$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e862efb7-ebc0-3290-8ab0-d8c7a08ee6a3.roa File: e862efb7-ebc0-3290-8ab0-d8c7a08ee6a3.roa (raw, json) Hash identifier: WF/3wDoyndNHRu8dKQBtfBd6nlKlgg9iw1UOgTVrSNY= Subject key identifier: E1:B3:3A:5D:3F:C3:A0:77:3E:99:A5:56:DD:39:22:66:3E:79:ED:91 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797385DE8048CC3DC1A2C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e862efb7-ebc0-3290-8ab0-d8c7a08ee6a3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.23.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:38:5d:e8:04:8c:c3:dc:1a:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c748e59d-7856-47a4-b924-531bbca0aa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:14:99:49:36:93:99:34:c8:48:a5:f8:07: 7b:54:cf:56:2f:f5:56:6f:51:b7:31:80:fa:07:a3: a2:63:4a:5a:d5:38:e9:b4:24:ca:e7:7d:3d:a3:d1: bf:23:6b:90:ee:36:bf:b3:5e:af:83:2b:86:2f:c3: 24:9b:6c:07:f3:96:b4:12:3e:db:4a:2e:9e:1b:1d: 9a:3a:69:a8:9b:8e:28:42:84:d6:b9:aa:ed:26:43: a4:37:1d:e5:ee:a7:9d:17:3a:2a:8a:1f:b5:de:3c: 1e:c9:3b:16:66:ef:9e:5a:e0:fc:b1:f5:e0:b1:d1: 2f:8f:4f:19:a3:0c:9f:71:52:06:a7:e1:0b:58:56: b2:85:2f:96:e3:5a:61:36:59:49:19:ac:61:94:10: 9b:98:44:18:b8:c7:16:10:4c:17:bd:b7:e2:ce:66: a4:0f:ad:9e:60:51:a2:df:b0:90:6d:72:ea:e3:c1: ec:02:54:ce:42:77:f2:7c:ae:a0:dc:3e:21:d5:65: ea:eb:8d:41:7f:a5:f5:c7:b2:db:f5:21:33:28:cb: 53:99:eb:d0:f5:c1:40:14:30:0e:a2:7e:04:fc:c7: 76:83:8a:ef:2a:a6:e4:2c:8d:0b:8d:15:e0:12:e4: 3d:5a:d8:fe:e6:fe:4b:71:d0:72:38:86:7c:9c:9c: f1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B3:3A:5D:3F:C3:A0:77:3E:99:A5:56:DD:39:22:66:3E:79:ED:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e862efb7-ebc0-3290-8ab0-d8c7a08ee6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:88:bd:05:d1:d2:4c:e5:68:7e:f4:67:b5:32:df:a2:85:f9: 33:51:62:d1:6f:07:a6:fe:df:88:fa:f6:f5:39:e9:ac:71:a7: f7:11:34:7c:c7:ab:dc:cc:60:9a:6c:21:fb:b9:3e:eb:77:2d: 6f:c8:ce:58:23:01:f8:b2:94:db:3e:ce:4a:89:16:9e:40:ad: ac:4f:2c:a4:81:21:7d:31:f8:cd:68:a2:28:8b:39:e7:66:66: f0:a8:a0:30:38:28:74:f5:5d:06:12:9c:69:4b:70:ae:2b:62: 75:3b:63:f3:99:70:a0:9a:21:a2:e0:38:a5:b0:ec:ce:45:98: 72:88:85:b7:8f:33:2b:a3:03:70:3a:70:5a:fa:ea:80:a9:74: 98:06:92:eb:39:fb:c7:31:04:3d:50:9f:7c:db:c8:e1:3c:08: 32:e2:11:bd:2d:c2:4a:85:f8:f1:9f:74:85:40:59:ad:39:7b: 61:7b:1d:59:0a:20:af:4b:7a:8a:8e:bf:cd:a6:ac:4d:00:5c: 65:2d:62:5a:c2:65:2c:a3:18:a5:2f:81:7b:a5:3f:3f:49:3e: 82:7f:8d:74:b3:23:42:38:b4:71:cb:58:65:ec:09:b2:99:90: f2:4c:97:3b:7b:7a:b1:78:1d:20:ab:e5:51:fb:be:67:0a:be: e3:db:d4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzhd6ASMw9waLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzc0OGU1OWQtNzg1Ni00N2E0LWI5MjQtNTMxYmJjYTBhYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHwUmUk2k5k0yEil+Ad7VM9WL/VWb1G3MYD6 B6OiY0pa1TjptCTK5309o9G/I2uQ7ja/s16vgyuGL8Mkm2wH85a0Ej7bSi6eGx2a Ommom44oQoTWuartJkOkNx3l7qedFzoqih+13jweyTsWZu+eWuD8sfXgsdEvj08Z owyfcVIGp+ELWFayhS+W41phNllJGaxhlBCbmEQYuMcWEEwXvbfizmakD62eYFGi 37CQbXLq48HsAlTOQnfyfK6g3D4h1WXq641Bf6X1x7Lb9SEzKMtTmevQ9cFAFDAO on4E/Md2g4rvKqbkLI0LjRXgEuQ9Wtj+5v5LcdByOIZ8nJzxjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGzOl0/w6B3PpmlVt05ImY+ee2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTg2MmVmYjctZWJjMC0z MjkwLThhYjAtZDhjN2EwOGVlNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOIvQXR0kzlaH70Z7Uy36KF+TNRYtFvB6b+34j69vU56axxp/cRNHzH q9zMYJpsIfu5Put3LW/IzlgjAfiylNs+zkqJFp5AraxPLKSBIX0x+M1ooiiLOedm ZvCooDA4KHT1XQYSnGlLcK4rYnU7Y/OZcKCaIaLgOKWw7M5FmHKIhbePMyujA3A6 cFr66oCpdJgGkus5+8cxBD1Qn3zbyOE8CDLiEb0twkqF+PGfdIVAWa05e2F7HVkK IK9LeoqOv82mrE0AXGUtYlrCZSyjGKUvgXulPz9JPoJ/jXSzI0I4tHHLWGXsCbKZ kPJMlzt7erF4HSCr5VH7vmcKvuPb1CA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:58 2025 by rpki-client