$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3374c1d-0451-3e9f-9d32-e8931dde985f.roa File: c3374c1d-0451-3e9f-9d32-e8931dde985f.roa (raw, json) Hash identifier: giBPrLwfgpb/Dh/brI29i8OaxIvreed1BNSjeR4whOI= Subject key identifier: B9:78:EA:F2:B8:F3:C0:E1:E9:C6:62:F3:1D:5E:36:3C:FD:26:85:D1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D72B0B3D97E0CA872D2C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3374c1d-0451-3e9f-9d32-e8931dde985f.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.16.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:2b:0b:3d:97:e0:ca:87:2d:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=6fee3a36-3b94-46f5-814a-e74e08218397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:fd:67:00:d0:5a:9e:ae:22:aa:03:87:4d: 88:04:00:74:d9:ad:9e:32:8e:67:f6:4d:fa:bc:43: 9a:9e:97:a1:c2:c0:d1:ca:70:06:84:5f:71:b9:76: b8:3d:2f:e5:67:5d:db:08:a2:c5:21:2b:e6:fb:55: 9c:10:7c:f6:6d:61:e9:38:ef:10:df:da:36:a2:ed: 02:ad:af:0f:4d:15:cf:94:5e:a9:20:5c:1a:93:0a: 76:5d:9f:ed:18:a2:a3:f6:9e:c0:ca:e1:0d:ee:d6: 28:79:61:c8:31:97:f6:f5:79:65:a9:ad:ba:7d:b6: ce:bb:58:dd:f7:d0:e0:8e:8d:47:86:f5:43:01:8c: 69:3d:e6:0d:46:c6:2f:bd:42:6a:a9:aa:07:d2:02: 0e:31:4c:b0:42:85:49:1f:e2:4a:06:1e:20:52:09: cf:66:80:33:4e:c6:2d:d0:68:60:6b:dc:5b:fa:fa: 1f:22:00:73:fc:53:45:97:92:f7:a7:d5:ce:82:f8: 94:3d:dd:f3:49:60:c8:76:69:86:8d:f1:aa:3d:91: 50:38:fb:29:5e:13:49:63:f6:23:39:02:03:58:f3: 84:9b:33:f7:f8:29:8b:6a:03:4e:b7:8d:ca:d4:cc: 3e:e2:a7:97:ba:b5:b9:4b:d4:c4:4c:02:b8:e0:0e: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:78:EA:F2:B8:F3:C0:E1:E9:C6:62:F3:1D:5E:36:3C:FD:26:85:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3374c1d-0451-3e9f-9d32-e8931dde985f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5f:31:d0:57:e6:4e:e4:13:aa:8b:57:11:d4:f9:8d:b1:8a: 88:bf:f2:7d:54:09:58:a0:89:5c:6c:4c:76:f7:df:2b:5e:33: 9e:aa:4e:b6:3b:33:8d:66:f5:0c:0e:6f:6e:71:4d:d3:44:27: 6e:ae:9c:8e:1b:3f:da:62:e7:c8:b1:c3:b5:76:4a:bc:f5:b5: c7:73:0c:83:e0:b5:35:38:15:2c:63:01:bd:7d:2a:56:95:9b: 84:1b:7e:70:a6:48:4f:85:43:ed:cf:37:6f:95:bb:4f:fa:98: 80:9c:d6:80:ce:50:fd:f9:e3:cd:9e:67:9f:39:b8:ba:d8:65: e8:c2:c7:86:3c:55:4c:ff:cd:54:ee:fa:20:18:c2:05:8e:03: 83:75:24:b8:0a:fe:d6:98:32:75:36:3a:e5:12:4d:4f:e5:66: 78:2e:05:44:8f:f1:e0:7f:18:2b:0a:5e:d5:53:09:12:c5:d5: ef:60:55:bb:91:8f:1a:ed:a0:52:e1:ae:e6:62:d9:ff:44:3b: f0:68:b2:09:e1:9a:2e:09:e6:af:47:02:ac:6e:59:8b:b4:f9: 99:d3:d7:01:57:67:4e:3a:2e:43:a6:cd:3e:70:d8:47:e6:e3: b7:7a:60:ce:3c:3a:02:74:fc:f1:a4:a0:30:1a:07:1a:60:b6: 66:64:02:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1ysLPZfgyoctLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NmZlZTNhMzYtM2I5NC00NmY1LTgxNGEtZTc0ZTA4MjE4Mzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0D9ZwDQWp6uIqoDh02IBAB02a2eMo5n9k36 vEOanpehwsDRynAGhF9xuXa4PS/lZ13bCKLFISvm+1WcEHz2bWHpOO8Q39o2ou0C ra8PTRXPlF6pIFwakwp2XZ/tGKKj9p7AyuEN7tYoeWHIMZf29Xllqa26fbbOu1jd 99Dgjo1HhvVDAYxpPeYNRsYvvUJqqaoH0gIOMUywQoVJH+JKBh4gUgnPZoAzTsYt 0Ghga9xb+vofIgBz/FNFl5L3p9XOgviUPd3zSWDIdmmGjfGqPZFQOPspXhNJY/Yj OQIDWPOEmzP3+CmLagNOt43K1Mw+4qeXurW5S9TETAK44A4WIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLl46vK488Dh6cZi8x1eNjz9JoXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMzNzRjMWQtMDQ1MS0z ZTlmLTlkMzItZTg5MzFkZGU5ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxfMdBX5k7kE6qLVxHU+Y2xioi/8n1UCVigiVxsTHb33yteM56qTrY7 M41m9QwOb25xTdNEJ26unI4bP9pi58ixw7V2Srz1tcdzDIPgtTU4FSxjAb19KlaV m4QbfnCmSE+FQ+3PN2+Vu0/6mICc1oDOUP35482eZ585uLrYZejCx4Y8VUz/zVTu +iAYwgWOA4N1JLgK/taYMnU2OuUSTU/lZnguBUSP8eB/GCsKXtVTCRLF1e9gVbuR jxrtoFLhruZi2f9EO/Bosgnhmi4J5q9HAqxuWYu0+ZnT1wFXZ046LkOmzT5w2Efm 47d6YM48OgJ0/PGkoDAaBxpgtmZkAmY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:45 2025 by rpki-client