$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa File: bfef74fc-994c-3502-b355-4ccb17c00e10.roa (raw, json) Hash identifier: JUayPHTdTCzM1zWeNzoBFdA+2qJNkdbeu6+Vot9nNP0= Subject key identifier: 49:75:AF:9F:6E:81:7F:22:8B:37:BC:2B:F6:9A:05:80:67:CE:28:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6CB5DF0B44210893F707B8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.31.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b5:df:0b:44:21:08:93:f7:07:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=1e298811-f013-4bde-96da-6a5b90295f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:99:34:cf:fb:70:f8:55:a5:c3:1d:1f:69:08: b6:e2:c9:5c:85:71:cb:c0:5d:a1:34:df:14:65:31: 75:00:a7:79:95:ac:dd:e5:90:0f:1f:1d:af:62:d1: 2c:39:d3:c9:80:7b:0f:98:3a:e2:0b:fa:0a:5e:8e: 81:bb:62:db:f2:d8:99:60:35:d7:d8:9d:b4:e7:47: 0f:9a:05:5b:28:bf:18:02:30:ed:96:9b:bc:b0:45: 57:ab:36:d7:3b:ea:cb:86:e5:91:15:93:72:11:15: 49:90:ed:94:d9:58:f9:e5:e0:7d:29:e2:37:69:7b: 5f:41:b8:33:14:b6:82:ce:de:46:ed:d2:65:a6:cf: ef:d6:fd:8f:56:24:a7:ba:68:94:c5:71:01:00:3f: ce:10:c5:00:7d:ae:cf:1f:3b:43:df:4a:fb:82:f9: 6e:18:c3:2f:d8:50:f2:92:d2:d6:32:1b:70:54:fe: aa:9f:b4:4f:b0:a9:7f:8a:e1:6f:87:a2:23:36:c3: b0:bf:a2:9a:f7:dd:78:72:3f:f6:da:20:87:98:a8: 5c:91:fc:3b:48:d4:00:6b:6c:b6:09:62:48:9e:03: 1d:26:b1:37:0e:b2:04:01:38:42:80:7e:98:93:00: 7c:a8:09:b7:15:a3:4b:3c:bf:a4:19:3e:5d:e5:df: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:75:AF:9F:6E:81:7F:22:8B:37:BC:2B:F6:9A:05:80:67:CE:28:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3f:3a:04:f2:1b:5b:e6:85:6f:d2:78:6c:02:6c:fd:4e:e9: 04:27:65:61:54:f6:8c:98:85:cd:58:a8:b0:bf:f6:ce:c0:63: 6f:10:22:ba:13:dd:75:1e:81:7e:2f:80:46:10:49:3c:c6:67: b5:55:38:bd:84:ad:50:af:63:31:c4:58:52:9c:e5:f6:d2:eb: 68:45:d5:59:33:0c:ab:78:e0:8f:23:c6:7f:da:12:55:f5:73: 44:20:d5:27:71:58:2e:25:a8:7a:f4:1b:6e:02:4a:af:63:ed: 5d:33:2e:02:eb:55:17:f0:47:c9:28:ad:bf:9f:6e:66:73:7b: 25:ea:4e:ae:29:4a:70:4d:56:fd:f7:d4:ab:a3:94:5a:b5:6e: d8:d6:95:16:34:43:6f:31:65:11:e8:a4:91:56:d0:93:85:4a: 93:c6:fd:a6:da:9d:72:f5:f6:b5:ad:98:f3:2e:8b:6a:0c:b0: eb:80:f7:61:61:c1:fa:98:c3:26:a5:bf:55:5e:10:6a:dd:f6: e9:ca:de:e0:7b:bc:a5:12:b8:37:bc:6f:10:60:cf:3a:66:c8: 9e:a0:fc:e9:1c:d2:12:63:51:a2:7d:c6:f9:c5:9f:5b:20:d6: d2:c2:c4:e9:89:82:b8:c8:e5:86:8d:fc:6d:52:09:40:1f:34: 5d:cd:a2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLXfC0QhCJP3B7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MWUyOTg4MTEtZjAxMy00YmRlLTk2ZGEtNmE1YjkwMjk1ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJk0z/tw+FWlwx0faQi24slchXHLwF2hNN8U ZTF1AKd5lazd5ZAPHx2vYtEsOdPJgHsPmDriC/oKXo6Bu2Lb8tiZYDXX2J2050cP mgVbKL8YAjDtlpu8sEVXqzbXO+rLhuWRFZNyERVJkO2U2Vj55eB9KeI3aXtfQbgz FLaCzt5G7dJlps/v1v2PViSnumiUxXEBAD/OEMUAfa7PHztD30r7gvluGMMv2FDy ktLWMhtwVP6qn7RPsKl/iuFvh6IjNsOwv6Ka9914cj/22iCHmKhckfw7SNQAa2y2 CWJIngMdJrE3DrIEAThCgH6YkwB8qAm3FaNLPL+kGT5d5d9oiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl1r59ugX8iize8K/aaBYBnzigmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlZjc0ZmMtOTk0Yy0z NTAyLWIzNTUtNGNjYjE3YzAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8/OgTyG1vmhW/SeGwCbP1O6QQnZWFU9oyYhc1YqLC/9s7AY28QIroT 3XUegX4vgEYQSTzGZ7VVOL2ErVCvYzHEWFKc5fbS62hF1VkzDKt44I8jxn/aElX1 c0Qg1SdxWC4lqHr0G24CSq9j7V0zLgLrVRfwR8korb+fbmZzeyXqTq4pSnBNVv33 1KujlFq1btjWlRY0Q28xZRHopJFW0JOFSpPG/abanXL19rWtmPMui2oMsOuA92Fh wfqYwyalv1VeEGrd9unK3uB7vKUSuDe8bxBgzzpmyJ6g/Okc0hJjUaJ9xvnFn1sg 1tLCxOmJgrjI5YaN/G1SCUAfNF3Nos4= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:49 2025 by rpki-client