$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa File: db192c87-71b8-3a46-a574-845bd837a8f4.roa (raw, json) Hash identifier: 8wqAcP5ogY5WUW9eZHHitJ2OSRplI2H6v009FaSkip4= Subject key identifier: A4:8E:BF:74:C9:C4:ED:CA:B5:A8:37:18:DF:73:FC:62:B1:BE:0F:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC9290C050C6C1154615E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.31.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:92:90:c0:50:c6:c1:15:46:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=264744dd-3b57-49c1-9a74-3b8e91010a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:9c:2c:84:29:6c:9d:77:1f:4c:25:6b:e7: 27:0e:de:0f:e3:aa:69:58:9a:cb:5f:5b:9c:79:d6: 8f:f7:3b:1c:db:7e:86:95:47:9c:ba:56:07:c7:06: cf:3d:0e:1a:31:b8:59:29:f0:9e:2d:90:d4:f9:de: 9e:8a:85:81:a1:00:dd:ae:96:99:df:ff:a4:05:ef: 86:8f:3f:59:47:91:f2:a4:94:28:a5:59:71:5e:3b: bd:49:fa:ef:a5:a0:fc:f8:57:16:4b:95:9c:ea:22: 82:68:ac:71:ea:0e:fd:0c:58:fd:e0:04:51:b7:36: 8f:f0:55:da:76:bf:ba:19:c3:8a:56:3b:e2:60:0f: 0c:b2:7e:73:34:1c:35:6f:50:f5:85:e9:a1:20:1b: ca:1d:e3:77:5d:9a:72:23:d3:15:4e:73:20:e2:d6: ab:a9:7c:72:ce:dc:12:d5:f7:9c:ad:ce:c7:73:ef: 6a:7c:e8:25:c4:52:e5:1d:90:b7:2a:86:3b:25:31: 70:c2:a4:5f:a3:c3:5d:26:dd:d6:d5:f1:db:8f:75: 64:d0:7f:a1:f8:8d:2e:e4:94:39:7b:44:2d:f9:dd: c9:fb:ca:ed:69:c7:f0:a1:02:f4:27:57:cc:5a:ec: 24:11:c6:a7:d7:12:48:1c:51:7c:11:1c:b2:8b:6c: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8E:BF:74:C9:C4:ED:CA:B5:A8:37:18:DF:73:FC:62:B1:BE:0F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d5:cb:cd:19:05:c0:c3:bf:55:3c:0c:28:c1:58:74:1b:e0: 53:2e:6e:8f:be:c5:31:09:4a:7a:ed:e3:bc:86:9d:aa:f8:26: 7f:5b:34:f9:c4:c3:87:2f:96:13:ac:57:c8:ca:6c:94:4f:a3: 76:10:25:f7:b8:a8:67:69:8c:0d:68:b9:21:e7:41:5b:1a:b4: 6d:c8:1d:70:e6:b3:57:75:82:fb:38:5b:f5:48:dd:94:9d:77: fd:b6:15:93:fa:40:2f:c1:02:14:19:29:61:d9:e7:bd:c6:b0: 9f:6e:9b:7f:60:19:e9:80:f9:89:3a:ba:8f:f4:ae:b5:39:19: d4:c9:cc:1b:bb:12:25:a4:f3:dd:f0:3b:ae:e1:b3:7f:be:65: 4e:dc:2f:99:10:d5:47:cd:8f:5b:99:8e:4c:ed:aa:00:f8:f5: 1c:5c:a0:20:a2:e7:f7:57:1c:55:a8:3a:d9:60:aa:3c:ea:32: de:0b:04:66:8e:31:29:08:68:92:9f:65:a3:26:4c:3e:cd:dc: 23:47:aa:5c:11:b3:84:a2:c2:ea:59:ac:ad:39:71:47:dc:b8: a5:6b:70:02:97:57:cf:14:42:25:c3:24:f6:3b:a6:fd:79:23: 75:f7:4c:b9:79:1f:85:b5:f4:1b:bd:09:34:0e:93:20:d3:04: 61:b3:5d:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzJKQwFDGwRVGFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjY0NzQ0ZGQtM2I1Ny00OWMxLTlhNzQtM2I4ZTkxMDEwYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqqcLIQpbJ13H0wla+cnDt4P46ppWJrLX1uc edaP9zsc236GlUeculYHxwbPPQ4aMbhZKfCeLZDU+d6eioWBoQDdrpaZ3/+kBe+G jz9ZR5HypJQopVlxXju9SfrvpaD8+FcWS5Wc6iKCaKxx6g79DFj94ARRtzaP8FXa dr+6GcOKVjviYA8Msn5zNBw1b1D1hemhIBvKHeN3XZpyI9MVTnMg4tarqXxyztwS 1fecrc7Hc+9qfOglxFLlHZC3KoY7JTFwwqRfo8NdJt3W1fHbj3Vk0H+h+I0u5JQ5 e0Qt+d3J+8rtacfwoQL0J1fMWuwkEcan1xJIHFF8ERyyi2yapQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSOv3TJxO3Ktag3GN9z/GKxvg9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGIxOTJjODctNzFiOC0z YTQ2LWE1NzQtODQ1YmQ4MzdhOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXVy80ZBcDDv1U8DCjBWHQb4FMubo++xTEJSnrt47yGnar4Jn9bNPnE w4cvlhOsV8jKbJRPo3YQJfe4qGdpjA1ouSHnQVsatG3IHXDms1d1gvs4W/VI3ZSd d/22FZP6QC/BAhQZKWHZ573GsJ9um39gGemA+Yk6uo/0rrU5GdTJzBu7EiWk893w O67hs3++ZU7cL5kQ1UfNj1uZjkztqgD49RxcoCCi5/dXHFWoOtlgqjzqMt4LBGaO MSkIaJKfZaMmTD7N3CNHqlwRs4SiwupZrK05cUfcuKVrcAKXV88UQiXDJPY7pv15 I3X3TLl5H4W19Bu9CTQOkyDTBGGzXW4= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:37 2025 by rpki-client