$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f2efc2-3715-3879-b13a-9c299db62e9a.roa File: d5f2efc2-3715-3879-b13a-9c299db62e9a.roa (raw, json) Hash identifier: +AlpMP/bG6xi08JOthjmT0x8lHJ85U/LKxNUVPXRPpA= Subject key identifier: 46:94:79:8A:14:61:1D:FE:F1:6D:A2:AD:F8:6E:8A:FB:FA:96:46:A0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201FA1A4BA16CDEF68EDF40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f2efc2-3715-3879-b13a-9c299db62e9a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.22.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fa:1a:4b:a1:6c:de:f6:8e:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9a856fe7-f939-4062-8ff7-c536efcdc7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:97:45:71:8d:16:86:77:b9:4e:2d:ab:c7: cd:bf:82:65:14:d6:0e:cf:bc:6b:a6:0f:4e:e8:e9: fa:55:5e:06:63:6b:76:17:ef:0a:e0:09:e7:39:a8: a9:38:ca:69:d3:27:10:86:48:20:b4:e4:0a:ee:59: 11:f3:61:7a:bb:e5:2b:9c:7a:c2:4c:d3:35:16:1b: 6e:fb:d1:8c:c7:e8:8b:a6:00:31:59:ac:84:98:7d: ea:9e:fc:69:e0:02:f2:28:53:a0:36:c1:3c:41:f6: 8e:b8:ee:96:f3:99:da:05:5d:77:3a:3a:f9:1d:43: 00:f2:c9:a8:eb:52:25:da:79:98:7f:d9:49:a5:a3: 14:a2:95:49:5f:0a:45:a0:17:dd:33:33:7c:ec:74: da:fd:e2:18:29:3d:e3:ad:df:71:d7:a9:af:68:17: 28:9e:1d:ea:07:c8:27:b5:bc:32:31:3c:7e:9f:f8: 79:b2:76:c3:a2:94:19:55:b6:4c:11:51:84:c0:1b: 44:18:33:56:26:6a:46:d0:df:fd:24:fa:30:9f:32: cd:e9:e5:10:4f:9c:f5:96:00:52:e3:5b:d3:7c:ef: 52:25:32:c9:ed:3e:b8:27:6e:ae:ca:6a:9c:c9:76: 71:df:7a:af:5d:c9:b9:33:93:2b:dc:07:b3:dd:5e: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:94:79:8A:14:61:1D:FE:F1:6D:A2:AD:F8:6E:8A:FB:FA:96:46:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f2efc2-3715-3879-b13a-9c299db62e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:23:a3:31:cd:00:f0:43:e9:eb:66:2b:a6:ad:a7:77:8a:10: 36:b8:ee:b1:32:c0:c1:df:f8:bb:75:1a:1d:bc:1b:05:84:a3: d2:e9:78:10:0d:d5:39:eb:05:ae:89:c0:81:c9:66:cb:93:62: c5:c5:58:60:33:89:3a:c6:64:10:45:ab:a9:d2:2b:fa:82:13: 44:a2:db:33:7c:c0:cc:44:6a:d2:77:b1:da:db:5b:35:74:a4: 84:4d:e9:2b:12:b2:8a:4a:22:62:20:6b:73:5b:70:89:4d:28: 6c:0f:0a:83:60:49:7f:d1:24:41:5b:a7:cf:dc:d2:b7:de:c1: cf:c1:64:f0:99:af:a0:4c:4f:87:a8:8a:6a:02:64:6b:85:60: 1c:07:ab:d5:d4:37:7f:f9:ba:2a:81:94:48:3b:38:a5:9c:21: 92:bb:ec:1b:f0:3e:3b:7f:79:7f:21:7b:39:e1:5f:a1:1a:ec: 0e:c8:aa:ab:fe:fe:27:d0:b9:a7:51:6c:5c:01:25:80:3c:d5: 7e:64:e8:3e:c4:e9:7d:d2:3c:95:75:d1:5e:86:c7:7e:fa:70: c3:ca:8f:21:62:62:d0:03:84:2e:03:1b:13:39:e3:96:d5:6b: 05:b2:c8:9a:12:1b:60:22:2e:a3:4b:2b:39:17:0d:7f:32:0a: 24:a8:db:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfoaS6Fs3vaO30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWE4NTZmZTctZjkzOS00MDYyLThmZjctYzUzNmVmY2RjN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9KXRXGNFoZ3uU4tq8fNv4JlFNYOz7xrpg9O 6On6VV4GY2t2F+8K4AnnOaipOMpp0ycQhkggtOQK7lkR82F6u+UrnHrCTNM1Fhtu +9GMx+iLpgAxWayEmH3qnvxp4ALyKFOgNsE8QfaOuO6W85naBV13Ojr5HUMA8smo 61Il2nmYf9lJpaMUopVJXwpFoBfdMzN87HTa/eIYKT3jrd9x16mvaBconh3qB8gn tbwyMTx+n/h5snbDopQZVbZMEVGEwBtEGDNWJmpG0N/9JPownzLN6eUQT5z1lgBS 41vTfO9SJTLJ7T64J26uymqcyXZx33qvXcm5M5Mr3Aez3V4sDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaUeYoUYR3+8W2irfhuivv6lkagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDVmMmVmYzItMzcxNS0z ODc5LWIxM2EtOWMyOTlkYjYyZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRapMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYjozHNAPBD6etmK6atp3eKEDa47rEywMHf+Lt1Gh28GwWEo9LpeBAN 1TnrBa6JwIHJZsuTYsXFWGAziTrGZBBFq6nSK/qCE0Si2zN8wMxEatJ3sdrbWzV0 pIRN6SsSsopKImIga3NbcIlNKGwPCoNgSX/RJEFbp8/c0rfewc/BZPCZr6BMT4eo imoCZGuFYBwHq9XUN3/5uiqBlEg7OKWcIZK77BvwPjt/eX8heznhX6Ea7A7Iqqv+ /ifQuadRbFwBJYA81X5k6D7E6X3SPJV10V6Gx376cMPKjyFiYtADhC4DGxM545bV awWyyJoSG2AiLqNLKzkXDX8yCiSo2w0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:46 2025 by rpki-client