$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2242f73-36e1-3eaf-837b-94b15ed9b6c8.roa File: c2242f73-36e1-3eaf-837b-94b15ed9b6c8.roa (raw, json) Hash identifier: vq147P8mOhFoM7d/gFBJx+S2gtzT3qh2aUxB/CyrgPs= Subject key identifier: C3:B6:A2:84:A9:29:F8:DF:F5:90:48:64:41:0A:B0:19:A7:64:58:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C7431D28F800B626ACE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2242f73-36e1-3eaf-837b-94b15ed9b6c8.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.23.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:74:31:d2:8f:80:0b:62:6a:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=6b10f493-eae1-439b-a0f9-73f5f986d6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:5f:cf:11:3b:bf:f5:6e:28:9c:1d:65:71: 78:f5:5f:04:9d:1b:6a:72:15:79:88:8b:f7:25:58: 81:36:27:c7:8e:ce:9d:a0:55:7a:5b:4a:30:22:8d: 47:c7:10:72:60:d6:8c:14:01:d9:bd:6e:6c:4b:f3: f9:da:3f:59:2a:9e:7b:2d:65:d9:9d:7d:1d:f4:e2: 72:b0:37:80:45:5c:8b:8d:58:d4:38:4c:1e:fb:10: dd:c4:30:68:f6:eb:1d:3d:64:00:db:a0:7d:ef:f9: c5:e1:30:1c:c6:f8:c9:b4:30:34:c8:f6:77:59:5e: 31:3e:5c:18:25:5e:d6:20:b0:b1:5c:51:0d:43:c0: 8e:d6:86:a3:52:d2:d1:a1:91:92:5a:af:9e:3d:56: 85:55:64:60:59:2b:43:fd:c1:07:84:bb:dd:8d:47: ec:2d:0d:31:ee:b1:28:cd:77:f7:d5:f3:a9:f4:94: 66:fa:74:63:0a:59:ea:a6:cd:26:67:bd:18:bd:58: ca:c8:2f:59:b9:34:98:30:88:8f:01:47:03:3e:27: 02:81:8e:37:56:12:9f:83:c1:d4:9f:e5:36:9f:73: 87:16:60:41:7f:a8:0f:20:4a:b2:c0:22:8f:a3:01: 47:2a:ab:d4:8d:7a:6b:dd:28:e9:fb:36:19:fe:ad: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B6:A2:84:A9:29:F8:DF:F5:90:48:64:41:0A:B0:19:A7:64:58:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2242f73-36e1-3eaf-837b-94b15ed9b6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:26:45:fa:dd:11:af:e9:dd:2c:a3:43:77:12:3d:d6:e1:9f: e4:b9:00:2f:eb:68:ca:d6:e6:fc:eb:e9:02:15:83:c5:70:f0: b2:9b:33:a2:27:27:eb:98:55:6f:b9:4a:4e:17:66:ca:6a:2e: 34:6f:03:c6:45:ce:48:c0:c5:83:a6:3a:8d:d4:c2:52:a2:a8: 92:c7:b8:7a:cb:4e:a8:af:5c:4f:8a:44:04:2b:a6:e3:ab:6a: dc:45:d3:5a:fb:52:ff:02:ce:e8:46:7c:7a:91:1c:a5:c4:4a: 52:cf:e8:f0:42:2e:f5:69:79:02:64:66:f6:15:88:32:5f:5a: 91:7a:71:08:d6:27:cf:e4:19:0f:7e:91:b0:a2:f3:d1:aa:fe: 04:ac:90:33:12:6c:9c:2a:a5:be:7c:4b:06:d8:d3:93:f4:19: 34:2d:0a:4e:3e:63:a2:3b:a5:34:b9:58:8a:b7:52:d7:ef:2a: 81:23:7e:50:6a:cf:c0:11:28:3c:ce:e3:64:8d:e9:f7:81:19: 5c:c2:c4:87:32:79:df:c0:aa:77:1d:aa:a6:d4:9e:76:d1:1a: 5b:9a:34:81:93:2c:9c:e3:d3:a4:1b:75:e9:6e:f4:7d:4f:ce: d2:6a:be:52:1d:86:fd:77:42:a2:24:d9:bd:0b:ae:ae:f8:3b: e9:8d:21:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHQx0o+AC2JqzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NmIxMGY0OTMtZWFlMS00MzliLWEwZjktNzNmNWY5ODZkNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnlfzxE7v/VuKJwdZXF49V8EnRtqchV5iIv3 JViBNifHjs6doFV6W0owIo1HxxByYNaMFAHZvW5sS/P52j9ZKp57LWXZnX0d9OJy sDeARVyLjVjUOEwe+xDdxDBo9usdPWQA26B97/nF4TAcxvjJtDA0yPZ3WV4xPlwY JV7WILCxXFENQ8CO1oajUtLRoZGSWq+ePVaFVWRgWStD/cEHhLvdjUfsLQ0x7rEo zXf31fOp9JRm+nRjClnqps0mZ70YvVjKyC9ZuTSYMIiPAUcDPicCgY43VhKfg8HU n+U2n3OHFmBBf6gPIEqywCKPowFHKqvUjXpr3Sjp+zYZ/q2d3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO2ooSpKfjf9ZBIZEEKsBmnZFjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzIyNDJmNzMtMzZlMS0z ZWFmLTgzN2ItOTRiMTVlZDliNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4mRfrdEa/p3SyjQ3cSPdbhn+S5AC/raMrW5vzr6QIVg8Vw8LKbM6In J+uYVW+5Sk4XZspqLjRvA8ZFzkjAxYOmOo3UwlKiqJLHuHrLTqivXE+KRAQrpuOr atxF01r7Uv8CzuhGfHqRHKXESlLP6PBCLvVpeQJkZvYViDJfWpF6cQjWJ8/kGQ9+ kbCi89Gq/gSskDMSbJwqpb58SwbY05P0GTQtCk4+Y6I7pTS5WIq3UtfvKoEjflBq z8ARKDzO42SN6feBGVzCxIcyed/AqncdqqbUnnbRGluaNIGTLJzj06Qbdelu9H1P ztJqvlIdhv13QqIk2b0Lrq74O+mNIeo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:43 2025 by rpki-client