$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2b8e47f-27b7-3330-b8c6-b39b2c8bd0d8.roa File: e2b8e47f-27b7-3330-b8c6-b39b2c8bd0d8.roa (raw, json) Hash identifier: x9oQfzDttMPO+X8Xh3LfcCIDFpEIW+Rnxv8+rhd7z18= Subject key identifier: F7:81:4B:93:BC:1B:E8:3B:62:6E:43:AC:58:1A:15:78:D0:D4:54:5F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73C546F884090AA460000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2b8e47f-27b7-3330-b8c6-b39b2c8bd0d8.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.29.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3c:54:6f:88:40:90:aa:46:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=e775f5e5-4b7f-4027-ad96-91d0e06318eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:fe:a6:c0:85:02:75:42:c2:ee:39:b2:96: 5e:b5:c8:a3:6e:9a:d7:bf:77:5e:de:1f:51:c7:eb: 47:21:a2:8d:1e:15:7b:d4:6c:71:05:7f:4a:42:97: 0b:77:0b:08:0d:3c:a1:82:f4:23:20:16:86:09:cd: b0:66:2c:2e:60:ce:75:3b:79:8a:64:f9:50:a8:96: 4b:e7:92:40:bf:bd:7d:47:04:69:6a:03:6a:2d:5e: f6:c5:c4:73:14:bc:12:f2:62:fd:24:e6:20:a3:83: 1b:c2:0b:60:93:7c:90:28:c9:1f:25:20:84:96:e5: 8d:45:37:59:c8:f4:6c:0d:69:b7:53:d9:8c:6b:bd: c6:8a:fe:cd:ad:3c:2c:c8:49:a9:5d:60:f9:5e:bc: 27:f0:b0:2b:67:d9:de:b4:06:d4:3b:79:b7:6c:8d: 2e:46:10:04:19:c7:eb:9a:78:98:68:14:30:0e:65: f4:9f:d9:ff:84:95:3d:a8:11:4f:a1:b4:07:cd:0c: 0a:81:f0:44:68:55:76:39:5c:16:cb:c3:fd:8b:d9: bb:a1:bb:26:0c:09:b1:14:21:ee:9e:e0:41:a0:86: 26:9d:ff:b2:6d:e2:2b:93:bf:64:4f:1d:6a:18:56: 24:ae:06:db:12:59:01:01:c7:e0:46:91:cf:78:7c: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:81:4B:93:BC:1B:E8:3B:62:6E:43:AC:58:1A:15:78:D0:D4:54:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2b8e47f-27b7-3330-b8c6-b39b2c8bd0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:44:53:14:4a:7b:e1:d6:b1:df:c7:0b:64:ef:ce:23:8b:11: 84:71:e6:21:4a:54:68:df:5d:5a:31:cf:5f:e1:8a:09:41:a0: 81:81:62:1e:f1:34:24:de:8b:84:76:97:01:77:96:8a:f6:19: a1:ca:ff:7b:d7:5e:58:83:80:2c:14:a9:78:4b:f8:27:06:7a: bd:3b:2f:01:2e:17:4d:f1:f7:11:1a:61:f2:df:4e:e0:df:f8: b4:3b:f1:41:46:64:36:46:a5:bd:f7:35:7e:5f:b7:13:7f:4c: 59:ea:55:37:04:72:27:3f:b4:fb:48:8c:33:cc:b0:96:69:d7: 0b:b2:1c:cd:b2:c8:8e:e6:a5:86:0b:35:1e:58:d2:14:87:e5: 50:8c:3a:fc:d6:de:da:15:f7:12:34:e5:da:64:3c:d4:4a:67: dd:79:9a:83:be:bb:e5:38:44:19:11:80:89:22:8c:5c:bc:ce: 94:2f:46:21:4c:a8:33:b6:30:71:ea:fd:86:0a:26:43:d3:ad: 84:1b:40:84:88:56:84:eb:87:e5:da:b8:5e:81:fc:f4:e5:a6: a6:fa:73:cb:83:51:e2:b1:52:58:85:19:67:b4:98:34:57:db: 1b:1a:39:07:e9:7d:3c:a2:56:45:6f:a8:4d:2c:29:80:3f:aa: 68:9d:dc:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zxUb4hAkKpGAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTc3NWY1ZTUtNGI3Zi00MDI3LWFkOTYtOTFkMGUwNjMxOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDT+psCFAnVCwu45spZetcijbprXv3de3h9R x+tHIaKNHhV71GxxBX9KQpcLdwsIDTyhgvQjIBaGCc2wZiwuYM51O3mKZPlQqJZL 55JAv719RwRpagNqLV72xcRzFLwS8mL9JOYgo4Mbwgtgk3yQKMkfJSCEluWNRTdZ yPRsDWm3U9mMa73Giv7NrTwsyEmpXWD5Xrwn8LArZ9netAbUO3m3bI0uRhAEGcfr mniYaBQwDmX0n9n/hJU9qBFPobQHzQwKgfBEaFV2OVwWy8P9i9m7obsmDAmxFCHu nuBBoIYmnf+ybeIrk79kTx1qGFYkrgbbElkBAcfgRpHPeHzD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeBS5O8G+g7Ym5DrFgaFXjQ1FRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTJiOGU0N2YtMjdiNy0z MzMwLWI4YzYtYjM5YjJjOGJkMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBEUxRKe+HWsd/HC2TvziOLEYRx5iFKVGjfXVoxz1/higlBoIGBYh7x NCTei4R2lwF3lor2GaHK/3vXXliDgCwUqXhL+CcGer07LwEuF03x9xEaYfLfTuDf +LQ78UFGZDZGpb33NX5ftxN/TFnqVTcEcic/tPtIjDPMsJZp1wuyHM2yyI7mpYYL NR5Y0hSH5VCMOvzW3toV9xI05dpkPNRKZ915moO+u+U4RBkRgIkijFy8zpQvRiFM qDO2MHHq/YYKJkPTrYQbQISIVoTrh+XauF6B/PTlpqb6c8uDUeKxUliFGWe0mDRX 2xsaOQfpfTyiVkVvqE0sKYA/qmid3MQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:06 2025 by rpki-client