$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa File: d3423c42-0777-371a-82d7-800c36f0e32f.roa (raw, json) Hash identifier: CvR9NMLg5ugB5fZv+QzNgX7I0i+74X1STTPYYmxUDR4= Subject key identifier: 02:AE:E7:74:20:24:FA:F5:9E:6D:19:E4:78:7D:19:CC:F1:5F:7A:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62022134B8F9F696C7CDDA95 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.19.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:21:34:b8:f9:f6:96:c7:cd:da:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f50551ad-53a2-4c6f-9de4-c9c2fb4f71ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:72:4f:5c:ef:c4:ae:85:fd:47:47:31:ce:7b: 87:5c:3c:9f:ca:a6:4d:2e:e5:97:57:09:00:5c:44: 77:f3:b2:78:72:44:bd:31:90:a0:30:d4:13:04:09: 84:7b:e9:9d:ca:04:47:18:ac:0f:38:ed:2f:77:c8: e0:07:17:54:d4:49:ef:93:d2:45:23:0c:cb:64:a6: fb:c5:83:b4:38:ae:fd:c6:02:86:f1:b9:6c:0d:e7: 90:4c:3a:3e:b7:1d:cb:b6:08:60:ef:b2:1c:6f:c5: a7:9f:39:89:28:bd:bf:30:98:28:7b:52:47:f0:ac: d1:64:39:35:26:31:cf:b0:f2:dc:58:69:79:1a:6a: 2a:1b:d6:3c:7c:af:40:09:48:87:00:8b:0a:51:47: a3:7d:06:86:54:e7:89:cd:05:71:74:b7:8a:a8:cd: 13:f3:95:05:da:dc:d7:ba:96:16:10:4d:6a:a6:2a: c6:83:1c:e0:d5:28:ff:01:05:94:79:47:49:35:a4: 28:24:88:0d:38:a4:13:ed:e2:ce:d4:77:e9:ce:97: 5c:93:28:40:64:61:29:f1:57:d3:61:aa:63:ff:1c: 1f:d3:48:17:7e:d8:37:12:42:b0:76:93:a2:56:2f: 0c:a2:86:21:03:d7:33:60:83:ed:0f:11:ef:70:d2: 33:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AE:E7:74:20:24:FA:F5:9E:6D:19:E4:78:7D:19:CC:F1:5F:7A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:dd:0d:6c:02:9a:77:20:10:56:01:85:ca:a1:43:e5:ba:0d: 5a:6f:13:21:82:03:05:57:be:ae:c0:43:2a:6d:3f:25:0d:b2: d8:30:94:b2:bc:f3:a0:d4:b1:1c:82:37:4f:5e:53:3b:8b:08: 1b:31:d5:51:38:b1:ec:af:2b:df:e5:ed:97:34:df:98:f0:c5: 67:0c:a3:16:3e:07:79:94:6f:9f:a9:3a:52:eb:d8:40:ee:25: b3:9d:c5:10:0f:dc:6e:0e:ce:c2:06:fd:3e:7c:d9:4d:a1:e7: 47:41:64:d3:b7:01:4e:3c:76:70:f0:1a:60:28:1d:07:be:63: ba:0b:c8:d4:0c:64:a8:72:80:9e:ed:ba:a8:8f:cd:49:4f:86: 2a:5f:21:95:05:a5:ef:ae:3b:25:f4:81:89:2b:d8:2d:7a:3b: d0:e6:74:4c:92:08:3c:2e:00:e9:88:fc:95:70:d2:9c:25:d4: df:3e:8f:60:d4:28:c6:62:21:75:84:9b:de:35:de:2b:24:a1: ac:90:d2:a9:03:ae:49:27:06:6e:a1:9b:b1:e0:37:e2:b3:7f: aa:0a:35:e7:48:91:43:d1:39:5e:88:56:d8:a7:f1:62:bf:7d: 3c:41:6c:73:b2:18:5b:04:3d:f1:11:d6:0c:23:8f:58:c0:bd: ce:3b:38:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiE0uPn2lsfN2pUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjUwNTUxYWQtNTNhMi00YzZmLTlkZTQtYzljMmZiNGY3MWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nJPXO/EroX9R0cxznuHXDyfyqZNLuWXVwkA XER387J4ckS9MZCgMNQTBAmEe+mdygRHGKwPOO0vd8jgBxdU1Envk9JFIwzLZKb7 xYO0OK79xgKG8blsDeeQTDo+tx3Ltghg77Icb8WnnzmJKL2/MJgoe1JH8KzRZDk1 JjHPsPLcWGl5GmoqG9Y8fK9ACUiHAIsKUUejfQaGVOeJzQVxdLeKqM0T85UF2tzX upYWEE1qpirGgxzg1Sj/AQWUeUdJNaQoJIgNOKQT7eLO1HfpzpdckyhAZGEp8VfT Yapj/xwf00gXftg3EkKwdpOiVi8MooYhA9czYIPtDxHvcNIzVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKu53QgJPr1nm0Z5Hh9GczxX3p5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM0MjNjNDItMDc3Ny0z NzFhLTgyZDctODAwYzM2ZjBlMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjdDWwCmncgEFYBhcqhQ+W6DVpvEyGCAwVXvq7AQyptPyUNstgwlLK8 86DUsRyCN09eUzuLCBsx1VE4seyvK9/l7Zc035jwxWcMoxY+B3mUb5+pOlLr2EDu JbOdxRAP3G4OzsIG/T582U2h50dBZNO3AU48dnDwGmAoHQe+Y7oLyNQMZKhygJ7t uqiPzUlPhipfIZUFpe+uOyX0gYkr2C16O9DmdEySCDwuAOmI/JVw0pwl1N8+j2DU KMZiIXWEm9413iskoayQ0qkDrkknBm6hm7HgN+Kzf6oKNedIkUPROV6IVtin8WK/ fTxBbHOyGFsEPfER1gwjj1jAvc47OCA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:21 2025 by rpki-client