:87:61:06:4a:1c:b3:a3: a8:b8:b0:13:46:a9:60:8a:25:04:33:8a:63:a9:80: 9f:ad:d7:71:91:9a:3a:56:f2:18:eb:cc:3a:9b:00: 6f:6b:94:59:0f:2c:1e:73:b5:63:71:b6:d0:50:4c: 3f:b0:4d:14:ce:3e:bc:6e:09:53:ab:40:29:3f:ec: aa:f6:0c:b8:f8:70:24:aa:80:4b:63:87:c8:23:37: eb:80:c9:48:f0:f3:54:2a:b1:28:9f:42:34:37:92: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:39:D3:21:25:0C:5A:97:17:F4:0A:65:17:2A:97:C7:B8:74:BC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a23c0de1-1441-3458-bc00-40d7cbcba868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:61:3e:a5:96:fb:33:6c:82:95:5e:93:83:58:50:93:87:17: 96:3f:c3:b2:bc:b0:13:c9:b3:12:3b:b3:d9:9b:ba:06:83:a0: 99:f9:4f:30:97:47:03:1a:e5:c7:cd:5f:5e:e1:9e:46:66:04: b0:69:d1:ca:00:53:7f:8b:b1:fc:df:2c:b5:11:b8:85:7d:42: f7:1e:2b:9b:73:94:3c:4a:0a:08:09:5c:5a:67:ee:36:6f:60: 25:06:b2:71:a5:31:53:aa:ce:2d:b3:f4:77:5a:8a:39:ec:26: 57:ba:d4:82:96:f1:72:b1:2d:00:65:4e:ea:23:c6:a1:08:ad: ac:bb:01:38:75:1a:4f:71:3e:f4:ea:bc:fd:c9:5b:78:b4:1a: bb:47:79:c7:8c:05:89:da:26:22:09:51:ba:47:88:f7:e4:5f: a5:f3:fc:af:75:63:a4:93:27:a4:2d:79:62:47:97:59:11:42: 85:a0:fe:b6:70:71:a8:e2:12:18:82:4e:d9:b0:b0:12:b2:1b: 4f:a7:1f:8f:a0:fe:31:9a:2c:c6:4a:1a:0c:6d:ef:29:3b:50: 2a:49:9b:0d:31:23:86:a7:fa:ac:9b:c9:88:08:14:fc:8b:bb: 45:75:f0:de:bd:07:b9:b5:8d:f9:19:bb:f0:cc:e8:37:a6:33: 8a:3d:87:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdgFLeZa38GEqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDMzZmU1ODMtMjU1ZS00N2NlLWJmYTYtMDk4ZmE4NDgyNTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZsY2hz8hh1X/3+BydxtroEyIVbAGjeYUr/I 3MtY/zzbYrGrggrFBcDVQchindKsLJdSZ3BtMRHJXuxJExkzudZ0WshkeMgD4UpH bGnxfMc2O6lz2ScmEgsVVMv0ND+4FGIk6uH94o9btr6STuLhnucrSkjpH3Zcmqgj eAPW1j3vtgnmIuf9NpxbphOuiXnckevLdNswUoodnNjWf4dhBkocs6OouLATRqlg iiUEM4pjqYCfrddxkZo6VvIY68w6mwBva5RZDywec7VjcbbQUEw/sE0Uzj68bglT q0ApP+yq9gy4+HAkqoBLY4fIIzfrgMlI8PNUKrEon0I0N5IPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU50yElDFqXF/QKZRcql8e4dLx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIzYzBkZTEtMTQ0MS0z NDU4LWJjMDAtNDBkN2NiY2JhODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRhPqWW+zNsgpVek4NYUJOHF5Y/w7K8sBPJsxI7s9mbugaDoJn5TzCX RwMa5cfNX17hnkZmBLBp0coAU3+LsfzfLLURuIV9QvceK5tzlDxKCggJXFpn7jZv YCUGsnGlMVOqzi2z9HdaijnsJle61IKW8XKxLQBlTuojxqEIray7ATh1Gk9xPvTq vP3JW3i0GrtHeceMBYnaJiIJUbpHiPfkX6Xz/K91Y6STJ6QteWJHl1kRQoWg/rZw cajiEhiCTtmwsBKyG0+nH4+g/jGaLMZKGgxt7yk7UCpJmw0xI4an+qybyYgIFPyL u0V18N69B7m1jfkZu/DM6DemM4o9h6E= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:45 2025 by rpki-client