$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c642162f-4f2f-3445-93ef-30353603dc6b.roa File: c642162f-4f2f-3445-93ef-30353603dc6b.roa (raw, json) Hash identifier: wrXcmzdHamhgZLokWYMGW0QxaMEjErkZ9ew1S+15Ek8= Subject key identifier: 33:3B:5B:CE:1B:07:CB:06:8B:59:72:BA:44:28:E0:26:89:8F:5F:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201D719EEA8000F400DF280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c642162f-4f2f-3445-93ef-30353603dc6b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.22.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d7:19:ee:a8:00:0f:40:0d:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=afb2fe98-ce6a-48ec-bec4-453f7d429669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:25:64:09:eb:fe:51:92:63:52:bd:20:33:85: 8b:b2:6f:f8:c2:e4:65:54:23:19:9d:af:a8:09:ae: 2b:6b:6f:4e:a6:09:f3:8e:03:dc:93:5e:34:83:a7: a8:37:98:95:3e:aa:ed:22:aa:d3:ae:b3:b2:85:f0: 82:92:34:73:f6:ed:49:3b:45:0b:44:a8:37:9f:25: b7:b1:f3:d0:89:30:fe:8a:8e:07:bb:6b:a9:29:32: 06:bf:b7:8b:c2:46:0c:c6:23:fa:cd:87:e9:45:5d: fe:97:85:75:51:b7:9d:46:a3:29:d3:c6:20:7d:67: c2:78:b7:11:b1:c9:04:39:6c:84:6e:57:76:c8:43: 8f:0b:06:9f:2b:74:83:90:61:f9:9b:73:c2:b5:6f: 84:b0:e7:24:b8:7f:4d:93:0f:b7:93:30:75:c4:36: 15:24:87:15:cf:e4:1d:42:4a:1f:0c:16:15:d0:35: c1:fa:ac:ef:0a:55:da:a8:be:bb:39:a9:de:bd:8b: ef:5e:c5:6d:fe:b1:ce:93:05:c6:a3:a9:23:40:40: b0:1d:1e:55:93:41:89:1f:7e:57:9e:50:1b:a8:20: dd:d9:d4:c8:a3:55:a2:62:f4:99:f7:7d:c3:55:32: 0e:0c:12:58:78:ab:14:48:13:ab:82:00:0a:2b:d5: c9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3B:5B:CE:1B:07:CB:06:8B:59:72:BA:44:28:E0:26:89:8F:5F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c642162f-4f2f-3445-93ef-30353603dc6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3b:b2:33:65:89:f6:b4:0d:a1:a2:4e:66:43:55:1c:23:98: 9c:61:5b:31:a2:d1:c1:10:48:fa:c7:0f:58:4c:7d:94:a0:a8: 21:70:08:1d:ea:94:a6:25:32:58:ee:1e:27:a0:da:fb:64:bb: a5:50:ef:26:0c:d4:7a:4c:52:30:38:31:13:59:a5:d0:ff:9c: 71:66:c0:97:bc:2c:f6:f7:05:d9:5b:91:ea:ff:53:5f:74:55: 0f:a0:51:72:37:bb:8c:b8:50:47:96:4c:fb:8f:06:05:d3:68: 5a:18:97:d1:c7:44:6b:21:cb:fe:05:22:b3:de:e5:8c:bd:34: b7:18:b1:b1:b8:73:59:1e:6e:04:16:2b:ee:22:05:a8:da:53: 84:67:85:f8:1e:64:8d:76:d6:96:30:24:87:3d:68:e0:84:3b: f6:da:83:47:69:cb:f8:3e:aa:25:25:a7:d5:d3:37:60:03:f0: 3f:0d:6b:27:1e:d8:44:8c:68:f2:24:6a:ac:13:64:1e:30:d0: 5c:a5:70:97:68:1d:19:64:af:ee:20:89:b5:ab:7a:39:5f:60: 24:60:6d:bb:68:74:2e:b4:54:19:5d:60:ad:46:2a:f9:21:b8: c1:8c:b0:3c:f4:39:6d:b1:b2:79:53:3a:cf:03:24:b0:29:10: 72:bd:96:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdcZ7qgAD0AN8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWZiMmZlOTgtY2U2YS00OGVjLWJlYzQtNDUzZjdkNDI5NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SVkCev+UZJjUr0gM4WLsm/4wuRlVCMZna+o Ca4ra29OpgnzjgPck140g6eoN5iVPqrtIqrTrrOyhfCCkjRz9u1JO0ULRKg3nyW3 sfPQiTD+io4Hu2upKTIGv7eLwkYMxiP6zYfpRV3+l4V1UbedRqMp08YgfWfCeLcR sckEOWyEbld2yEOPCwafK3SDkGH5m3PCtW+EsOckuH9Nkw+3kzB1xDYVJIcVz+Qd QkofDBYV0DXB+qzvClXaqL67OanevYvvXsVt/rHOkwXGo6kjQECwHR5Vk0GJH35X nlAbqCDd2dTIo1WiYvSZ933DVTIODBJYeKsUSBOrggAKK9XJkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM7W84bB8sGi1lyukQo4CaJj19zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzY0MjE2MmYtNGYyZi0z NDQ1LTkzZWYtMzAzNTM2MDNkYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU7sjNlifa0DaGiTmZDVRwjmJxhWzGi0cEQSPrHD1hMfZSgqCFwCB3q lKYlMljuHieg2vtku6VQ7yYM1HpMUjA4MRNZpdD/nHFmwJe8LPb3Bdlbker/U190 VQ+gUXI3u4y4UEeWTPuPBgXTaFoYl9HHRGshy/4FIrPe5Yy9NLcYsbG4c1kebgQW K+4iBajaU4RnhfgeZI121pYwJIc9aOCEO/bag0dpy/g+qiUlp9XTN2AD8D8Nayce 2ESMaPIkaqwTZB4w0FylcJdoHRlkr+4gibWrejlfYCRgbbtodC60VBldYK1GKvkh uMGMsDz0OW2xsnlTOs8DJLApEHK9lmg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:23 2025 by rpki-client