$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa File: cf248ad8-cdcc-35a1-82a5-571430bb2417.roa (raw, json) Hash identifier: HnEK9DAniGJJPK5LaGyNK0hCy4GUpCE/AK6LsV6S5nU= Subject key identifier: 10:77:E8:74:27:F8:70:FE:32:A1:77:DB:1B:93:D6:CE:5E:1A:58:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620237F0C20B88FB3D42C580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:37:f0:c2:0b:88:fb:3d:42:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4e3dfad0-7a92-4c13-abb4-e06f88c6723d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:83:87:16:d7:91:56:3d:c0:22:ee:0c:e8:25: 63:a5:18:6d:5e:9e:b0:72:76:42:f7:f3:23:0f:b3: 09:17:a1:fb:18:f7:82:7c:85:e5:30:80:8e:ef:9c: ef:75:c9:b0:96:5c:66:36:19:4e:41:44:cb:0b:3b: e3:ff:af:03:6b:a6:12:b1:1c:eb:a8:a9:1c:0f:8a: 38:bd:ff:95:9f:f9:39:f4:5b:ca:e1:73:ab:6e:14: 2b:44:d6:c7:8c:10:75:80:28:2c:4c:38:0e:19:9f: f8:d8:a2:fb:05:bb:6d:97:99:d1:fe:ea:79:fa:ee: 40:74:41:66:8e:7b:7f:23:80:3e:27:81:5c:48:91: 6a:3b:96:9d:9a:e2:c0:3f:85:80:2d:8c:5d:b2:2c: 8e:f2:61:79:fc:f4:19:99:7a:77:2a:f5:18:84:b4: e7:7d:2a:99:ac:39:43:19:26:83:6a:14:73:27:7e: da:5b:b4:04:4d:b4:6e:54:a0:5a:e2:28:be:65:98: f9:3a:f4:39:0c:ef:c8:e7:15:c9:ff:a4:89:7b:85: a7:69:7f:e5:6d:98:f6:de:39:73:c5:fa:f8:85:5c: dd:a7:ad:9c:73:c0:9c:47:a4:f6:d8:8b:d6:e1:8c: b2:d2:09:93:7d:21:37:7f:b9:08:16:f5:5f:a0:b7: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:77:E8:74:27:F8:70:FE:32:A1:77:DB:1B:93:D6:CE:5E:1A:58:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf248ad8-cdcc-35a1-82a5-571430bb2417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ba:87:33:66:4d:44:e8:47:1c:6a:88:e3:e9:30:4a:6a:f0: 93:f7:b5:be:f3:c1:f6:47:dd:ce:40:a8:08:3c:9f:c0:ec:a6: f6:56:28:4d:6b:b6:72:ba:e7:7e:f6:b6:9f:b6:79:a6:f3:c1: 34:80:66:b2:54:cc:fa:ed:90:ba:96:69:bb:d1:06:3b:5d:79: 66:39:61:bf:a8:3b:28:f4:a2:de:3a:b8:d9:e9:c3:66:04:73: 5d:80:a8:dc:72:4c:01:fe:23:bb:04:f3:40:58:5f:2c:4b:5c: a2:82:58:00:e1:1c:86:48:89:81:ce:b2:35:a1:59:ad:d7:72: c3:03:0a:a1:4d:cb:28:6d:be:ad:18:41:11:6b:10:87:5a:31: 3c:23:49:e4:d3:27:c0:5d:1b:ec:3a:d8:06:d1:4b:eb:85:81: a2:60:f3:20:b2:50:58:72:0f:60:fa:3d:44:4f:da:ec:c1:4f: 67:ac:79:2e:62:64:8a:79:a5:19:ac:51:dc:9f:ee:02:d6:aa: 02:04:10:12:99:33:18:39:84:88:cf:aa:0b:63:ab:e8:c7:90: 23:44:29:b4:57:8e:ed:00:14:ef:ae:03:11:cc:79:45:6e:b2: 9b:bb:5c:f2:75:0a:7f:73:1e:a9:e1:be:e4:6c:af:6e:cb:09: 45:b3:43:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjfwwguI+z1CxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGUzZGZhZDAtN2E5Mi00YzEzLWFiYjQtZTA2Zjg4YzY3MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24OHFteRVj3AIu4M6CVjpRhtXp6wcnZC9/Mj D7MJF6H7GPeCfIXlMICO75zvdcmwllxmNhlOQUTLCzvj/68Da6YSsRzrqKkcD4o4 vf+Vn/k59FvK4XOrbhQrRNbHjBB1gCgsTDgOGZ/42KL7Bbttl5nR/up5+u5AdEFm jnt/I4A+J4FcSJFqO5admuLAP4WALYxdsiyO8mF5/PQZmXp3KvUYhLTnfSqZrDlD GSaDahRzJ37aW7QETbRuVKBa4ii+ZZj5OvQ5DO/I5xXJ/6SJe4WnaX/lbZj23jlz xfr4hVzdp62cc8CcR6T22IvW4Yyy0gmTfSE3f7kIFvVfoLftvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB36HQn+HD+MqF32xuT1s5eGljkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2YyNDhhZDgtY2RjYy0z NWExLTgyYTUtNTcxNDMwYmIyNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+6hzNmTUToRxxqiOPpMEpq8JP3tb7zwfZH3c5AqAg8n8DspvZWKE1r tnK65372tp+2eabzwTSAZrJUzPrtkLqWabvRBjtdeWY5Yb+oOyj0ot46uNnpw2YE c12AqNxyTAH+I7sE80BYXyxLXKKCWADhHIZIiYHOsjWhWa3XcsMDCqFNyyhtvq0Y QRFrEIdaMTwjSeTTJ8BdG+w62AbRS+uFgaJg8yCyUFhyD2D6PURP2uzBT2eseS5i ZIp5pRmsUdyf7gLWqgIEEBKZMxg5hIjPqgtjq+jHkCNEKbRXju0AFO+uAxHMeUVu spu7XPJ1Cn9zHqnhvuRsr27LCUWzQ94= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:18 2025 by rpki-client