$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa File: b6bab816-d4d8-3af5-adf4-707f711c713e.roa (raw, json) Hash identifier: DQfDGoYlefBbraxIAI8onP5h9x/8TptNlk7MQOizpVs= Subject key identifier: 8A:34:23:D1:59:58:29:D2:53:36:94:4B:16:C1:C4:18:44:1E:42:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCA2D415D7F281D0411BE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.29.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a2:d4:15:d7:f2:81:d0:41:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4d63cad6-6db7-4bd6-b769-02db5fff7231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:a6:09:d0:cd:09:70:e4:f9:cb:73:c7:27: fa:a9:0a:d0:f5:f7:51:5f:0e:c8:59:4f:44:26:17: ed:94:c5:37:f6:3d:28:e1:ee:94:fb:0a:ed:b4:20: 44:73:14:7f:f3:a5:30:75:d7:e1:33:3a:16:f1:4f: 5e:78:90:89:cd:d9:9c:1e:99:2c:c6:73:f2:1a:21: c2:fe:f2:7e:67:bd:0a:06:ce:65:3d:ed:48:1f:e1: 4c:91:23:26:a1:ea:75:44:dc:32:7d:bf:ff:43:47: c1:65:5b:1c:85:b2:70:0b:65:a1:59:6e:9f:ec:fc: d7:e9:c9:e3:7f:c0:97:55:7e:bb:ca:e2:18:31:e7: 2e:be:14:99:bb:05:ba:8a:c1:c5:78:72:c6:5d:13: 39:b8:3f:d0:01:93:17:38:b4:a9:d2:49:03:fd:05: a0:47:bb:46:7f:81:e5:cd:b9:43:34:3c:e1:bb:4d: 7c:c3:fe:e0:05:23:02:fd:e5:bc:d5:17:5a:de:b7: d3:f2:39:44:6a:2b:e9:d5:cb:51:3b:ad:df:d0:a6: 9c:2a:4a:0d:5a:d7:92:67:ca:ac:27:b2:81:79:b9: aa:a5:b0:6d:68:3a:ac:7c:90:73:e4:bd:f9:a1:3a: 35:09:ff:e0:dd:d4:1b:31:1d:ca:50:e2:87:34:4b: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:34:23:D1:59:58:29:D2:53:36:94:4B:16:C1:C4:18:44:1E:42:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:44:a7:fd:eb:f6:93:98:28:bb:af:09:69:b0:88:81:a3:15: 45:8c:87:3c:08:87:65:3a:c1:62:c0:1e:f0:ed:ae:1e:69:73: 1f:08:db:99:ca:82:84:63:84:8f:84:00:9f:32:94:b8:ad:1f: 55:0f:a5:e6:0f:db:df:ae:99:99:6f:b3:54:ed:ae:fa:f6:cc: 82:34:41:e5:f4:59:a5:b6:15:7f:74:5c:d6:23:5a:d5:69:2b: 89:20:ac:f8:1d:bd:c4:6c:8c:c4:9e:56:97:3b:65:dc:3b:1c: 16:df:45:46:40:82:b2:53:2a:c9:11:69:ed:0a:c1:d4:40:a1: a3:d8:01:f4:96:29:51:63:07:b3:9e:29:49:78:26:4b:21:41: b5:6b:2c:1f:2c:b6:a0:9d:5d:88:f7:ca:83:92:14:ea:75:35: a7:4c:db:23:30:a7:6f:22:bf:57:c7:62:f4:08:cd:5a:78:56: 57:c1:1c:05:c6:1e:1f:bb:52:eb:ad:6a:20:96:2a:61:94:32: a5:0c:be:da:d9:38:b8:d1:4f:c1:38:42:cb:77:7c:3c:ae:cf: 41:48:c8:b2:4c:a9:8e:02:18:59:82:61:d6:2b:77:eb:30:53: 51:c8:5a:71:48:fe:eb:0e:3a:64:15:9b:1d:26:4c:aa:2c:a2: 08:37:44:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKLUFdfygdBBG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGQ2M2NhZDYtNmRiNy00YmQ2LWI3NjktMDJkYjVmZmY3MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHumCdDNCXDk+ctzxyf6qQrQ9fdRXw7IWU9E JhftlMU39j0o4e6U+wrttCBEcxR/86UwddfhMzoW8U9eeJCJzdmcHpksxnPyGiHC /vJ+Z70KBs5lPe1IH+FMkSMmoep1RNwyfb//Q0fBZVschbJwC2WhWW6f7PzX6cnj f8CXVX67yuIYMecuvhSZuwW6isHFeHLGXRM5uD/QAZMXOLSp0kkD/QWgR7tGf4Hl zblDNDzhu018w/7gBSMC/eW81Rda3rfT8jlEaivp1ctRO63f0KacKkoNWteSZ8qs J7KBebmqpbBtaDqsfJBz5L35oTo1Cf/g3dQbMR3KUOKHNEt5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo0I9FZWCnSUzaUSxbBxBhEHkKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjZiYWI4MTYtZDRkOC0z YWY1LWFkZjQtNzA3ZjcxMWM3MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9Ep/3r9pOYKLuvCWmwiIGjFUWMhzwIh2U6wWLAHvDtrh5pcx8I25nK goRjhI+EAJ8ylLitH1UPpeYP29+umZlvs1Ttrvr2zII0QeX0WaW2FX90XNYjWtVp K4kgrPgdvcRsjMSeVpc7Zdw7HBbfRUZAgrJTKskRae0KwdRAoaPYAfSWKVFjB7Oe KUl4JkshQbVrLB8stqCdXYj3yoOSFOp1NadM2yMwp28iv1fHYvQIzVp4VlfBHAXG Hh+7UuutaiCWKmGUMqUMvtrZOLjRT8E4Qst3fDyuz0FIyLJMqY4CGFmCYdYrd+sw U1HIWnFI/usOOmQVmx0mTKosogg3RDs= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:40 2025 by rpki-client