$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c220597b-a935-3eca-8172-4ff7b099f2e2.roa File: c220597b-a935-3eca-8172-4ff7b099f2e2.roa (raw, json) Hash identifier: fSNXuzNpG9t9Nf/u9um+3xMMPAbQFJc4zJiKDDSdmOs= Subject key identifier: C2:78:95:6E:A7:F0:AA:C4:E4:EA:51:34:83:6C:D2:F3:B6:8F:3C:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6CB343B9BD2311F8E46D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c220597b-a935-3eca-8172-4ff7b099f2e2.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.23.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b3:43:b9:bd:23:11:f8:e4:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=1407c942-b806-430c-adc2-548161a41b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:80:4e:a3:35:63:c1:66:5a:25:ee:52:c2: 24:6f:ca:4f:cf:d4:51:da:26:50:fa:52:71:1c:57: 07:46:85:5f:90:b5:f0:17:95:04:7b:d4:06:a2:b0: 19:b1:77:25:d3:f8:79:a1:40:c7:28:90:e7:ca:0f: 78:12:4e:8d:d8:3c:79:88:c1:2f:bb:34:0e:4a:12: a6:4b:85:a8:c1:fa:9b:86:1e:43:d6:fe:e1:a6:64: a0:85:fb:f2:d9:e1:96:27:74:99:31:70:d1:45:35: d8:ac:70:b5:86:fc:50:c2:ea:86:1c:9b:82:9f:b2: 0e:1e:c2:a9:fd:18:f7:00:16:8e:ba:83:3c:8f:9c: 80:d8:47:94:c5:2e:9c:a9:dc:a5:f1:da:47:e9:e1: 2e:3b:7c:e0:f3:b9:0b:45:1d:02:05:31:ad:4f:eb: 92:13:e2:b8:9c:48:f5:aa:66:67:21:d8:85:28:4d: 90:0e:e1:a5:c2:e6:59:86:80:9f:58:20:04:f0:23: 06:e7:be:3e:4a:d0:4e:a0:08:9b:77:34:92:0f:e4: 58:07:ee:e2:2a:b8:e7:d9:d9:3d:d1:22:79:e7:87: c6:ea:a2:d5:03:90:ff:df:18:1e:bc:ea:04:d3:22: f6:3d:2a:1d:8e:40:ab:3a:c5:8f:69:f6:a2:d8:fe: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:78:95:6E:A7:F0:AA:C4:E4:EA:51:34:83:6C:D2:F3:B6:8F:3C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c220597b-a935-3eca-8172-4ff7b099f2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ca:90:bc:d2:ef:f3:5b:d8:2c:e1:56:e3:98:92:0b:48:d8: 3f:c6:15:8b:0d:bf:bb:71:d3:e8:48:39:56:0e:bf:bf:df:83: 85:66:4d:42:cb:4a:33:d3:53:a0:09:1d:91:85:8c:a3:d3:2c: a6:63:53:c1:85:1e:29:cf:8a:b2:15:81:4d:5a:1f:e0:51:ed: f8:40:f5:73:17:6e:b3:b0:d2:ef:69:8c:d8:b7:bb:8d:5a:72: 58:7b:84:f1:c7:c4:3b:4d:41:ed:96:75:65:61:f7:34:06:ed: 27:e1:a6:4d:e9:5f:a3:c1:e9:2b:a8:7c:10:5a:5c:df:a8:c5: 65:38:56:f7:d7:e5:b9:ea:44:85:85:25:e4:90:41:52:42:f2: f9:e9:a5:16:ff:cb:7d:78:a7:ab:45:9e:41:a9:9b:6c:93:96: b2:6c:4b:71:7b:a7:83:91:0c:a8:12:26:5b:31:78:08:c9:86: 06:07:de:fb:2d:de:d1:7c:2a:43:8d:fc:35:e1:1b:08:e6:02: 10:9b:8f:f5:c5:12:d7:14:4c:53:d6:32:6f:40:45:0c:2b:8a: 6e:92:c2:a5:f6:e6:1d:87:b9:36:c5:ad:c2:5b:45:dd:a6:4a: dc:e4:52:3c:4c:ef:e8:62:65:49:71:0a:ab:38:ef:49:42:bc: ea:4c:b4:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLNDub0jEfjkbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MTQwN2M5NDItYjgwNi00MzBjLWFkYzItNTQ4MTYxYTQxYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzKATqM1Y8FmWiXuUsIkb8pPz9RR2iZQ+lJx HFcHRoVfkLXwF5UEe9QGorAZsXcl0/h5oUDHKJDnyg94Ek6N2Dx5iMEvuzQOShKm S4Wowfqbhh5D1v7hpmSghfvy2eGWJ3SZMXDRRTXYrHC1hvxQwuqGHJuCn7IOHsKp /Rj3ABaOuoM8j5yA2EeUxS6cqdyl8dpH6eEuO3zg87kLRR0CBTGtT+uSE+K4nEj1 qmZnIdiFKE2QDuGlwuZZhoCfWCAE8CMG574+StBOoAibdzSSD+RYB+7iKrjn2dk9 0SJ554fG6qLVA5D/3xgevOoE0yL2PSodjkCrOsWPafai2P7v3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ4lW6n8KrE5OpRNINs0vO2jzwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzIyMDU5N2ItYTkzNS0z ZWNhLTgxNzItNGZmN2IwOTlmMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfKkLzS7/Nb2CzhVuOYkgtI2D/GFYsNv7tx0+hIOVYOv7/fg4VmTULL SjPTU6AJHZGFjKPTLKZjU8GFHinPirIVgU1aH+BR7fhA9XMXbrOw0u9pjNi3u41a clh7hPHHxDtNQe2WdWVh9zQG7Sfhpk3pX6PB6SuofBBaXN+oxWU4VvfX5bnqRIWF JeSQQVJC8vnppRb/y314p6tFnkGpm2yTlrJsS3F7p4ORDKgSJlsxeAjJhgYH3vst 3tF8KkON/DXhGwjmAhCbj/XFEtcUTFPWMm9ARQwrim6SwqX25h2HuTbFrcJbRd2m StzkUjxM7+hiZUlxCqs470lCvOpMtHM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:14 2025 by rpki-client