$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa File: ca1af946-2717-3844-93e9-437539eb99b4.roa (raw, json) Hash identifier: qhcZLWOwgA6Ln9VupDz5eHuHebinmtXvg0etXL6bcxs= Subject key identifier: 68:39:DF:A4:92:A5:C3:1B:83:9E:6B:5D:DB:DF:18:13:97:08:7A:89 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE5EC7102CF38D01017D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.18.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:5e:c7:10:2c:f3:8d:01:01:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0d85a25f-2551-4540-9d22-edbaf91a6fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:dc:f2:7a:e2:e2:72:65:3c:cb:64:51:02: 8c:43:a3:68:2f:60:9d:9d:ba:f2:21:41:3b:30:a8: bc:f5:9b:9b:57:a4:21:35:38:6e:18:1f:75:0e:d9: 58:94:d2:07:aa:e0:e1:78:6d:38:10:54:87:3b:73: 3c:c1:25:ba:b9:a6:ad:27:77:c6:19:71:76:73:a5: 8e:58:40:37:26:d6:90:3a:f6:12:fe:6f:3b:80:8e: fd:a4:32:aa:e7:37:2f:9c:c7:47:d1:9e:5a:10:ac: 73:79:91:77:a7:88:f8:b6:a5:8c:a3:cd:3f:99:91: f8:46:0b:1a:38:a5:5b:8f:0e:51:15:82:a9:fc:51: 84:86:b6:3f:01:3d:79:18:9c:c2:bd:ae:fa:8f:42: a0:60:da:b1:1b:5c:a4:34:47:78:27:82:c3:2b:29: 6c:18:91:97:f0:19:ba:be:72:99:d1:78:00:3f:25: 6c:c6:d0:21:ca:cd:3e:1e:59:eb:9d:b5:a5:4e:dc: de:c4:7d:7f:c8:97:ad:7d:fa:d9:62:1e:bd:38:fe: c0:2e:11:49:8d:e5:08:8f:b3:f0:58:5f:d4:0c:12: 44:f8:fe:aa:8f:0a:f9:d8:fe:e7:41:42:f6:ab:0b: eb:2b:24:ce:78:52:62:07:e8:e7:a2:c6:3d:f2:05: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:39:DF:A4:92:A5:C3:1B:83:9E:6B:5D:DB:DF:18:13:97:08:7A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5d:53:d9:b1:50:8d:99:d6:f6:a2:26:33:bf:21:6b:fa:b0: f5:5d:ce:22:ad:4b:dd:f4:04:b9:7b:73:70:55:f3:17:8e:f9: bc:b5:39:21:9a:db:3a:6e:ee:51:bd:77:ec:32:e4:73:00:39: fa:74:5e:e7:2c:a6:de:0e:e2:39:1d:43:26:7b:a6:fe:00:ab: 5e:3d:70:f1:6a:a9:9c:ab:15:58:b8:80:20:60:bb:9e:fa:14: 01:83:dc:90:e4:16:b0:c1:5e:89:34:0e:da:fe:ea:7c:14:53: 7e:ae:db:33:29:fc:23:9c:d9:51:9a:e1:5f:eb:f4:40:59:e0: 4d:47:1a:0c:2a:a7:6c:c1:ab:28:33:07:61:08:b6:a6:b5:8b: fb:66:46:dc:dd:34:ef:48:3b:1c:2c:e7:de:fd:b3:cd:04:9e: 84:d9:35:b0:8c:70:32:d1:c6:36:75:c1:bc:9c:02:65:aa:54: 6d:00:7d:c2:e9:89:78:73:6d:84:f2:12:77:1e:47:25:c2:ac: fd:51:2a:57:1c:80:5b:9d:38:74:36:2b:26:ed:3a:53:a9:d9: f6:5c:32:66:15:33:0d:81:f2:18:db:ce:bc:1f:1f:35:28:a4: e9:7e:9b:d6:2b:9d:06:9f:3f:18:4b:aa:c7:58:c8:f6:d1:41: 6b:c6:74:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzl7HECzzjQEBfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGQ4NWEyNWYtMjU1MS00NTQwLTlkMjItZWRiYWY5MWE2ZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxzc8nri4nJlPMtkUQKMQ6NoL2CdnbryIUE7 MKi89ZubV6QhNThuGB91DtlYlNIHquDheG04EFSHO3M8wSW6uaatJ3fGGXF2c6WO WEA3JtaQOvYS/m87gI79pDKq5zcvnMdH0Z5aEKxzeZF3p4j4tqWMo80/mZH4Rgsa OKVbjw5RFYKp/FGEhrY/AT15GJzCva76j0KgYNqxG1ykNEd4J4LDKylsGJGX8Bm6 vnKZ0XgAPyVsxtAhys0+HlnrnbWlTtzexH1/yJetffrZYh69OP7ALhFJjeUIj7Pw WF/UDBJE+P6qjwr52P7nQUL2qwvrKyTOeFJiB+jnosY98gUzMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg536SSpcMbg55rXdvfGBOXCHqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ExYWY5NDYtMjcxNy0z ODQ0LTkzZTktNDM3NTM5ZWI5OWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFldU9mxUI2Z1vaiJjO/IWv6sPVdziKtS930BLl7c3BV8xeO+by1OSGa 2zpu7lG9d+wy5HMAOfp0Xucspt4O4jkdQyZ7pv4Aq149cPFqqZyrFVi4gCBgu576 FAGD3JDkFrDBXok0Dtr+6nwUU36u2zMp/COc2VGa4V/r9EBZ4E1HGgwqp2zBqygz B2EItqa1i/tmRtzdNO9IOxws5979s80EnoTZNbCMcDLRxjZ1wbycAmWqVG0AfcLp iXhzbYTyEnceRyXCrP1RKlccgFudOHQ2KybtOlOp2fZcMmYVMw2B8hjbzrwfHzUo pOl+m9YrnQafPxhLqsdYyPbRQWvGdEw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:24 2025 by rpki-client