$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa File: afb3a249-923e-3a07-90f3-787e2b08b42a.roa (raw, json) Hash identifier: 3/ZFRGS9H1prKX8sTjdGxTk5CltwILcyWNUN5IVgg/M= Subject key identifier: 8A:56:16:6D:E5:92:CE:EF:9F:E5:1E:89:D3:69:9C:A9:E3:E9:AA:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201D0B5D8D913F709AA12A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.23.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d0:b5:d8:d9:13:f7:09:aa:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=ad06a297-1f43-4fdb-8081-80ce1c94a02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:52:84:41:75:3b:48:a5:f2:18:97:3e:1d:9b: 68:36:a5:38:83:36:58:da:0d:b3:c2:00:34:9b:c5: f5:72:59:b8:c2:d4:70:0f:28:47:0a:ba:85:cc:c9: d0:c9:49:5d:79:21:07:dc:43:79:e7:b3:4f:1b:df: aa:82:d9:a5:29:01:6f:6c:e3:cf:f8:6b:7e:83:a7: 7a:d8:20:9b:b9:e1:3d:82:5d:80:b3:87:68:46:9a: ff:e4:0e:66:a6:ad:d9:ed:42:de:7a:8a:97:43:cb: 61:6b:50:0b:e4:d6:d2:62:f8:aa:e4:06:4d:28:0c: ae:3e:c5:c2:40:7a:07:ac:86:81:28:25:3a:5c:65: 70:3b:88:25:c2:8e:77:87:c6:3b:f8:33:3c:56:01: e8:c5:e1:ce:ce:71:21:58:9b:25:ff:93:01:f0:d7: e4:a3:b2:fb:6c:c0:b8:45:d3:34:6c:34:56:94:77: f0:bb:40:80:35:71:8a:59:a9:cb:86:2e:8d:3c:79: c4:8b:eb:bc:b8:ae:cf:0e:62:0b:17:78:12:19:f7: 84:60:30:4e:4c:91:94:3f:dd:f0:eb:8d:fb:3d:ac: 72:b9:86:5c:4d:6e:09:c9:94:86:43:7a:85:5d:3b: 9f:c6:20:1e:26:f1:73:d6:98:14:6e:a6:f7:e4:eb: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:56:16:6D:E5:92:CE:EF:9F:E5:1E:89:D3:69:9C:A9:E3:E9:AA:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:66:d3:a2:dd:d0:74:b5:0d:32:87:a6:74:c5:70:e7:27:72: 2d:b6:5e:83:b7:49:19:30:77:6e:6b:26:d2:3b:a4:d8:f1:72: d8:da:1f:ec:15:3b:e9:40:25:37:5a:03:0c:3e:3a:ea:b2:6a: da:4b:47:4d:40:ed:f3:72:8e:1b:a4:0d:e3:ec:4a:09:a6:2c: 61:f1:b4:f2:af:5e:7a:d2:8a:31:44:11:8f:6f:5e:46:7c:ea: 76:09:ea:33:ad:6c:27:7a:81:aa:49:88:ff:b6:eb:8e:3c:74: 7e:18:9d:73:93:5d:34:a6:5a:19:6f:2d:44:b2:d2:da:4d:b5: b0:29:f4:70:3a:27:db:f3:31:47:cd:df:00:6a:7b:01:bf:fa: 72:dd:4b:cb:66:84:ce:47:a7:b3:f5:7e:41:a8:ad:e8:85:e4: 3b:a7:43:10:52:89:75:07:a3:a6:f5:24:9f:db:68:b9:e0:e2: a2:3a:fd:01:32:d3:9f:64:78:2b:38:ee:f2:6c:45:9f:81:39: 2c:be:15:45:5e:b9:59:aa:88:fc:f3:0a:1a:14:47:20:2f:ab: 26:22:6f:52:bf:64:60:56:8c:60:75:f2:16:58:fa:cc:31:9e: db:a6:f3:1f:bd:d6:71:86:19:31:4d:b9:f5:ef:1b:a3:fb:ec: eb:51:76:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdC12NkT9wmqEqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWQwNmEyOTctMWY0My00ZmRiLTgwODEtODBjZTFjOTRhMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VKEQXU7SKXyGJc+HZtoNqU4gzZY2g2zwgA0 m8X1clm4wtRwDyhHCrqFzMnQyUldeSEH3EN557NPG9+qgtmlKQFvbOPP+Gt+g6d6 2CCbueE9gl2As4doRpr/5A5mpq3Z7ULeeoqXQ8tha1AL5NbSYviq5AZNKAyuPsXC QHoHrIaBKCU6XGVwO4glwo53h8Y7+DM8VgHoxeHOznEhWJsl/5MB8Nfko7L7bMC4 RdM0bDRWlHfwu0CANXGKWanLhi6NPHnEi+u8uK7PDmILF3gSGfeEYDBOTJGUP93w 6437PaxyuYZcTW4JyZSGQ3qFXTufxiAeJvFz1pgUbqb35Ovb/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpWFm3lks7vn+UeidNpnKnj6aqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWZiM2EyNDktOTIzZS0z YTA3LTkwZjMtNzg3ZTJiMDhiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1m06Ld0HS1DTKHpnTFcOcnci22XoO3SRkwd25rJtI7pNjxctjaH+wV O+lAJTdaAww+OuqyatpLR01A7fNyjhukDePsSgmmLGHxtPKvXnrSijFEEY9vXkZ8 6nYJ6jOtbCd6gapJiP+26448dH4YnXOTXTSmWhlvLUSy0tpNtbAp9HA6J9vzMUfN 3wBqewG/+nLdS8tmhM5Hp7P1fkGoreiF5DunQxBSiXUHo6b1JJ/baLng4qI6/QEy 059keCs47vJsRZ+BOSy+FUVeuVmqiPzzChoURyAvqyYib1K/ZGBWjGB18hZY+swx ntum8x+91nGGGTFNufXvG6P77OtRdow= -----END CERTIFICATE-----Generated at Sat Oct 11 02:42:54 2025 by rpki-client