$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd1ae71f-1d41-3b70-bba6-c5c226b09060.roa File: dd1ae71f-1d41-3b70-bba6-c5c226b09060.roa (raw, json) Hash identifier: idFD6EZXYLXzcIdWNR6DHgXF9+8Tatn+yLMSf2xDOkg= Subject key identifier: 88:EB:52:75:52:52:02:58:96:08:B4:AC:6E:2B:E4:63:F9:73:3B:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE4A750CFE5E21E19C84C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd1ae71f-1d41-3b70-bba6-c5c226b09060.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.16.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4a:75:0c:fe:5e:21:e1:9c:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1de847e0-1695-4ce1-a80a-61dac070c070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ff:6f:eb:25:57:de:59:10:b9:08:f7:d1:a8: 98:98:63:96:b1:54:55:52:e5:1b:d7:38:68:a6:2b: a2:66:1f:c5:48:0a:2e:9c:30:22:03:c4:cd:bb:2b: 73:ae:14:d5:a6:3c:11:2c:b8:b5:af:d2:0c:3e:41: ae:2c:f0:24:e2:de:e0:77:0a:c1:a4:08:98:e9:9a: 5c:10:f8:67:45:de:72:c5:b0:a2:b6:d3:69:2a:3d: 78:23:c7:12:f6:ac:ce:b3:11:b2:75:35:13:6c:8a: 30:eb:f6:83:4f:08:21:20:da:d2:19:13:d4:54:f5: c8:47:e8:5c:77:f0:e6:55:7a:d6:f5:e3:83:e4:fa: 7f:61:b1:f6:37:be:13:a4:0f:d8:57:55:83:7d:4a: a4:f4:79:26:7d:dd:fd:2d:de:65:7d:b5:c3:a5:d5: a9:7a:ba:9f:42:68:ec:01:45:ab:a6:f8:e7:22:b9: e6:f2:1e:df:08:42:7e:14:d1:9b:e4:b1:08:1d:db: d1:38:bd:c6:40:5f:5d:21:c5:91:19:73:06:da:f8: 48:48:b5:f1:01:9f:64:b1:35:3b:1d:81:49:d9:58: 1b:46:48:e9:69:a0:61:59:e6:77:7f:93:6e:23:00: 7f:d6:ac:5e:0a:c6:d6:fa:db:81:50:59:4d:c3:d5: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EB:52:75:52:52:02:58:96:08:B4:AC:6E:2B:E4:63:F9:73:3B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd1ae71f-1d41-3b70-bba6-c5c226b09060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b2:1d:5b:33:40:0e:36:fd:11:88:03:a6:1e:58:c1:39:2e: 38:19:8e:b0:16:66:93:fc:49:e2:ba:4b:94:48:91:03:f9:ab: d4:1b:17:5e:86:4f:77:a8:a3:b2:b3:7d:5d:5b:b4:54:09:66: a7:6e:70:38:22:03:f7:7a:6f:a2:fe:2b:80:10:67:07:59:d7: 92:ae:66:77:bc:70:91:69:47:d3:31:c2:8c:6a:92:98:8c:37: e7:d2:68:fc:86:6f:d8:1a:42:f1:2d:e2:4f:73:6d:51:0f:e7: e4:c3:3a:f0:d1:f8:0c:49:69:11:da:98:11:1b:68:0a:59:01: c7:34:b3:23:90:12:52:2f:c1:b1:61:3d:f9:b4:06:26:fe:d2: e5:e6:32:2f:aa:c7:ef:dc:d2:82:05:67:a8:e4:b9:30:0f:32: a2:b9:b2:36:be:c4:02:c4:da:3c:85:4a:3b:64:99:c7:ee:96: da:d9:a4:64:c1:1b:d1:0e:ae:ef:0a:0c:2a:b3:0d:39:bf:8e: 64:af:be:1c:d8:55:a2:9b:14:06:89:2c:8a:f7:49:e6:e7:15: 6b:29:65:50:42:17:1c:c6:63:c4:19:3a:c8:23:ef:9f:45:e5: 38:3e:77:ab:26:30:d6:21:94:25:e4:31:7e:e6:d7:5b:cd:27: 21:48:97:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkp1DP5eIeGchMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWRlODQ3ZTAtMTY5NS00Y2UxLWE4MGEtNjFkYWMwNzBjMDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/9v6yVX3lkQuQj30aiYmGOWsVRVUuUb1zho piuiZh/FSAounDAiA8TNuytzrhTVpjwRLLi1r9IMPkGuLPAk4t7gdwrBpAiY6Zpc EPhnRd5yxbCittNpKj14I8cS9qzOsxGydTUTbIow6/aDTwghINrSGRPUVPXIR+hc d/DmVXrW9eOD5Pp/YbH2N74TpA/YV1WDfUqk9Hkmfd39Ld5lfbXDpdWperqfQmjs AUWrpvjnIrnm8h7fCEJ+FNGb5LEIHdvROL3GQF9dIcWRGXMG2vhISLXxAZ9ksTU7 HYFJ2VgbRkjpaaBhWeZ3f5NuIwB/1qxeCsbW+tuBUFlNw9UZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjrUnVSUgJYlgi0rG4r5GP5czv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGQxYWU3MWYtMWQ0MS0z YjcwLWJiYTYtYzVjMjI2YjA5MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+yHVszQA42/RGIA6YeWME5LjgZjrAWZpP8SeK6S5RIkQP5q9QbF16G T3eoo7KzfV1btFQJZqducDgiA/d6b6L+K4AQZwdZ15KuZne8cJFpR9MxwoxqkpiM N+fSaPyGb9gaQvEt4k9zbVEP5+TDOvDR+AxJaRHamBEbaApZAcc0syOQElIvwbFh Pfm0Bib+0uXmMi+qx+/c0oIFZ6jkuTAPMqK5sja+xALE2jyFSjtkmcfultrZpGTB G9EOru8KDCqzDTm/jmSvvhzYVaKbFAaJLIr3SebnFWspZVBCFxzGY8QZOsgj759F 5Tg+d6smMNYhlCXkMX7m11vNJyFIl+k= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:44 2025 by rpki-client