$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa File: dafac471-af6f-3a79-bde6-d8bb06803d84.roa (raw, json) Hash identifier: ioHO4J31nDlkK/J6BQb03CfGP08EIkGsWecy10W4TP8= Subject key identifier: C2:1F:9F:F2:BE:EF:17:C4:33:86:56:52:99:FB:AC:A6:20:65:2B:E6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D742739FA56D87BE32ED40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.25.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:42:73:9f:a5:6d:87:be:32:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=c884081c-9c6e-4929-8ddd-0ab0f1bc3f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:17:fb:b6:65:8a:75:6e:7e:50:4e:b5:e0:cb: d0:7c:f3:0c:d8:d0:18:d0:63:ec:5a:d4:6d:95:3e: bf:bc:d3:47:eb:0b:b5:30:a3:0b:81:7e:eb:49:3b: ff:27:a8:89:d5:4c:a6:b8:59:aa:b0:73:a3:cd:01: 6a:7a:87:d1:b0:c7:8d:df:75:cd:a5:3f:f6:1b:c2: 68:ee:0b:c6:a4:5a:25:24:4c:37:da:10:e2:19:0a: 4a:32:3d:e1:5b:2e:91:13:58:29:62:4a:41:f8:ce: d1:78:08:f4:30:25:91:3a:5e:2e:e1:d1:0d:f3:cb: 7c:00:82:fd:5b:01:bf:2d:04:c4:ce:4a:9e:7f:37: 61:c4:df:b3:8f:77:06:85:18:6c:32:49:3d:83:3a: 45:83:1e:ad:50:21:ba:3e:77:87:91:0e:81:3b:80: cb:22:23:d2:76:2e:3f:bb:96:ce:be:2a:23:79:82: f0:da:13:a3:54:9c:b4:7a:45:7f:9a:6d:83:0c:8f: 0f:d0:b4:15:41:c1:7f:38:f3:e8:04:ac:c3:e1:60: 49:d1:dc:74:f3:ca:f2:93:b6:0d:e9:55:67:5c:92: 29:e6:f6:98:c8:d8:12:de:89:f6:5e:74:1e:b8:29: e5:4a:c2:49:4a:ce:dc:c0:af:2a:31:62:62:70:64: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1F:9F:F2:BE:EF:17:C4:33:86:56:52:99:FB:AC:A6:20:65:2B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d4:6c:22:30:a6:ec:e3:68:ee:ab:b0:83:c5:ee:45:7b:e6: 5f:38:80:1a:16:1a:25:8e:7a:55:b1:bc:6c:f0:ce:da:35:b5: 10:3f:36:e9:53:fb:67:c6:8f:b3:dd:0b:76:42:ac:fb:74:44: c6:a7:6c:aa:9f:7c:83:9c:fe:58:a9:d7:a3:6e:4e:10:14:12: 09:46:97:f3:88:c0:2d:cb:3d:46:3d:16:a7:0e:59:5a:05:ce: a1:1d:29:05:b4:ea:4b:e5:8e:22:f0:48:b8:8e:c2:03:92:56: 02:40:fc:7b:53:b2:c2:b7:6a:45:a3:06:74:78:2a:d3:9a:c2: bb:1b:89:a8:f8:ec:29:cc:bc:c7:26:6e:b6:c0:59:4b:0a:4c: 3e:7d:96:90:3d:43:92:46:fc:d1:71:ed:28:86:36:fe:5f:d8: 13:29:e4:70:86:3b:0d:0c:48:7c:d4:c4:de:f9:8f:b8:48:28: 82:a9:8b:cf:8e:a6:43:90:a6:d5:ba:cb:be:56:39:45:e5:eb: a0:3f:87:21:7e:43:f9:c8:99:77:3f:b9:d9:d3:97:ec:2f:9d: f2:59:f5:4f:d8:0e:d1:11:ce:c6:17:7e:fa:ca:94:64:06:df: 7b:d6:97:a1:4b:d4:64:25:34:ff:4f:5a:e3:80:45:3e:71:f0: b2:2f:36:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10Jzn6Vth74y7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk Yzg4NDA4MWMtOWM2ZS00OTI5LThkZGQtMGFiMGYxYmMzZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rf7tmWKdW5+UE614MvQfPMM2NAY0GPsWtRt lT6/vNNH6wu1MKMLgX7rSTv/J6iJ1UymuFmqsHOjzQFqeofRsMeN33XNpT/2G8Jo 7gvGpFolJEw32hDiGQpKMj3hWy6RE1gpYkpB+M7ReAj0MCWROl4u4dEN88t8AIL9 WwG/LQTEzkqefzdhxN+zj3cGhRhsMkk9gzpFgx6tUCG6PneHkQ6BO4DLIiPSdi4/ u5bOviojeYLw2hOjVJy0ekV/mm2DDI8P0LQVQcF/OPPoBKzD4WBJ0dx088ryk7YN 6VVnXJIp5vaYyNgS3on2XnQeuCnlSsJJSs7cwK8qMWJicGSxhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIfn/K+7xfEM4ZWUpn7rKYgZSvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFmYWM0NzEtYWY2Zi0z YTc5LWJkZTYtZDhiYjA2ODAzZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfUbCIwpuzjaO6rsIPF7kV75l84gBoWGiWOelWxvGzwzto1tRA/NulT +2fGj7PdC3ZCrPt0RManbKqffIOc/lip16NuThAUEglGl/OIwC3LPUY9FqcOWVoF zqEdKQW06kvljiLwSLiOwgOSVgJA/HtTssK3akWjBnR4KtOawrsbiaj47CnMvMcm brbAWUsKTD59lpA9Q5JG/NFx7SiGNv5f2BMp5HCGOw0MSHzUxN75j7hIKIKpi8+O pkOQptW6y75WOUXl66A/hyF+Q/nImXc/udnTl+wvnfJZ9U/YDtERzsYXfvrKlGQG 33vWl6FL1GQlNP9PWuOART5x8LIvNic= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:54 2025 by rpki-client