$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa File: ce428618-de55-3e8b-b406-5b19a1cf388c.roa (raw, json) Hash identifier: n/a5THSXZBta1krqP4m950nRimv48Wol17dle/n96AU= Subject key identifier: C4:EC:65:8A:E7:BE:A8:89:14:92:47:C2:9F:0F:BB:16:82:91:1A:70 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B663207F9ABBB1ED8CB4B6F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 30036 IP address blocks: 173.22.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:07:f9:ab:bb:1e:d8:cb:4b:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=69a8be5b-32c4-40d0-a481-b508b8e4b116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:bb:6e:5a:98:e8:62:09:3b:b7:2b:2a:9f: 41:a7:a4:91:cb:22:3f:ce:53:59:4a:c7:ce:34:7a: a3:b4:49:88:b6:08:66:a4:c8:fd:a4:86:1e:c3:70: a8:89:13:e8:9f:3d:b7:fc:10:8e:4c:0d:0d:37:41: d7:80:32:05:87:ca:c4:b3:46:15:62:d4:b4:f4:15: b1:43:df:8d:f1:8d:67:8d:a9:60:7f:ce:71:31:2a: 21:69:cc:a6:59:0b:eb:dd:f5:ad:7f:53:08:86:f5: 9e:62:f6:eb:f7:c0:4b:92:5b:0e:b2:0a:a7:8b:dc: 4d:51:37:17:e4:f5:6b:73:e6:e3:3d:4f:9d:d0:09: 99:14:57:e9:b3:48:c2:3f:78:36:96:cf:14:b8:32: 64:fa:dc:1b:5a:04:98:aa:18:fa:e5:31:cf:e8:fb: 13:45:0c:7b:c2:5f:c8:00:08:fe:18:62:b9:a7:2e: c8:35:46:4b:fa:cc:8a:58:0c:73:e3:bc:05:13:6e: dd:27:1b:5a:1b:bf:54:55:70:a4:0d:ea:48:13:f5: 79:57:44:89:17:2e:73:3f:0b:7d:27:35:39:04:3c: ac:de:77:ff:6e:68:5d:e5:06:22:bb:f8:ac:56:4a: 2d:5e:ef:17:0a:62:09:f5:d7:fe:9f:0c:bc:f8:15: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EC:65:8A:E7:BE:A8:89:14:92:47:C2:9F:0F:BB:16:82:91:1A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:bc:47:0e:44:24:e0:7b:5a:7d:39:81:cd:b5:2b:68:b0:3e: d1:15:5c:b3:72:4d:7d:0d:22:b7:22:a9:13:3a:61:3b:80:b6: ed:90:3d:a9:be:f5:97:85:99:5b:b4:ed:bb:84:74:20:11:96: 2f:25:6c:4e:e9:41:9e:8a:a2:2f:9c:a1:ce:e2:5a:d3:9d:20: 90:1d:a6:c4:7e:6c:93:fd:60:bf:27:3d:79:ae:3a:16:42:c6: 52:a3:88:7d:10:22:da:1a:b3:39:9c:f9:7d:ea:1d:e3:35:20: db:db:90:1e:88:c4:b1:7f:41:67:e5:34:87:0b:3d:1c:9d:81: 3e:a7:70:98:fb:e5:89:54:a8:27:45:b5:04:51:c1:d8:f8:22: 56:5f:4c:24:5a:cc:9d:fc:1f:08:fa:1d:ef:5d:12:a2:e0:ad: b6:4a:b9:4f:c3:fe:64:43:52:56:53:bc:19:d0:74:2d:16:bb: 96:fb:1c:67:c2:1a:10:df:a4:e0:55:42:3e:cf:d2:e8:41:38: 5d:bc:39:bc:aa:b5:ea:4c:17:cf:14:93:31:71:f3:34:c1:d9: e2:fc:6c:ff:f4:d2:ad:1f:4e:65:61:c8:15:54:66:63:ff:17: ca:06:39:cd:2f:8c:e8:11:d7:31:a2:49:e8:59:75:c4:e3:b9: a2:7d:00:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgf5q7se2MtLb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NjlhOGJlNWItMzJjNC00MGQwLWE0ODEtYjUwOGI4ZTRiMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPa7blqY6GIJO7crKp9Bp6SRyyI/zlNZSsfO NHqjtEmItghmpMj9pIYew3CoiRPonz23/BCOTA0NN0HXgDIFh8rEs0YVYtS09BWx Q9+N8Y1njalgf85xMSohacymWQvr3fWtf1MIhvWeYvbr98BLklsOsgqni9xNUTcX 5PVrc+bjPU+d0AmZFFfps0jCP3g2ls8UuDJk+twbWgSYqhj65THP6PsTRQx7wl/I AAj+GGK5py7INUZL+syKWAxz47wFE27dJxtaG79UVXCkDepIE/V5V0SJFy5zPwt9 JzU5BDys3nf/bmhd5QYiu/isVkotXu8XCmIJ9df+nwy8+BXQSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTsZYrnvqiJFJJHwp8PuxaCkRpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2U0Mjg2MTgtZGU1NS0z ZThiLWI0MDYtNWIxOWExY2YzODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe8Rw5EJOB7Wn05gc21K2iwPtEVXLNyTX0NIrciqRM6YTuAtu2QPam+ 9ZeFmVu07buEdCARli8lbE7pQZ6Koi+coc7iWtOdIJAdpsR+bJP9YL8nPXmuOhZC xlKjiH0QItoaszmc+X3qHeM1INvbkB6IxLF/QWflNIcLPRydgT6ncJj75YlUqCdF tQRRwdj4IlZfTCRazJ38Hwj6He9dEqLgrbZKuU/D/mRDUlZTvBnQdC0Wu5b7HGfC GhDfpOBVQj7P0uhBOF28ObyqtepMF88UkzFx8zTB2eL8bP/00q0fTmVhyBVUZmP/ F8oGOc0vjOgR1zGiSehZdcTjuaJ9AEo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:41 2025 by rpki-client