$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa File: d0adf6f5-43ee-385c-be0f-59c4649227e9.roa (raw, json) Hash identifier: Bax2NoOgmSBn+d18Y7Rm1ogBIkUSRLY+1ct6pwMfZgQ= Subject key identifier: 24:26:AE:D9:80:9C:B0:99:32:A1:67:C2:BF:BD:7F:BB:3F:11:2A:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC925866310F546EC11380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.23.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:92:58:66:31:0f:54:6e:c1:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=574e10da-78c2-450f-a092-a79d985f7d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:fa:1f:f3:f6:ff:8b:b0:33:a5:d1:31:70: e3:f9:64:ef:19:d2:f7:96:70:b3:1a:1a:95:d0:ca: 7d:95:66:d2:e9:6a:0c:25:45:24:ac:f1:04:72:33: 75:3d:fe:6b:ce:fe:6d:56:b1:37:61:ab:39:aa:04: e6:1f:5f:16:f0:43:4e:ad:c1:71:5a:df:4a:bd:03: 9f:40:2a:f3:e4:49:bf:d9:c7:71:bf:2b:d8:19:e9: 8d:91:50:f3:ab:25:00:4c:e7:d7:45:9a:07:0d:35: d3:8c:69:86:9e:c5:47:56:8b:50:d1:c1:b8:97:13: d1:74:c8:bc:1c:1e:de:3b:d6:e0:a9:c4:77:15:78: 7e:8f:60:0f:71:56:d0:5d:7a:68:0d:93:05:d9:32: 43:06:f7:02:d9:b6:6d:6e:a6:ad:16:aa:b0:ef:8f: 0d:70:c1:4a:7f:eb:e4:09:01:50:71:01:2b:42:3b: e4:3e:a5:2e:1a:4c:df:32:a6:84:99:f4:2a:d9:c6: b9:97:0a:fa:15:4e:04:04:81:82:ca:01:52:07:9e: 48:12:49:89:3e:7b:3f:67:3a:ac:b6:db:d9:28:0e: 24:c4:9b:6b:d2:26:36:73:6e:ea:ae:12:99:30:1c: 0d:ae:d9:83:1e:4f:21:7b:e1:67:1b:68:16:96:5a: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:26:AE:D9:80:9C:B0:99:32:A1:67:C2:BF:BD:7F:BB:3F:11:2A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0adf6f5-43ee-385c-be0f-59c4649227e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ec:9d:79:5e:26:f4:5f:7c:a7:65:ac:8c:a6:95:50:05:fe: 5b:4e:1d:87:76:b7:cf:43:1e:2d:8b:60:b4:07:09:90:c4:0b: ca:55:3e:bc:bd:ee:04:f9:38:07:36:45:f4:ad:48:a9:79:7d: 12:0b:f1:fb:d4:e2:1b:1a:39:e2:40:92:a5:5b:3e:96:6c:a8: df:20:c5:0b:8a:48:df:5f:ee:d5:18:cc:b9:7b:82:fb:c8:a4: d2:94:c3:f5:18:d3:9a:a0:ee:91:c9:63:29:9e:19:4b:b9:96: bc:bc:30:00:c5:a7:ef:2f:15:df:f0:64:9e:d9:7f:92:63:c3: 50:af:45:4f:ca:5e:3a:e5:16:14:8f:75:eb:cc:d8:3c:ca:4d: 1a:4b:bf:26:b8:b2:b5:81:4e:e4:b9:5f:97:db:2f:bb:de:52: aa:c8:d1:4e:bc:6d:df:6c:a2:a8:e2:cb:81:09:c7:ea:a6:ab: 26:60:11:21:fb:01:b4:54:d7:fb:d7:54:3f:79:4f:5b:28:e8: 13:98:0b:41:c7:8b:a4:fb:89:43:20:65:d8:d1:1f:48:23:60: 2c:f2:4f:3c:5c:02:2a:6a:3d:08:c7:64:05:2b:49:69:62:29: 53:be:bd:e1:3c:65:25:58:d6:8f:66:b7:d0:5d:2e:30:5c:e0: 07:aa:ba:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzJJYZjEPVG7BE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTc0ZTEwZGEtNzhjMi00NTBmLWEwOTItYTc5ZDk4NWY3ZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJn6H/P2/4uwM6XRMXDj+WTvGdL3lnCzGhqV 0Mp9lWbS6WoMJUUkrPEEcjN1Pf5rzv5tVrE3Yas5qgTmH18W8ENOrcFxWt9KvQOf QCrz5Em/2cdxvyvYGemNkVDzqyUATOfXRZoHDTXTjGmGnsVHVotQ0cG4lxPRdMi8 HB7eO9bgqcR3FXh+j2APcVbQXXpoDZMF2TJDBvcC2bZtbqatFqqw748NcMFKf+vk CQFQcQErQjvkPqUuGkzfMqaEmfQq2ca5lwr6FU4EBIGCygFSB55IEkmJPns/Zzqs ttvZKA4kxJtr0iY2c27qrhKZMBwNrtmDHk8he+FnG2gWllqYVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQmrtmAnLCZMqFnwr+9f7s/ESpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhZGY2ZjUtNDNlZS0z ODVjLWJlMGYtNTljNDY0OTIyN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/snXleJvRffKdlrIymlVAF/ltOHYd2t89DHi2LYLQHCZDEC8pVPry9 7gT5OAc2RfStSKl5fRIL8fvU4hsaOeJAkqVbPpZsqN8gxQuKSN9f7tUYzLl7gvvI pNKUw/UY05qg7pHJYymeGUu5lry8MADFp+8vFd/wZJ7Zf5Jjw1CvRU/KXjrlFhSP devM2DzKTRpLvya4srWBTuS5X5fbL7veUqrI0U68bd9soqjiy4EJx+qmqyZgESH7 AbRU1/vXVD95T1so6BOYC0HHi6T7iUMgZdjRH0gjYCzyTzxcAipqPQjHZAUrSWli KVO+veE8ZSVY1o9mt9BdLjBc4Aequuw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:04 2025 by rpki-client