$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b149fe5b-32f8-310f-9de3-01caf0c2d4e2.roa File: b149fe5b-32f8-310f-9de3-01caf0c2d4e2.roa (raw, json) Hash identifier: EeB1bhgJ8qmlCQelwyVvRlepVqPEjmvNFpMMasHu0bc= Subject key identifier: 2B:8C:4A:91:A0:12:E6:3B:0D:FB:53:B2:6A:D1:7A:B2:43:40:4D:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6172CFBAF81FA3377F1DED60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b149fe5b-32f8-310f-9de3-01caf0c2d4e2.roa Signing time: Wed 01 Oct 2025 20:12:26 +0000 ROA not before: Wed 01 Oct 2025 20:12:26 +0000 ROA not after: Tue 30 Dec 2025 21:12:26 +0000 asID: 19905 IP address blocks: 173.22.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:72:cf:ba:f8:1f:a3:37:7f:1d:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:12:26 2025 GMT Not After : Dec 30 21:12:26 2025 GMT Subject: CN=d6de6cf9-d63b-40ba-a91f-ed55e37affac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:81:19:8e:60:54:66:9d:e0:bf:0b:c8:ba: 95:2c:9e:04:af:82:b5:ee:d2:51:24:76:39:1b:ce: 49:80:8c:21:b6:e0:51:ba:b8:1c:34:a8:9b:2a:02: 83:25:f9:fc:fe:03:ed:ac:3e:3b:4c:d0:ab:a9:57: 46:fd:ac:ce:b2:53:27:a9:50:9d:ee:be:97:1b:ba: e0:60:e0:f5:e0:5b:05:dc:5b:7b:86:56:68:81:aa: 30:4c:65:94:db:71:94:a5:30:c1:d1:89:d3:32:60: 2d:47:ec:55:84:8b:c7:c8:9b:e3:ba:fb:b7:6b:73: f8:04:9c:a9:3d:09:56:a2:78:da:0c:0c:6a:10:20: 7c:1b:bf:98:2a:bc:30:0b:68:19:c1:2b:0a:a4:a1: 65:3b:b1:53:ec:49:b2:43:87:75:c4:a1:4a:f8:70: bd:b6:d1:73:b2:30:d8:cc:c4:62:e1:ce:12:0a:0e: 55:23:81:2a:7c:b0:47:f3:d9:9f:eb:c1:50:9e:93: cd:23:d2:79:a3:78:e5:7e:d6:90:c2:e1:27:a2:55: 9e:ed:66:dc:7f:ef:41:b1:e1:79:ac:b8:20:35:16: 05:9b:f5:87:da:b8:55:39:5f:00:67:c2:57:c0:77: 49:04:be:52:09:ee:46:3f:4a:80:dd:f5:65:07:5f: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8C:4A:91:A0:12:E6:3B:0D:FB:53:B2:6A:D1:7A:B2:43:40:4D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b149fe5b-32f8-310f-9de3-01caf0c2d4e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d4:29:45:b4:17:91:c8:d7:8e:ee:81:b5:74:e9:9c:92:02: 48:56:4c:d5:93:3d:44:a6:b2:9b:df:bb:31:72:bd:1a:5b:98: 48:09:f3:72:fa:13:f6:fa:45:25:92:e4:79:98:33:90:ab:ee: 91:f6:c2:48:b7:15:d7:09:0f:19:73:c7:24:8c:5c:82:e1:ed: 7e:05:07:7f:ec:98:7a:ca:b6:78:bb:3c:71:13:7f:bb:27:fd: 75:57:b6:11:c2:f8:10:a0:00:cf:25:82:ee:e8:11:43:91:d8: 10:eb:15:f5:d4:21:d6:2e:48:df:e7:84:af:fd:79:02:a6:4b: 05:0e:75:51:1a:c5:2a:a5:7e:cc:00:ba:e7:f2:eb:5f:53:63: d7:19:83:0e:67:04:a3:ee:ce:35:23:63:93:e3:38:58:dd:26: 7f:7b:61:50:4d:1e:1a:d1:be:79:c7:44:17:95:c5:53:2e:8f: 02:b1:e7:e1:12:17:d0:3f:21:45:48:5c:aa:70:03:50:06:3b: b1:30:8b:d6:bf:8a:35:6f:fe:01:3a:99:d5:08:f3:d6:99:aa: 53:fa:33:3b:42:55:8e:40:e7:9f:2b:ee:60:bd:cf:d7:c2:7d: e7:a0:bc:74:68:b7:af:a1:f2:d7:17:9e:8e:70:d5:e0:1a:ae: 0c:d6:95:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthcs+6+B+jN38d7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTIyNloXDTI1MTIzMDIxMTIyNlowLzEtMCsGA1UEAxMk ZDZkZTZjZjktZDYzYi00MGJhLWE5MWYtZWQ1NWUzN2FmZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitSBGY5gVGad4L8LyLqVLJ4Er4K17tJRJHY5 G85JgIwhtuBRurgcNKibKgKDJfn8/gPtrD47TNCrqVdG/azOslMnqVCd7r6XG7rg YOD14FsF3Ft7hlZogaowTGWU23GUpTDB0YnTMmAtR+xVhIvHyJvjuvu3a3P4BJyp PQlWonjaDAxqECB8G7+YKrwwC2gZwSsKpKFlO7FT7EmyQ4d1xKFK+HC9ttFzsjDY zMRi4c4SCg5VI4EqfLBH89mf68FQnpPNI9J5o3jlftaQwuEnolWe7Wbcf+9BseF5 rLggNRYFm/WH2rhVOV8AZ8JXwHdJBL5SCe5GP0qA3fVlB1/+uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuMSpGgEuY7DftTsmrRerJDQE1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjE0OWZlNWItMzJmOC0z MTBmLTlkZTMtMDFjYWYwYzJkNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3UKUW0F5HI147ugbV06ZySAkhWTNWTPUSmspvfuzFyvRpbmEgJ83L6 E/b6RSWS5HmYM5Cr7pH2wki3FdcJDxlzxySMXILh7X4FB3/smHrKtni7PHETf7sn /XVXthHC+BCgAM8lgu7oEUOR2BDrFfXUIdYuSN/nhK/9eQKmSwUOdVEaxSqlfswA uufy619TY9cZgw5nBKPuzjUjY5PjOFjdJn97YVBNHhrRvnnHRBeVxVMujwKx5+ES F9A/IUVIXKpwA1AGO7Ewi9a/ijVv/gE6mdUI89aZqlP6MztCVY5A558r7mC9z9fC feegvHRot6+h8tcXno5w1eAargzWlbo= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:29 2025 by rpki-client