$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa File: a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa (raw, json) Hash identifier: khswCwWgA4tcRRRViMk7onEpkuCYOV5aN475RiTg1iY= Subject key identifier: 36:7B:55:CA:21:89:6C:41:65:86:67:C5:DD:96:9F:94:01:54:DD:F5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE40705EE8BEC7E9DD6700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.29.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:40:70:5e:e8:be:c7:e9:dd:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1de483a6-9954-4dfb-b9e0-6db293559d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:fd:99:6a:26:30:78:8f:8a:27:23:d1:d9: e0:41:40:04:ba:90:27:a6:d5:69:17:c5:1f:36:c7: 71:26:30:c4:97:b7:61:4f:94:92:a0:b3:d2:30:54: 92:ad:d4:4a:12:1d:d8:6b:23:2c:a2:d5:51:fc:15: 30:5b:de:ff:bc:08:ac:0d:80:74:94:09:68:2b:12: 62:87:89:a3:b6:83:65:a8:f1:af:e9:9b:06:85:96: 79:5f:90:4a:c2:14:1b:1d:c9:48:b3:71:f4:7b:14: cc:94:9f:96:2c:c5:c1:eb:2a:64:ff:9e:b6:bb:7d: 02:68:70:57:38:3b:e6:4d:4c:63:3c:ab:a5:c4:91: 91:4f:79:90:81:3c:26:70:73:7c:34:4c:41:e9:f2: b9:96:84:5c:dc:d5:9c:26:cc:b7:56:7d:cb:48:16: 69:10:d2:79:57:ac:10:13:65:49:33:43:32:78:19: fb:a1:15:4a:fe:6c:d5:6c:65:4d:c2:58:88:07:38: e2:64:b9:27:cb:10:b0:66:fe:b8:99:1e:99:e2:c5: 80:98:37:38:43:39:55:c9:fe:07:30:99:7f:93:12: b4:ea:95:38:4e:09:fc:90:4f:9f:97:68:a2:5f:49: 59:34:9e:87:43:3a:39:86:23:bf:76:7f:41:90:82: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7B:55:CA:21:89:6C:41:65:86:67:C5:DD:96:9F:94:01:54:DD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5f:09:94:1e:c5:91:92:94:75:c9:c5:34:c9:92:9f:ef:cc: 2c:e3:8c:c7:9c:47:1c:f8:76:d7:55:46:90:af:d3:b7:d5:b3: 43:88:62:c1:f4:36:eb:44:29:a0:fd:fc:83:b8:74:b9:51:41: b0:d5:ea:a5:c4:dc:a7:36:a1:f7:64:6b:d7:39:a1:78:d9:13: cc:09:2b:b3:73:2e:03:ee:79:9e:39:bf:6f:07:15:ec:8c:d0: f5:38:69:ad:22:6a:59:65:8c:0a:0a:62:d3:a9:b5:32:93:60: 5b:8e:96:bf:ce:f5:98:d3:a8:a9:ff:38:93:f5:c3:f3:9c:11: 16:0c:78:48:f0:86:5c:90:5b:ab:a1:e1:c2:26:ff:d8:58:f8: 5b:88:7f:6b:68:98:3c:d3:fa:12:83:70:d7:cf:c6:0f:4d:2b: f1:5e:68:49:01:80:7b:e7:72:33:aa:8b:1e:92:2e:aa:21:b9: 48:3f:38:26:7c:d1:e9:01:8b:2c:70:f5:3c:86:59:b2:98:69: 47:8d:1d:8e:5f:72:b4:fc:a3:9d:c2:7d:98:43:2b:b8:c9:89: 38:cb:65:bd:2d:2a:96:82:9d:b4:40:c5:1f:63:bb:49:d1:99: d7:69:c3:33:38:0c:19:d9:24:ba:cf:86:15:6d:57:c8:ed:42: 80:c8:1c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkBwXui+x+ndZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWRlNDgzYTYtOTk1NC00ZGZiLWI5ZTAtNmRiMjkzNTU5ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vb9mWomMHiPiicj0dngQUAEupAnptVpF8Uf NsdxJjDEl7dhT5SSoLPSMFSSrdRKEh3YayMsotVR/BUwW97/vAisDYB0lAloKxJi h4mjtoNlqPGv6ZsGhZZ5X5BKwhQbHclIs3H0exTMlJ+WLMXB6ypk/562u30CaHBX ODvmTUxjPKulxJGRT3mQgTwmcHN8NExB6fK5loRc3NWcJsy3Vn3LSBZpENJ5V6wQ E2VJM0MyeBn7oRVK/mzVbGVNwliIBzjiZLknyxCwZv64mR6Z4sWAmDc4QzlVyf4H MJl/kxK06pU4Tgn8kE+fl2iiX0lZNJ6HQzo5hiO/dn9BkILVAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ7VcohiWxBZYZnxd2Wn5QBVN31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhYzBhNjktMTk4Ny0z MDMyLWJiZTUtNGY3YmE4MDc4M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlfCZQexZGSlHXJxTTJkp/vzCzjjMecRxz4dtdVRpCv07fVs0OIYsH0 NutEKaD9/IO4dLlRQbDV6qXE3Kc2ofdka9c5oXjZE8wJK7NzLgPueZ45v28HFeyM 0PU4aa0iallljAoKYtOptTKTYFuOlr/O9ZjTqKn/OJP1w/OcERYMeEjwhlyQW6uh 4cIm/9hY+FuIf2tomDzT+hKDcNfPxg9NK/FeaEkBgHvncjOqix6SLqohuUg/OCZ8 0ekBiyxw9TyGWbKYaUeNHY5fcrT8o53CfZhDK7jJiTjLZb0tKpaCnbRAxR9ju0nR mddpwzM4DBnZJLrPhhVtV8jtQoDIHM8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:07 2025 by rpki-client