$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe25758-ed5c-3d5c-9392-ce2592d6c054.roa File: cfe25758-ed5c-3d5c-9392-ce2592d6c054.roa (raw, json) Hash identifier: Tr6w7OwAMKtw5eM4cE60f9d8lE/hex4sX4361pF//8U= Subject key identifier: 34:3C:19:88:B4:0E:2E:E0:A8:97:92:58:43:48:1D:B9:A6:78:3E:88 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6202053B9E58C3B8D9D6D200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe25758-ed5c-3d5c-9392-ce2592d6c054.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.18.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:05:3b:9e:58:c3:b8:d9:d6:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=94889710-1210-4097-89cb-3b0eac44bf55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e9:ff:3e:10:f2:d3:cf:8c:62:3f:37:df:9a: d6:2d:bc:93:6c:81:47:70:a2:ce:e4:fa:07:89:85: ef:e1:cb:90:48:5b:91:78:68:c5:58:6b:0a:fe:fb: 41:c7:03:cf:db:11:df:54:4c:a9:37:3f:93:10:1d: 86:c3:07:ec:dc:c9:82:69:02:a6:35:07:ef:4e:5d: 7b:1b:ba:64:89:8f:94:bf:04:eb:c3:dc:7c:c1:03: 4b:59:c7:fb:25:cc:ca:6b:10:1c:43:81:96:2f:88: da:83:bf:f0:ca:1d:52:a1:2a:fe:8e:de:f7:41:a9: 53:4a:fc:f7:50:53:f3:59:87:a7:b6:c8:9d:a1:9a: 64:29:e8:eb:88:9b:16:cf:38:0d:30:8c:f1:7d:39: 62:8d:38:74:22:f0:62:6f:73:0a:37:d8:bc:3f:e0: da:22:b4:71:2b:44:f7:61:6f:35:87:b3:88:6c:60: 1b:ef:01:61:bb:40:fe:29:06:e6:b7:8a:da:22:b0: 56:0d:4c:e7:c9:93:b2:48:86:09:3c:43:2d:f1:cc: fe:90:4b:1f:52:90:45:92:08:36:a4:2b:d5:5f:b2: be:e1:d5:74:a4:14:ec:f5:07:37:41:f0:68:6f:36: 80:f3:a9:82:0d:47:53:19:06:f3:90:de:b8:ac:0f: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3C:19:88:B4:0E:2E:E0:A8:97:92:58:43:48:1D:B9:A6:78:3E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfe25758-ed5c-3d5c-9392-ce2592d6c054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:71:5e:c7:fa:55:79:57:b3:df:45:bc:74:22:5e:7e:1b:86: b1:37:ed:bf:1b:e0:0e:71:a3:e6:75:ff:33:19:c8:2c:a9:0f: 5d:7c:79:dd:11:60:aa:de:13:6d:b1:13:59:1f:56:05:64:cb: 36:4a:e8:57:12:dc:20:93:0c:75:41:26:a3:02:4d:9e:d6:b1: ba:63:fd:e6:ee:32:05:3a:55:8e:cc:09:43:d5:61:12:c8:ad: 6d:b0:8d:5c:18:f5:84:ec:06:de:3f:ba:a1:00:34:0f:de:53: 54:17:ed:34:89:11:80:b0:44:c5:f3:c1:ff:1f:26:82:f1:dd: 54:5b:3c:c5:d7:31:5e:54:73:62:a6:f8:a3:80:c0:cf:02:19: dc:6b:46:35:aa:ea:d8:a1:a8:f9:39:c2:c6:9a:60:fd:1a:c2: 11:ec:49:f1:43:ff:19:74:b9:c2:ed:34:59:cd:a8:a5:2a:94: 31:69:26:c5:af:41:12:8d:33:55:09:fe:a9:3d:7d:c6:e4:da: 14:28:b9:29:e7:b3:42:a6:d0:b4:97:e3:4e:3f:3d:7d:6e:d3: 51:78:90:59:34:23:8c:a5:7b:b0:82:c0:3d:e6:3f:58:96:a7: 49:f9:75:fb:2a:19:30:66:aa:33:93:17:68:bb:1b:59:3d:e1: 68:ec:36:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgU7nljDuNnW0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTQ4ODk3MTAtMTIxMC00MDk3LTg5Y2ItM2IwZWFjNDRiZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgen/PhDy08+MYj8335rWLbyTbIFHcKLO5PoH iYXv4cuQSFuReGjFWGsK/vtBxwPP2xHfVEypNz+TEB2Gwwfs3MmCaQKmNQfvTl17 G7pkiY+UvwTrw9x8wQNLWcf7JczKaxAcQ4GWL4jag7/wyh1SoSr+jt73QalTSvz3 UFPzWYentsidoZpkKejriJsWzzgNMIzxfTlijTh0IvBib3MKN9i8P+DaIrRxK0T3 YW81h7OIbGAb7wFhu0D+KQbmt4raIrBWDUznyZOySIYJPEMt8cz+kEsfUpBFkgg2 pCvVX7K+4dV0pBTs9Qc3QfBobzaA86mCDUdTGQbzkN64rA/pdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ8GYi0Di7gqJeSWENIHbmmeD6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZlMjU3NTgtZWQ1Yy0z ZDVjLTkzOTItY2UyNTkyZDZjMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNxXsf6VXlXs99FvHQiXn4bhrE37b8b4A5xo+Z1/zMZyCypD118ed0R YKreE22xE1kfVgVkyzZK6FcS3CCTDHVBJqMCTZ7Wsbpj/ebuMgU6VY7MCUPVYRLI rW2wjVwY9YTsBt4/uqEANA/eU1QX7TSJEYCwRMXzwf8fJoLx3VRbPMXXMV5Uc2Km +KOAwM8CGdxrRjWq6tihqPk5wsaaYP0awhHsSfFD/xl0ucLtNFnNqKUqlDFpJsWv QRKNM1UJ/qk9fcbk2hQouSnns0Km0LSX404/PX1u01F4kFk0I4yle7CCwD3mP1iW p0n5dfsqGTBmqjOTF2i7G1k94WjsNgw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:48 2025 by rpki-client