$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bf125e-93b1-3a7b-94ad-b125414e0fc0.roa File: a9bf125e-93b1-3a7b-94ad-b125414e0fc0.roa (raw, json) Hash identifier: SRvxjrd88Psxn+C7Qk6EIhaRT5pjbmcBU/i1jVTb6a4= Subject key identifier: 01:9C:A4:93:59:D6:10:1B:E0:80:EF:8A:65:EF:0F:AF:28:AB:FE:D0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCA31EE262CB37780CF908 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bf125e-93b1-3a7b-94ad-b125414e0fc0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.16.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a3:1e:e2:62:cb:37:78:0c:f9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=551e965e-42c1-4d64-95cd-d06293137b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:e5:e5:2b:0e:3a:8c:35:51:d6:11:dd:f5: 2b:83:ae:fe:d9:4c:6f:10:eb:f4:5b:50:2d:7b:01: 93:b4:be:7b:52:2a:3c:32:3b:5d:91:bb:2a:c9:d4: f7:7a:83:ad:ef:b0:e8:12:5a:f5:41:37:9c:c6:4c: 20:18:dd:cf:a7:da:3d:3b:1c:cf:21:7f:62:15:7b: da:c2:34:fd:2e:e0:5d:9a:88:82:c1:ee:7a:a3:84: bd:68:c5:44:22:73:b7:1d:50:16:a8:b3:a3:35:5d: 8c:96:49:c1:7f:0c:36:9b:a7:c1:e3:0f:66:3c:96: a1:ad:ba:03:5f:de:56:15:35:2b:e5:0d:17:a1:3a: 07:23:40:25:ef:23:3b:fa:28:70:92:d4:42:2a:a7: 38:85:58:98:9d:2f:13:9d:f0:4a:5a:6e:46:95:dc: 53:16:66:38:b9:6c:ee:d9:4c:ef:f4:77:62:c5:46: 82:27:1f:be:b1:46:ae:e3:d3:6f:9f:60:0b:04:ce: 60:ce:15:05:5f:9c:5e:72:c7:ec:d3:80:f1:05:2c: df:f4:bc:b3:ec:84:6a:9c:2f:aa:92:1c:01:eb:b8: 03:18:86:a6:6c:43:e2:dd:2c:cd:0e:b9:fc:18:db: e8:0e:d9:e1:be:38:c3:29:6e:97:ad:f8:db:55:3b: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9C:A4:93:59:D6:10:1B:E0:80:EF:8A:65:EF:0F:AF:28:AB:FE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bf125e-93b1-3a7b-94ad-b125414e0fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:50:14:fe:c3:82:ed:e9:5c:07:64:88:23:05:94:03:97:aa: 58:d9:52:e8:d4:a2:e0:3d:44:2f:a7:e5:37:d3:df:5e:6b:4e: 65:87:e1:69:e1:97:48:7a:01:8a:18:85:e0:29:d3:1a:a8:93: 42:07:0c:59:9e:8e:b9:80:02:8e:44:99:4d:3d:30:60:d1:d5: f6:99:ef:16:69:75:27:cc:8b:f2:a4:05:7f:e6:7c:70:ff:20: 2a:e7:a5:58:8b:d6:d1:72:3e:73:42:30:a7:23:64:cc:63:fc: 95:d8:82:d7:cd:65:54:fd:20:b0:78:6b:33:fb:1e:a9:30:0a: 3b:0f:c1:00:78:97:4b:c2:3f:4e:21:8e:71:66:90:b3:c8:ad: 37:02:76:ec:13:88:cd:36:94:dd:ab:9d:7f:58:ea:94:64:a8: 5b:ee:0c:a2:82:bd:ac:b8:7e:d3:91:77:4d:da:6b:2f:8b:bf: 6f:f3:bd:e7:b2:2f:d8:ce:fe:0c:fc:c4:3d:a6:21:9f:04:e3: 30:34:b1:7c:41:ff:33:ba:9e:c9:92:02:5b:6e:c7:fd:fd:df: 39:e6:40:c1:f5:8f:f5:d9:b3:9a:b8:29:0b:97:22:5d:f6:c5: 28:b4:f5:5f:84:f1:d2:ef:b3:c7:d0:42:23:5c:60:38:99:9d: 70:1b:f4:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKMe4mLLN3gM+QgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTUxZTk2NWUtNDJjMS00ZDY0LTk1Y2QtZDA2MjkzMTM3YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoTl5SsOOow1UdYR3fUrg67+2UxvEOv0W1At ewGTtL57Uio8MjtdkbsqydT3eoOt77DoElr1QTecxkwgGN3Pp9o9OxzPIX9iFXva wjT9LuBdmoiCwe56o4S9aMVEInO3HVAWqLOjNV2MlknBfww2m6fB4w9mPJahrboD X95WFTUr5Q0XoToHI0Al7yM7+ihwktRCKqc4hViYnS8TnfBKWm5GldxTFmY4uWzu 2Uzv9HdixUaCJx++sUau49Nvn2ALBM5gzhUFX5xecsfs04DxBSzf9Lyz7IRqnC+q khwB67gDGIambEPi3SzNDrn8GNvoDtnhvjjDKW6XrfjbVTsOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGcpJNZ1hAb4IDvimXvD68oq/7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTliZjEyNWUtOTNiMS0z YTdiLTk0YWQtYjEyNTQxNGUwZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVQFP7Dgu3pXAdkiCMFlAOXqljZUujUouA9RC+n5TfT315rTmWH4Wnh l0h6AYoYheAp0xqok0IHDFmejrmAAo5EmU09MGDR1faZ7xZpdSfMi/KkBX/mfHD/ ICrnpViL1tFyPnNCMKcjZMxj/JXYgtfNZVT9ILB4azP7HqkwCjsPwQB4l0vCP04h jnFmkLPIrTcCduwTiM02lN2rnX9Y6pRkqFvuDKKCvay4ftORd03aay+Lv2/zveey L9jO/gz8xD2mIZ8E4zA0sXxB/zO6nsmSAltux/393znmQMH1j/XZs5q4KQuXIl32 xSi09V+E8dLvs8fQQiNcYDiZnXAb9LE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:34 2025 by rpki-client