$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2db7657-e909-3f67-b493-cf5e37543727.roa File: b2db7657-e909-3f67-b493-cf5e37543727.roa (raw, json) Hash identifier: rMEQsiZS2knFtZsY+7pOliqzTKX7xRL7mr38bRxJ3NA= Subject key identifier: 29:A8:80:6D:3D:AA:EC:5A:B6:4A:3D:75:59:1D:67:15:89:33:10:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CDE5C8E896ACE3741DA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2db7657-e909-3f67-b493-cf5e37543727.roa Signing time: Mon 22 Sep 2025 11:57:13 +0000 ROA not before: Mon 22 Sep 2025 11:57:13 +0000 ROA not after: Sun 21 Dec 2025 12:57:13 +0000 asID: 19905 IP address blocks: 173.29.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:de:5c:8e:89:6a:ce:37:41:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:57:13 2025 GMT Not After : Dec 21 12:57:13 2025 GMT Subject: CN=a4b25316-de9b-4fa0-af96-a21cb34f87a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:71:6d:cc:eb:8b:7e:cb:25:64:98:b9:f5: 4c:4c:f1:80:13:3a:03:ab:aa:71:50:e6:4b:0a:6d: 54:11:b5:66:f9:13:e8:11:17:0a:5d:0e:b2:18:fa: d2:7a:5b:b1:b7:0f:47:14:a7:79:dc:cf:8a:3e:55: f7:3f:f6:6c:95:de:2d:39:e6:7d:f4:45:78:57:fe: a5:41:e6:77:b2:8e:0d:ab:bc:82:86:2e:11:67:fb: 90:cc:d8:45:35:3b:31:b4:53:5a:e5:d7:3c:46:f0: 9d:61:37:16:3b:0f:00:c2:b3:5b:b3:a4:b0:a8:8e: 93:0a:57:ee:1c:f2:52:f1:ec:55:15:59:0c:92:4b: d8:bd:b2:67:07:33:9f:4b:c1:49:ed:82:30:77:8c: ff:6b:11:e6:bc:b8:e6:5c:50:1f:e1:56:ea:17:6b: e1:72:dc:47:98:a2:8f:a6:27:de:d5:87:67:e9:d9: 03:9e:7f:5a:4b:e1:72:5e:31:49:d5:e0:33:1b:70: c0:d8:93:ad:0e:66:7e:0d:b3:aa:80:15:03:19:bd: 5e:68:d7:38:28:de:d5:20:fb:5f:70:70:42:2f:f9: b4:66:64:0b:37:48:9c:b7:8e:6c:e0:d6:74:99:67: cd:ca:e2:43:73:80:85:f2:81:3a:e0:9f:79:6f:e0: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A8:80:6D:3D:AA:EC:5A:B6:4A:3D:75:59:1D:67:15:89:33:10:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2db7657-e909-3f67-b493-cf5e37543727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c3:2e:7a:0d:d7:76:cb:1d:18:ad:33:82:9b:26:bc:63:1b: 8b:7f:d8:cb:9b:93:ad:65:34:0a:a3:a6:32:ec:e6:3e:a0:ac: c8:4e:0c:5e:41:78:14:3f:2d:bf:e6:6f:6c:0d:d9:77:84:15: db:ff:ee:52:c5:94:64:7c:a3:5a:7d:21:5e:fe:f7:db:07:34: 29:5d:a7:82:4b:93:57:cf:52:54:e3:7d:86:fc:49:b5:ec:6e: 16:09:3d:f5:97:ca:b4:b5:a7:cb:15:0c:17:7a:fa:b9:3e:c9: 0b:bf:6d:92:8b:e5:16:ad:b1:0f:3f:1b:14:fb:80:30:f8:60: 63:f3:7e:b8:6d:0b:2e:d3:10:ef:b0:c9:a6:33:1e:11:9f:b6: c8:ed:cf:27:08:e8:ff:63:23:26:d9:55:a3:ec:f6:c5:d2:8b: 47:2d:12:29:46:e0:b7:c0:4d:24:dc:ba:3a:39:5c:36:4f:62: f7:7a:d7:25:0b:3c:42:47:8a:ae:87:d7:ec:d4:49:f1:d3:91: e3:98:1d:6c:aa:5c:a9:68:fa:10:0d:b2:55:4d:ad:cf:44:2f: a1:7d:10:4e:e0:f0:80:1e:e4:b9:d1:f2:08:40:56:3b:14:82: 7b:24:9f:8c:b5:6a:a8:f9:1a:5f:ad:87:f7:e9:83:0f:a4:50: 6c:26:18:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXN5cjolqzjdB2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTcxM1oXDTI1MTIyMTEyNTcxM1owLzEtMCsGA1UEAxMk YTRiMjUzMTYtZGU5Yi00ZmEwLWFmOTYtYTIxY2IzNGY4N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Vxbczri37LJWSYufVMTPGAEzoDq6pxUOZL Cm1UEbVm+RPoERcKXQ6yGPrSeluxtw9HFKd53M+KPlX3P/Zsld4tOeZ99EV4V/6l QeZ3so4Nq7yChi4RZ/uQzNhFNTsxtFNa5dc8RvCdYTcWOw8AwrNbs6SwqI6TClfu HPJS8exVFVkMkkvYvbJnBzOfS8FJ7YIwd4z/axHmvLjmXFAf4VbqF2vhctxHmKKP pife1Ydn6dkDnn9aS+FyXjFJ1eAzG3DA2JOtDmZ+DbOqgBUDGb1eaNc4KN7VIPtf cHBCL/m0ZmQLN0ict45s4NZ0mWfNyuJDc4CF8oE64J95b+AhOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmogG09quxatko9dVkdZxWJMxANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJkYjc2NTctZTkwOS0z ZjY3LWI0OTMtY2Y1ZTM3NTQzNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/DLnoN13bLHRitM4KbJrxjG4t/2Mubk61lNAqjpjLs5j6grMhODF5B eBQ/Lb/mb2wN2XeEFdv/7lLFlGR8o1p9IV7+99sHNCldp4JLk1fPUlTjfYb8SbXs bhYJPfWXyrS1p8sVDBd6+rk+yQu/bZKL5RatsQ8/GxT7gDD4YGPzfrhtCy7TEO+w yaYzHhGftsjtzycI6P9jIybZVaPs9sXSi0ctEilG4LfATSTcujo5XDZPYvd61yUL PEJHiq6H1+zUSfHTkeOYHWyqXKlo+hANslVNrc9EL6F9EE7g8IAe5LnR8ghAVjsU gnskn4y1aqj5Gl+th/fpgw+kUGwmGGM= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:19 2025 by rpki-client