$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa File: d8b71705-3c5f-32db-9cbc-77633933110e.roa (raw, json) Hash identifier: iLBt/8EnWzyumNdBrpH3C0fPyPCslsPLyEU2sfzoUXo= Subject key identifier: 5F:55:C3:3A:41:1C:AF:F9:68:30:D6:8D:69:07:5B:9F:13:81:A9:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C715A53B2532CAD3CE080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.25.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:71:5a:53:b2:53:2c:ad:3c:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=6e70bf82-647e-4bd3-a929-3060fde50ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2e:dd:6a:a4:e0:fe:68:4f:74:b5:fd:b4:6d: 69:9c:73:e7:8f:8b:d3:3b:ce:0d:b8:99:1a:b2:37: 6f:8f:32:32:66:43:00:43:cc:ce:f0:ea:d7:bf:9c: 3f:34:ca:4a:f1:2b:93:13:76:70:eb:62:fc:08:51: 5f:15:b7:49:cd:31:59:da:6d:c7:a4:a6:e2:3e:af: 87:89:28:be:f1:6e:c0:6c:fd:91:c7:f8:29:47:ed: 1c:2f:8f:0c:47:d5:c8:87:e6:0a:6c:62:13:b1:1c: 8e:c3:72:e1:7f:98:43:4b:c0:38:10:a7:c7:29:95: 52:5f:c5:e2:34:1d:c1:02:91:46:9b:b9:25:4c:b1: 08:39:ee:e4:b0:ad:cd:70:23:d0:c6:9c:d1:bb:d1: 12:8d:ee:d7:c0:69:a2:ad:b8:f4:c1:54:2a:bf:07: 8e:cf:dc:dd:f6:6a:fa:d3:9b:ef:a6:36:fc:e1:a8: cd:b0:7f:dc:a4:f0:b7:24:94:12:ce:0b:24:25:48: e6:1a:03:58:d2:15:6c:7b:c6:40:dd:86:63:69:78: 78:49:a0:78:55:87:4d:ff:02:c5:43:52:fe:d9:03: 25:61:ae:43:e0:84:2c:c3:66:c1:14:9d:58:f7:b5: fa:62:42:6a:cc:31:74:25:d1:77:08:c5:7a:5b:9f: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:55:C3:3A:41:1C:AF:F9:68:30:D6:8D:69:07:5B:9F:13:81:A9:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a6:25:aa:68:bf:52:a8:e2:b8:32:1f:ac:9f:26:b3:08:c8: c9:25:86:e1:8d:a7:82:c4:ef:a3:96:97:b1:61:bc:32:ef:55: 38:b8:b1:e7:3c:20:dc:75:d5:be:dc:ed:d4:82:d2:0a:1e:3c: 43:88:43:c2:15:8c:94:f3:84:41:e6:3e:5c:c9:42:bf:bb:69: 04:38:76:07:ae:e4:f6:af:61:58:f2:ce:3c:1a:90:bd:e5:4e: d6:56:fe:0d:f6:50:00:a9:5a:42:d7:6d:ea:ef:1a:84:f8:2c: 2d:38:14:05:c2:35:b0:fd:66:d4:0e:18:af:e4:d7:9e:ea:05: 52:b8:c2:0c:55:bf:5e:cf:6b:02:2c:1a:d6:7f:36:cc:39:9d: 6c:82:34:a5:52:c6:aa:57:b0:a8:ab:f0:b9:dd:34:cc:f7:e6: 4c:cc:69:5a:26:52:65:30:9b:00:6e:93:a5:02:fc:b0:db:0a: ec:97:70:03:bd:20:dc:2a:5d:52:46:b6:2f:31:91:ff:6c:bf: 94:4d:09:de:c2:d1:82:c7:84:35:9a:a5:65:e2:e9:a0:e8:39: 51:ba:90:c7:8d:75:4e:ea:e2:25:9f:fd:11:7a:99:fb:fe:db: 66:84:e0:24:07:d5:38:74:d6:cc:3d:a2:a9:54:45:33:21:32: 85:3f:1a:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHFaU7JTLK084IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NmU3MGJmODItNjQ3ZS00YmQzLWE5MjktMzA2MGZkZTUwYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi7daqTg/mhPdLX9tG1pnHPnj4vTO84NuJka sjdvjzIyZkMAQ8zO8OrXv5w/NMpK8SuTE3Zw62L8CFFfFbdJzTFZ2m3HpKbiPq+H iSi+8W7AbP2Rx/gpR+0cL48MR9XIh+YKbGITsRyOw3Lhf5hDS8A4EKfHKZVSX8Xi NB3BApFGm7klTLEIOe7ksK3NcCPQxpzRu9ESje7XwGmirbj0wVQqvweOz9zd9mr6 05vvpjb84ajNsH/cpPC3JJQSzgskJUjmGgNY0hVse8ZA3YZjaXh4SaB4VYdN/wLF Q1L+2QMlYa5D4IQsw2bBFJ1Y97X6YkJqzDF0JdF3CMV6W593iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9VwzpBHK/5aDDWjWkHW58TgameMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDhiNzE3MDUtM2M1Zi0z MmRiLTljYmMtNzc2MzM5MzMxMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACumJapov1Ko4rgyH6yfJrMIyMklhuGNp4LE76OWl7FhvDLvVTi4sec8 INx11b7c7dSC0goePEOIQ8IVjJTzhEHmPlzJQr+7aQQ4dgeu5PavYVjyzjwakL3l TtZW/g32UACpWkLXbervGoT4LC04FAXCNbD9ZtQOGK/k157qBVK4wgxVv17PawIs GtZ/Nsw5nWyCNKVSxqpXsKir8LndNMz35kzMaVomUmUwmwBuk6UC/LDbCuyXcAO9 INwqXVJGti8xkf9sv5RNCd7C0YLHhDWapWXi6aDoOVG6kMeNdU7q4iWf/RF6mfv+ 22aE4CQH1Th01sw9oqlURTMhMoU/GkI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:49 2025 by rpki-client