$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9debe40-c277-33ad-8e4c-c157e2bc0c78.roa File: c9debe40-c277-33ad-8e4c-c157e2bc0c78.roa (raw, json) Hash identifier: YPdB8RHlwxV/u2OFa03CA4lMbUQHa6LKyp/f4FdcWf8= Subject key identifier: 60:D2:DD:73:92:AB:5E:D9:42:B0:73:F2:D7:65:8A:02:01:6F:CF:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620202EB9CE461F1997AE5C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9debe40-c277-33ad-8e4c-c157e2bc0c78.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.23.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:02:eb:9c:e4:61:f1:99:7a:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f3e5330d-344e-46b0-b553-7a25dc47ba5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:77:64:b8:54:cd:04:0f:35:78:c1:e4:24: fb:2c:cb:a9:26:ee:fb:4b:ad:c8:f0:d1:93:95:c4: 66:ab:0f:a8:e7:e5:69:62:78:8d:7e:fc:75:4a:d0: 4c:9f:d8:ec:ab:99:45:24:ba:9c:3d:f6:87:26:60: c9:2d:4a:f9:12:50:a3:73:f1:f9:d9:9c:ed:c4:7a: 9b:10:53:6e:36:c5:e1:d1:dd:0e:6d:92:49:fa:51: 4f:0c:15:f0:f2:d0:b3:ff:a2:2b:73:53:a5:8c:ad: 55:22:d0:83:91:b3:ab:67:a1:30:cb:69:e7:66:35: 82:7e:1d:c3:ec:54:e9:9e:7a:7b:7e:53:9e:34:a4: d0:7e:33:6d:26:90:4d:56:5b:81:e7:5a:f5:89:37: 7c:50:d9:38:a6:b8:26:64:29:be:4d:74:b4:d1:6b: 8a:f9:72:3d:23:a0:17:76:d4:b5:61:3f:e6:30:79: 54:e3:05:36:9e:ce:97:14:d0:52:9b:d9:9f:29:5d: 05:3e:12:1d:ff:47:30:ae:4e:9e:81:e6:f1:88:83: e9:0c:b3:18:48:5d:62:6e:41:14:3e:ab:a2:15:91: 2b:61:84:b6:fe:b6:24:57:ed:01:5a:9d:cf:78:ef: 34:21:ee:bc:f3:1e:6c:cf:4e:9d:be:e2:99:ac:4e: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D2:DD:73:92:AB:5E:D9:42:B0:73:F2:D7:65:8A:02:01:6F:CF:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9debe40-c277-33ad-8e4c-c157e2bc0c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:79:d3:fc:2b:6f:34:ed:d8:36:f0:87:3a:bb:7e:29:bf:a9: 55:23:6b:92:fd:a6:82:f4:b8:6f:2a:ef:cb:50:43:d0:bd:07: 69:1a:1c:2b:b5:1b:4d:33:52:c7:5a:5b:cd:b3:35:b7:28:2e: 73:7c:41:ab:6b:0e:b3:7b:38:ea:fd:b7:12:62:ad:9a:cc:0b: 10:ac:17:62:c0:aa:a4:06:df:a3:54:29:5e:25:54:df:a2:ae: 59:e8:2c:73:eb:58:c0:88:29:a1:e9:46:1c:04:0e:15:5b:ae: 22:6d:03:54:ec:bd:66:fe:fb:4f:6a:fc:52:87:5d:47:7c:3f: c6:f3:e2:4b:73:24:5a:18:9c:61:b8:f8:09:21:45:4d:2c:c6: 98:8a:62:2b:53:a7:3f:a6:1f:84:1e:d7:2b:26:0d:02:35:50: 08:d9:db:9a:70:63:0b:9f:e5:81:11:c5:ec:53:a0:2e:f2:78: 31:a5:2a:a8:fe:6d:14:71:f8:d1:98:d4:03:d6:4b:e1:84:48: e6:6c:b3:d9:e9:5c:3d:52:08:2f:a5:19:2a:eb:0c:69:f6:26: 9d:1e:da:a5:80:7c:f7:71:6d:0e:ef:de:2f:1b:df:73:cb:f1: 7a:d7:fc:00:e7:88:58:53:a7:67:92:a7:f5:92:88:82:3f:f5: 67:85:0d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgLrnORh8Zl65cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjNlNTMzMGQtMzQ0ZS00NmIwLWI1NTMtN2EyNWRjNDdiYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqp3ZLhUzQQPNXjB5CT7LMupJu77S63I8NGT lcRmqw+o5+VpYniNfvx1StBMn9jsq5lFJLqcPfaHJmDJLUr5ElCjc/H52ZztxHqb EFNuNsXh0d0ObZJJ+lFPDBXw8tCz/6Irc1OljK1VItCDkbOrZ6Ewy2nnZjWCfh3D 7FTpnnp7flOeNKTQfjNtJpBNVluB51r1iTd8UNk4prgmZCm+TXS00WuK+XI9I6AX dtS1YT/mMHlU4wU2ns6XFNBSm9mfKV0FPhId/0cwrk6egebxiIPpDLMYSF1ibkEU PquiFZErYYS2/rYkV+0BWp3PeO80Ie688x5sz06dvuKZrE4R0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDS3XOSq17ZQrBz8tdligIBb888MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzlkZWJlNDAtYzI3Ny0z M2FkLThlNGMtYzE1N2UyYmMwYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrReYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd50/wrbzTt2Dbwhzq7fim/qVUja5L9poL0uG8q78tQQ9C9B2kaHCu1 G00zUsdaW82zNbcoLnN8QatrDrN7OOr9txJirZrMCxCsF2LAqqQG36NUKV4lVN+i rlnoLHPrWMCIKaHpRhwEDhVbriJtA1TsvWb++09q/FKHXUd8P8bz4ktzJFoYnGG4 +AkhRU0sxpiKYitTpz+mH4Qe1ysmDQI1UAjZ25pwYwuf5YERxexToC7yeDGlKqj+ bRRx+NGY1APWS+GESOZss9npXD1SCC+lGSrrDGn2Jp0e2qWAfPdxbQ7v3i8b33PL 8XrX/ADniFhTp2eSp/WSiII/9WeFDQ4= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:51 2025 by rpki-client