$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa File: a525a691-83ca-3334-8085-c21e4f6b991c.roa (raw, json) Hash identifier: dj7lgKdbXEipc8/9RsBsZXVxp4qp6nU5l0csL7luaN0= Subject key identifier: 4D:93:87:09:1A:A1:91:78:2C:68:D3:D3:42:BE:87:90:54:8B:73:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCA43EC0348EC359DBABC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a4:3e:c0:34:8e:c3:59:db:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c74bd0d7-50b6-4159-ba3a-f4833de1c460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fe:18:54:12:07:66:04:f6:a9:c6:bd:41:70: ba:d0:9a:ad:f7:62:81:b9:7b:38:c5:12:ee:0e:04: e8:1d:ad:c8:7a:04:ba:c0:d4:37:54:96:97:7f:71: ba:ee:a6:20:e0:67:a7:c2:5d:a4:87:3c:82:86:43: e7:fc:ce:bb:99:be:21:4c:06:65:6f:30:34:4e:53: 73:6f:d1:6a:7f:4a:d2:2d:25:1b:52:15:b7:81:97: 82:da:e2:f5:0b:c5:a1:a7:b6:29:e4:56:3b:cd:7e: 33:72:76:c7:46:8c:44:76:e2:ab:8b:29:25:fb:41: 5a:f4:11:47:8e:13:12:8d:e1:0d:28:d2:ec:2b:f8: 23:ce:bb:2f:1f:29:04:b1:73:3d:d1:f8:e9:18:19: 55:fa:86:c9:94:cc:a7:a6:c8:7b:1f:85:42:f4:16: 74:f3:b5:b8:c3:f5:c2:31:d7:7d:bd:ec:3e:6a:8a: f2:f8:ad:10:7f:3c:54:3b:c4:f3:e3:b3:6d:24:f8: 98:4b:b6:72:9b:da:68:be:ff:2d:3c:71:eb:00:c0: 3a:af:5e:e8:65:57:c5:bb:7e:81:33:5a:cd:ad:b7: 35:38:e7:e4:67:58:ba:18:89:09:34:42:fe:c0:6e: 32:df:0b:53:c5:51:f5:ca:55:2e:fd:37:98:38:a8: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:93:87:09:1A:A1:91:78:2C:68:D3:D3:42:BE:87:90:54:8B:73:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5d:f1:51:67:6f:ae:2a:a1:e4:3b:23:2d:ba:a4:80:4e:d8: ae:b8:28:27:e2:b4:45:92:20:f4:d0:18:6f:58:e0:d0:ab:d7: 2c:de:6e:89:fa:0a:41:fd:1c:ed:94:05:e7:29:17:2c:5f:42: fd:7b:53:99:28:d9:3e:dd:0c:9e:45:f9:ae:75:0a:aa:07:f2: 81:0f:c8:00:2f:fc:5b:a1:3a:b2:ed:19:41:38:df:af:45:05: 21:b4:55:1f:e3:09:00:1b:77:6f:64:53:74:2b:6b:b4:62:54: d7:32:5d:ae:86:e3:05:7f:0d:8e:8b:cc:39:76:0c:e5:3d:d6: 70:b2:76:a6:59:bb:80:a9:72:b6:ad:72:71:46:d6:1c:4f:7e: 03:fa:ad:55:58:1c:44:fd:6b:d4:62:57:f3:91:a9:e0:5e:04: 3a:48:54:7c:ef:6d:6e:d7:b5:ec:b3:b4:b2:7a:8c:f3:5f:27: b3:98:bb:15:e6:aa:de:ea:4e:51:60:b6:5a:fc:ce:b6:dc:6f: bc:a6:19:57:66:5a:86:f8:22:1d:1a:3f:fc:64:09:49:55:a7: a0:06:41:69:a0:6e:38:8c:c1:05:15:26:a5:08:e2:d2:80:31: a4:a1:e3:05:98:a2:b7:38:3c:79:c5:96:60:8f:b3:27:a1:31: f0:ea:22:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKQ+wDSOw1nbq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Yzc0YmQwZDctNTBiNi00MTU5LWJhM2EtZjQ4MzNkZTFjNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/4YVBIHZgT2qca9QXC60Jqt92KBuXs4xRLu DgToHa3IegS6wNQ3VJaXf3G67qYg4Genwl2khzyChkPn/M67mb4hTAZlbzA0TlNz b9Fqf0rSLSUbUhW3gZeC2uL1C8Whp7Yp5FY7zX4zcnbHRoxEduKriykl+0Fa9BFH jhMSjeENKNLsK/gjzrsvHykEsXM90fjpGBlV+obJlMynpsh7H4VC9BZ087W4w/XC Mdd9vew+aory+K0QfzxUO8Tz47NtJPiYS7Zym9povv8tPHHrAMA6r17oZVfFu36B M1rNrbc1OOfkZ1i6GIkJNEL+wG4y3wtTxVH1ylUu/TeYOKjOBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2ThwkaoZF4LGjT00K+h5BUi3MMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUyNWE2OTEtODNjYS0z MzM0LTgwODUtYzIxZTRmNmI5OTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBd8VFnb64qoeQ7Iy26pIBO2K64KCfitEWSIPTQGG9Y4NCr1yzebon6 CkH9HO2UBecpFyxfQv17U5ko2T7dDJ5F+a51CqoH8oEPyAAv/FuhOrLtGUE4369F BSG0VR/jCQAbd29kU3Qra7RiVNcyXa6G4wV/DY6LzDl2DOU91nCydqZZu4Cpcrat cnFG1hxPfgP6rVVYHET9a9RiV/ORqeBeBDpIVHzvbW7XteyztLJ6jPNfJ7OYuxXm qt7qTlFgtlr8zrbcb7ymGVdmWob4Ih0aP/xkCUlVp6AGQWmgbjiMwQUVJqUI4tKA MaSh4wWYorc4PHnFlmCPsyehMfDqIks= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:10 2025 by rpki-client