$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d317d83a-c59e-38b6-a4b0-d288101538b3.roa File: d317d83a-c59e-38b6-a4b0-d288101538b3.roa (raw, json) Hash identifier: vLBh5bP4XFNvwt++h2MeEJsemcrfBhYd1EB0rrCzdQY= Subject key identifier: 97:B8:92:F2:3D:61:C2:34:B2:AF:E0:E2:17:FB:B8:AD:0D:58:7E:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC8C8625B2086F9B4679C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d317d83a-c59e-38b6-a4b0-d288101538b3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.25.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:8c:86:25:b2:08:6f:9b:46:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ba218660-72fe-4452-8688-5fa1424fa2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4b:76:91:8d:5b:84:8b:40:79:d5:1c:dd:f6: 83:7f:7b:6a:10:3f:97:66:65:64:64:b4:fa:06:bd: 7d:0d:4a:68:3f:1f:a0:d7:58:3c:57:14:af:59:89: d3:66:5d:b0:78:8d:b0:6f:68:8a:71:92:15:3f:6d: 7b:56:f9:36:74:0a:27:75:28:70:38:74:96:73:b5: 25:da:01:d5:75:13:57:5f:f6:27:7b:6e:c2:73:de: 14:40:35:f8:85:f4:f5:a0:59:cd:28:74:f2:b5:80: a1:04:24:de:01:a7:b4:9e:85:20:64:66:2a:e1:db: 4b:73:15:cd:e0:a4:c5:cc:1f:cd:83:4d:28:ac:d0: 8a:6c:ac:15:76:dd:23:14:e7:c1:15:6f:bf:7f:a1: 52:13:07:e9:5d:96:1f:86:d7:69:cf:c5:6b:b9:5f: e8:71:0e:01:f5:ab:e3:18:97:e8:9b:14:33:ee:6b: f3:3c:15:ea:db:1c:68:2c:e5:39:6a:74:23:0d:1b: be:0d:22:cc:0f:0d:58:b0:ca:90:84:61:25:d7:d3: 87:10:ed:8d:43:57:c4:20:d5:7d:ef:1a:86:f7:fc: 44:9d:0a:8c:ba:44:42:37:cc:57:0f:de:02:8d:84: 00:94:2c:e5:0c:a9:bb:fd:db:6e:44:78:b7:e1:c1: f3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B8:92:F2:3D:61:C2:34:B2:AF:E0:E2:17:FB:B8:AD:0D:58:7E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d317d83a-c59e-38b6-a4b0-d288101538b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:89:9d:e0:41:1b:bf:ed:34:43:69:c5:8a:c9:77:40:84:4d: 0a:97:90:ae:f0:df:c8:87:3c:7b:b1:0c:c9:9b:ee:a5:23:d9: f8:09:78:46:40:3c:38:ce:3f:7e:a3:ca:7c:1f:af:10:24:32: 2f:d0:87:a9:58:51:61:49:07:cb:20:bb:9e:82:fb:0a:91:6f: 07:42:b5:17:d8:6a:fd:42:d8:f6:04:dd:fe:43:34:1d:3a:57: e9:3b:46:ea:d1:c0:24:3d:99:53:3d:ee:a1:00:d1:8d:36:80: 18:14:17:70:ba:b6:8e:0a:1e:c3:79:c8:75:0a:40:b7:71:63: 01:f8:37:14:89:55:f9:fc:34:96:c1:7b:90:89:dd:5e:45:34: 4a:b8:74:41:67:e6:dc:5d:c2:e9:76:7a:72:a0:b1:0c:de:b9: 98:bc:45:62:10:7b:1e:15:fe:2b:42:98:bc:90:09:4b:75:eb: c5:b5:4d:0e:a3:02:e9:73:bf:86:c9:60:47:b3:7d:9c:b2:c5: bd:17:82:e2:cc:e2:f0:32:be:ed:8e:21:58:1f:3f:ca:45:7e: 8a:a7:13:c1:a6:90:1e:cf:44:8a:01:f8:14:97:d0:27:27:c5: 25:f5:ce:2d:61:10:87:86:54:8a:eb:cd:01:1b:88:0a:d6:35: eb:eb:7d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIyGJbIIb5tGecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmEyMTg2NjAtNzJmZS00NDUyLTg2ODgtNWZhMTQyNGZhMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEt2kY1bhItAedUc3faDf3tqED+XZmVkZLT6 Br19DUpoPx+g11g8VxSvWYnTZl2weI2wb2iKcZIVP217Vvk2dAondShwOHSWc7Ul 2gHVdRNXX/Yne27Cc94UQDX4hfT1oFnNKHTytYChBCTeAae0noUgZGYq4dtLcxXN 4KTFzB/Ng00orNCKbKwVdt0jFOfBFW+/f6FSEwfpXZYfhtdpz8VruV/ocQ4B9avj GJfomxQz7mvzPBXq2xxoLOU5anQjDRu+DSLMDw1YsMqQhGEl19OHEO2NQ1fEINV9 7xqG9/xEnQqMukRCN8xXD94CjYQAlCzlDKm7/dtuRHi34cHzwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe4kvI9YcI0sq/g4hf7uK0NWH7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDMxN2Q4M2EtYzU5ZS0z OGI2LWE0YjAtZDI4ODEwMTUzOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRlVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuJneBBG7/tNENpxYrJd0CETQqXkK7w38iHPHuxDMmb7qUj2fgJeEZA PDjOP36jynwfrxAkMi/Qh6lYUWFJB8sgu56C+wqRbwdCtRfYav1C2PYE3f5DNB06 V+k7RurRwCQ9mVM97qEA0Y02gBgUF3C6to4KHsN5yHUKQLdxYwH4NxSJVfn8NJbB e5CJ3V5FNEq4dEFn5txdwul2enKgsQzeuZi8RWIQex4V/itCmLyQCUt168W1TQ6j Aulzv4bJYEezfZyyxb0XguLM4vAyvu2OIVgfP8pFfoqnE8GmkB7PRIoB+BSX0Ccn xSX1zi1hEIeGVIrrzQEbiArWNevrfQw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:45 2025 by rpki-client