$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa File: b85ae6d7-e6f8-347c-9094-7c500122ea64.roa (raw, json) Hash identifier: p1RDmK1kf9qOw70r4K2p4vU1CpO5S7LLaAjhPq+VqI8= Subject key identifier: A1:F1:26:76:2A:61:EB:AE:93:4D:E0:67:08:64:4E:F4:3F:DD:E4:A4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797F10D431CDA04D72C8A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.16.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f1:0d:43:1c:da:04:d7:2c:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=720af390-95c4-480a-8a02-5b4c8ac2881e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:ee:e4:2b:3f:57:d5:6a:25:7e:90:9c:c9: 4c:5e:74:48:f7:93:0f:6f:4a:a3:f1:65:4b:57:20: 98:fc:a4:50:f4:fa:c7:42:45:ee:05:cb:b2:95:11: 75:98:48:be:4f:43:4c:0f:61:37:7c:9c:54:b2:7c: f1:fb:7b:a2:36:69:0e:c1:c0:55:a9:8a:3b:39:06: 10:c6:67:0c:30:0a:25:cf:ac:ee:bf:91:2e:0c:5d: f6:58:13:c9:5a:8b:19:8d:13:f6:be:30:b2:d1:e5: 00:34:6a:ce:41:b9:17:f3:ca:89:13:97:50:76:e7: 4c:1d:bb:d1:93:56:62:80:03:df:1a:15:d0:17:11: 82:e7:a6:23:66:74:d5:55:c2:88:09:92:83:4b:f4: cc:e7:a9:53:c9:cf:48:e4:dc:37:70:1f:83:58:5b: 1e:5e:93:89:87:12:e9:5d:95:1c:f1:43:cc:e4:9c: f5:50:47:e0:92:0d:91:ac:2e:f3:9a:b8:63:1f:f1: a3:cb:82:ad:15:14:fe:ec:08:dd:34:a1:b8:df:d4: 7c:ab:c9:3e:02:9e:01:a8:42:10:fc:8e:14:c2:eb: f2:2b:42:02:50:6f:2e:e6:18:ca:65:0f:5d:29:4a: 82:c2:7d:47:7f:fd:e0:dd:b6:d5:e1:27:3e:ad:ba: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F1:26:76:2A:61:EB:AE:93:4D:E0:67:08:64:4E:F4:3F:DD:E4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7b:f4:c3:58:c1:02:87:91:f8:0d:03:ab:95:9d:b8:76:ea: cc:01:0a:df:1f:16:ba:0e:4a:09:84:51:07:1c:82:a9:9c:f3: 59:b0:22:12:99:a8:84:41:9f:19:36:89:69:6d:a9:7b:36:b7: f8:c1:ad:1b:3c:b2:63:c4:42:c7:5b:52:68:77:75:d9:5b:e3: 78:12:9a:f7:5e:d1:fa:26:ec:c6:11:db:32:70:bb:ba:6c:e1: 5e:16:9c:d1:25:46:78:41:89:5f:63:68:de:c7:08:93:81:4c: 0e:9c:3c:41:e7:21:fd:e0:e8:6b:74:19:cc:d6:e4:60:b1:df: 95:9e:da:23:ca:4b:cb:c9:58:91:2f:fc:22:ae:fd:7f:ea:67: 28:6d:b7:64:19:60:f5:0e:12:d9:47:6a:65:f8:d6:46:3e:30: c6:ce:05:04:08:20:f4:9d:a2:41:6a:8a:04:cb:b2:6d:fa:b4: 05:0f:7d:4f:3d:2f:5d:8b:65:1f:5d:31:14:6b:af:fe:22:cb: e6:56:af:30:18:41:42:0a:62:8d:71:6f:7c:d3:12:65:31:56: e9:7d:ba:e0:1f:32:66:80:3d:89:3f:80:86:50:57:9a:f5:8c: 71:92:bc:c7:37:43:21:39:81:22:d6:73:92:e1:de:8b:82:11: 03:ef:f5:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/ENQxzaBNcsioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzIwYWYzOTAtOTVjNC00ODBhLThhMDItNWI0YzhhYzI4ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Hu5Cs/V9VqJX6QnMlMXnRI95MPb0qj8WVL VyCY/KRQ9PrHQkXuBcuylRF1mEi+T0NMD2E3fJxUsnzx+3uiNmkOwcBVqYo7OQYQ xmcMMAolz6zuv5EuDF32WBPJWosZjRP2vjCy0eUANGrOQbkX88qJE5dQdudMHbvR k1ZigAPfGhXQFxGC56YjZnTVVcKICZKDS/TM56lTyc9I5Nw3cB+DWFseXpOJhxLp XZUc8UPM5Jz1UEfgkg2RrC7zmrhjH/Gjy4KtFRT+7AjdNKG439R8q8k+Ap4BqEIQ /I4UwuvyK0ICUG8u5hjKZQ9dKUqCwn1Hf/3g3bbV4Sc+rbrefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHxJnYqYeuuk03gZwhkTvQ/3eSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjg1YWU2ZDctZTZmOC0z NDdjLTkwOTQtN2M1MDAxMjJlYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD179MNYwQKHkfgNA6uVnbh26swBCt8fFroOSgmEUQccgqmc81mwIhKZ qIRBnxk2iWltqXs2t/jBrRs8smPEQsdbUmh3ddlb43gSmvde0fom7MYR2zJwu7ps 4V4WnNElRnhBiV9jaN7HCJOBTA6cPEHnIf3g6Gt0GczW5GCx35We2iPKS8vJWJEv /CKu/X/qZyhtt2QZYPUOEtlHamX41kY+MMbOBQQIIPSdokFqigTLsm36tAUPfU89 L12LZR9dMRRrr/4iy+ZWrzAYQUIKYo1xb3zTEmUxVul9uuAfMmaAPYk/gIZQV5r1 jHGSvMc3QyE5gSLWc5Lh3ouCEQPv9Yg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:19 2025 by rpki-client