$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cec018e6-5599-32b2-8246-8086dd48cf76.roa File: cec018e6-5599-32b2-8246-8086dd48cf76.roa (raw, json) Hash identifier: TL9bxYZ3XGr+taaEL/MQXorGfWJTcbKD7Qb9s87OYnM= Subject key identifier: 72:75:1B:1D:AB:C1:1C:5D:63:7E:F8:DB:CB:F8:CE:4F:D5:2C:F2:2F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620229566D96BED69CA6CD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cec018e6-5599-32b2-8246-8086dd48cf76.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.29.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:29:56:6d:96:be:d6:9c:a6:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=5b735d95-6b9a-4369-a970-bba8a276d810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:30:eb:26:5e:b9:eb:c7:69:a3:9e:a8:af: f3:85:b3:0f:04:a3:8b:85:0a:97:18:ef:96:b5:50: e1:13:e6:d2:f2:4a:65:3e:8c:82:40:96:e2:09:c9: 3d:52:86:6c:a7:46:ea:36:2c:13:99:7e:c2:9d:cd: 23:5d:d8:67:c9:fa:72:3d:51:0a:58:7b:a5:f4:e3: 73:89:2d:71:9d:23:21:79:fe:6b:04:b8:2e:08:90: a5:b3:ff:9f:67:33:50:c1:62:5b:8a:15:56:aa:f3: 62:1f:a9:f5:16:dd:81:50:08:c5:a4:fc:bc:5f:45: e8:4d:33:14:02:29:79:1d:6c:35:b0:f2:ed:ed:e8: 9e:1a:dd:b4:11:11:29:80:9a:29:bf:53:5f:ed:3b: f3:2e:4b:5a:1a:e6:d5:03:1b:f2:d2:c6:f5:08:85: a8:50:43:a3:40:58:a9:96:36:20:d5:bc:4f:b5:9d: 1d:1a:bb:8d:45:cd:17:0e:99:ba:6d:45:73:6f:a8: fc:80:34:de:d4:28:62:91:04:66:73:aa:74:95:cf: bc:31:0b:b5:74:dc:aa:44:a0:8c:bd:2f:b9:29:cf: 27:ca:ba:d0:17:66:50:b1:dc:14:be:95:f0:b3:eb: ac:05:00:d9:25:17:72:89:75:79:81:60:c0:03:c5: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:75:1B:1D:AB:C1:1C:5D:63:7E:F8:DB:CB:F8:CE:4F:D5:2C:F2:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cec018e6-5599-32b2-8246-8086dd48cf76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e9:5a:0b:88:44:7f:16:db:25:b7:6d:6c:24:73:ad:70:4a: a8:e5:9b:7f:b1:24:d2:67:bf:92:e5:22:94:eb:9c:48:ce:e9: 18:a0:7b:9c:46:c0:2c:e0:87:45:6c:4b:54:7b:1f:e9:96:bf: 88:22:05:11:30:23:f2:53:32:1e:61:6c:75:25:af:d1:dd:ae: 6d:c6:02:84:fb:d9:62:12:0c:4a:5e:60:58:2f:ba:62:bc:c4: b8:7e:24:28:57:77:7f:53:0c:c7:ed:49:ba:9c:9f:57:ea:f6: d0:23:cc:19:84:bf:62:c3:d6:62:01:72:d7:f5:1e:29:14:ee: 6b:0f:68:9c:a9:9c:13:6e:a4:37:76:9e:d9:63:8a:70:9a:7f: 80:d3:43:ef:88:d5:54:2f:0a:f0:08:9c:5b:1a:ae:c6:7c:f1: 9f:b8:4f:ed:93:fa:d5:23:ea:a2:3e:51:24:9a:fe:c7:09:15: 1b:95:40:0c:d8:ac:a5:6a:30:12:87:13:e3:5b:71:16:46:42: 50:94:92:8d:82:83:6c:5b:0c:9e:fd:96:e4:46:8e:af:46:33: 54:81:5a:61:49:6a:ce:12:eb:a3:67:26:d8:29:d4:28:da:d3: 72:14:5d:a1:09:ab:83:4f:51:75:50:f9:71:55:46:1e:b7:1a: 48:01:13:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAilWbZa+1pymzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NWI3MzVkOTUtNmI5YS00MzY5LWE5NzAtYmJhOGEyNzZkODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KIw6yZeuevHaaOeqK/zhbMPBKOLhQqXGO+W tVDhE+bS8kplPoyCQJbiCck9UoZsp0bqNiwTmX7Cnc0jXdhnyfpyPVEKWHul9ONz iS1xnSMhef5rBLguCJCls/+fZzNQwWJbihVWqvNiH6n1Ft2BUAjFpPy8X0XoTTMU Ail5HWw1sPLt7eieGt20EREpgJopv1Nf7TvzLktaGubVAxvy0sb1CIWoUEOjQFip ljYg1bxPtZ0dGruNRc0XDpm6bUVzb6j8gDTe1ChikQRmc6p0lc+8MQu1dNyqRKCM vS+5Kc8nyrrQF2ZQsdwUvpXws+usBQDZJRdyiXV5gWDAA8XUzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ1Gx2rwRxdY37428v4zk/VLPIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2VjMDE4ZTYtNTU5OS0z MmIyLTgyNDYtODA4NmRkNDhjZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALpWguIRH8W2yW3bWwkc61wSqjlm3+xJNJnv5LlIpTrnEjO6Rige5xG wCzgh0VsS1R7H+mWv4giBREwI/JTMh5hbHUlr9Hdrm3GAoT72WISDEpeYFgvumK8 xLh+JChXd39TDMftSbqcn1fq9tAjzBmEv2LD1mIBctf1HikU7msPaJypnBNupDd2 ntljinCaf4DTQ++I1VQvCvAInFsarsZ88Z+4T+2T+tUj6qI+USSa/scJFRuVQAzY rKVqMBKHE+NbcRZGQlCUko2Cg2xbDJ79luRGjq9GM1SBWmFJas4S66NnJtgp1Cja 03IUXaEJq4NPUXVQ+XFVRh63GkgBE0k= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:07 2025 by rpki-client