$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa File: d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa (raw, json) Hash identifier: QJ15sl8C6dkcdbeSg43FZN8gbeJlRTN607rBCr70oMQ= Subject key identifier: E4:50:0C:2E:86:B1:73:2F:6B:CE:09:89:FB:F6:6A:28:03:31:F1:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE4DD7DAC699EB41367060 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.19.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4d:d7:da:c6:99:eb:41:36:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=47e47deb-71b6-4994-867c-19bd7842cc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:2e:b3:6b:9d:cf:8b:b6:2c:de:00:85:f1: 13:81:88:2d:32:bf:0c:99:e6:d2:99:6d:ce:3b:84: f5:4d:7c:b9:60:f9:9c:89:84:a0:f0:d1:c8:a7:77: 13:39:fe:83:1b:49:41:53:91:77:21:b4:38:bf:41: d8:c8:f2:ec:a5:75:35:b7:47:c9:88:e5:74:ca:ab: b7:51:2b:0e:1e:56:9a:d4:a7:8e:19:d1:1b:89:65: e6:09:8e:d0:c7:ec:67:c0:b8:5f:8b:0c:e9:67:20: 23:ef:97:3f:70:13:8d:6d:17:d0:c7:10:3c:2a:fe: 5a:2a:66:8f:b5:34:c0:67:5b:6c:9b:3d:2c:14:47: 45:b3:1e:6c:4d:f6:5b:20:57:b3:dd:ff:42:13:45: 79:e8:bd:8b:cf:39:19:bb:39:e8:61:b1:71:6a:80: cc:f9:9e:7e:da:93:43:85:11:c5:d8:1a:65:b3:f0: ef:e8:69:b1:92:00:9c:4a:23:db:62:5b:4d:99:6c: 7f:8a:e4:0d:9a:08:da:8d:b5:d6:58:79:6b:a2:6d: 26:7d:12:c3:40:7a:29:7c:1f:d8:c4:77:19:48:0f: 8d:de:d5:f4:c5:c6:9f:11:53:9f:b0:5e:4b:6a:f6: e1:d6:59:1b:16:25:bf:d0:c6:76:14:82:5d:37:28: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:0C:2E:86:B1:73:2F:6B:CE:09:89:FB:F6:6A:28:03:31:F1:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:64:bb:41:a0:3a:bf:78:f7:4a:e4:d3:77:44:cd:60:84:af: 63:29:db:11:c9:51:d0:11:29:d2:9c:dd:fe:75:ce:e8:2c:56: 11:60:b8:0a:1e:3f:4b:e4:6d:08:61:06:2a:c9:d0:bb:2e:e8: 8e:d6:15:3d:c7:34:73:d9:2e:bd:71:93:25:f3:fb:41:1a:10: e4:a6:7e:a9:ba:cd:f3:e5:b9:89:59:29:27:ba:a0:de:ad:98: 3f:bc:e8:46:7b:2f:38:b3:cb:c2:ac:89:de:10:c1:43:f7:95: fc:e9:40:c9:f3:79:5c:fa:15:8a:db:f4:08:f0:71:94:45:a5: 21:3e:13:c0:ab:ee:e9:6a:c5:e2:75:19:e3:9a:cf:df:6d:03: 54:4a:89:13:7a:21:e8:85:01:d5:74:b8:e1:e7:4c:8a:d9:bf: b0:dc:01:01:a3:24:d0:4b:ec:f4:52:f8:82:01:2b:91:e1:d1: 42:3c:b7:4d:b0:75:0c:49:3a:29:aa:4a:55:e8:b2:2d:5d:f1: 8c:9f:a2:5c:4b:1f:66:cd:6d:2d:09:24:fa:87:7b:28:07:3a: 6e:ed:99:6e:0e:7b:62:3c:2a:1d:18:02:d6:32:a3:48:78:df: 79:f6:98:53:d4:2f:e5:d6:c4:1f:e6:86:35:ae:69:60:ba:b1: cd:e8:33:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzk3X2saZ60E2cGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDdlNDdkZWItNzFiNi00OTk0LTg2N2MtMTliZDc4NDJjYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHMus2udz4u2LN4AhfETgYgtMr8MmebSmW3O O4T1TXy5YPmciYSg8NHIp3cTOf6DG0lBU5F3IbQ4v0HYyPLspXU1t0fJiOV0yqu3 USsOHlaa1KeOGdEbiWXmCY7Qx+xnwLhfiwzpZyAj75c/cBONbRfQxxA8Kv5aKmaP tTTAZ1tsmz0sFEdFsx5sTfZbIFez3f9CE0V56L2LzzkZuznoYbFxaoDM+Z5+2pND hRHF2Bpls/Dv6GmxkgCcSiPbYltNmWx/iuQNmgjajbXWWHlrom0mfRLDQHopfB/Y xHcZSA+N3tX0xcafEVOfsF5Lavbh1lkbFiW/0MZ2FIJdNyhrJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORQDC6GsXMva84Jifv2aigDMfHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRmYTg4Y2UtYWE0Ni0z ZmNhLTk2NDktZmMxMmI3NWNhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpku0GgOr9490rk03dEzWCEr2Mp2xHJUdARKdKc3f51zugsVhFguAoe P0vkbQhhBirJ0Lsu6I7WFT3HNHPZLr1xkyXz+0EaEOSmfqm6zfPluYlZKSe6oN6t mD+86EZ7Lzizy8Ksid4QwUP3lfzpQMnzeVz6FYrb9AjwcZRFpSE+E8Cr7ulqxeJ1 GeOaz99tA1RKiRN6IeiFAdV0uOHnTIrZv7DcAQGjJNBL7PRS+IIBK5Hh0UI8t02w dQxJOimqSlXosi1d8YyfolxLH2bNbS0JJPqHeygHOm7tmW4Oe2I8Kh0YAtYyo0h4 33n2mFPUL+XWxB/mhjWuaWC6sc3oM/c= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:55 2025 by rpki-client