$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec56d2c0-c28b-31fa-8c75-129c9877c74c.roa File: ec56d2c0-c28b-31fa-8c75-129c9877c74c.roa (raw, json) Hash identifier: Y9mFL2+P2q+YbFZOAbD8lWFsTX82jHCBbFS14koWYpg= Subject key identifier: 1D:A6:37:AF:24:93:EE:56:3E:C8:A2:D2:D7:6E:F6:90:FD:46:2A:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73D6402E400013E9B8540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec56d2c0-c28b-31fa-8c75-129c9877c74c.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 150.195.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3d:64:02:e4:00:01:3e:9b:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=648dc76d-0418-43dc-8bcf-4888b46eb586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:a7:ae:0c:13:2a:5c:9a:27:64:d5:ef:25: 42:2e:9b:a6:6d:73:68:27:ff:f1:d6:38:ff:01:20: 71:b8:f5:e1:f5:63:be:32:d1:ca:95:07:40:f7:f0: cf:d0:5c:2f:01:5a:ff:b7:9a:ca:8a:2a:a4:7c:9e: de:26:e6:81:e5:54:a6:e7:b5:85:7e:a8:71:50:1c: 50:cf:5d:be:6b:b9:bf:6d:9f:c5:02:7d:0f:3d:dd: b7:32:52:56:5b:91:2f:29:4b:79:45:f7:92:93:f3: 77:44:f9:cb:1b:e6:ff:32:69:7d:2c:72:d6:35:e8: c0:c3:ef:67:75:5f:2b:03:1f:aa:fd:23:e5:7e:a1: b0:d6:de:15:68:69:d7:e8:e1:11:7c:91:02:41:f2: e3:30:fd:78:51:90:62:0e:0f:08:0f:55:d4:d5:54: 64:73:8a:f9:31:ca:b7:33:8d:1b:00:40:7f:c2:b4: 97:fe:3e:a3:dc:3a:b5:83:4c:e6:3b:fd:1e:e1:95: b0:8c:a0:2f:6d:91:f5:c9:a7:90:68:c6:8b:f2:a2: 22:dc:25:81:98:8f:42:ad:35:a1:69:b5:e2:c5:63: 42:23:be:89:f1:f1:ca:8c:e0:66:4e:b7:12:ff:64: 02:63:a4:16:d5:d2:dd:aa:75:f8:57:98:4b:76:4d: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A6:37:AF:24:93:EE:56:3E:C8:A2:D2:D7:6E:F6:90:FD:46:2A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec56d2c0-c28b-31fa-8c75-129c9877c74c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a5:cb:ed:6b:98:cf:ca:d0:3f:0a:68:e0:38:2e:72:01:f8: 47:bb:bb:51:e1:42:76:d7:94:80:b9:5b:31:1c:60:1b:d1:39: ba:10:3f:8b:f0:19:59:11:95:e6:dd:43:34:cd:75:93:98:b8: e9:06:b8:c2:a2:be:0c:79:df:45:a2:c8:67:f0:33:d1:07:ea: 61:22:5c:23:2e:c0:52:88:18:9a:a1:03:5f:30:ad:45:04:d9: 93:70:e5:02:ca:24:c5:50:9c:8b:38:a1:10:f8:48:12:67:4e: d0:b7:01:19:b3:d5:9a:3c:8e:0a:1b:5a:df:44:f7:fd:26:75: 0b:b9:41:6d:c5:ef:0e:45:bc:e8:d7:e9:29:4d:e4:b5:de:92: 16:e9:47:d5:c1:57:66:84:23:4d:cb:62:f3:23:9c:eb:e6:f7: f2:48:33:8f:0d:7c:53:0d:94:59:be:28:d1:2e:61:ea:99:d8: 2d:c3:60:bf:d4:29:e5:d7:19:02:30:ec:09:7e:65:57:b2:b5: 33:44:3f:18:d2:4d:8f:1f:d2:64:3c:ab:82:d3:e6:04:50:79: be:06:22:00:15:b3:34:87:ab:cb:0e:10:32:1a:0a:35:c3:9b: ec:3d:8b:88:73:58:84:57:bd:e2:4b:e3:0a:32:e9:bf:80:ad: 06:66:dc:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1z1kAuQAAT6bhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NjQ4ZGM3NmQtMDQxOC00M2RjLThiY2YtNDg4OGI0NmViNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI+nrgwTKlyaJ2TV7yVCLpumbXNoJ//x1jj/ ASBxuPXh9WO+MtHKlQdA9/DP0FwvAVr/t5rKiiqkfJ7eJuaB5VSm57WFfqhxUBxQ z12+a7m/bZ/FAn0PPd23MlJWW5EvKUt5RfeSk/N3RPnLG+b/Mml9LHLWNejAw+9n dV8rAx+q/SPlfqGw1t4VaGnX6OERfJECQfLjMP14UZBiDg8ID1XU1VRkc4r5Mcq3 M40bAEB/wrSX/j6j3Dq1g0zmO/0e4ZWwjKAvbZH1yaeQaMaL8qIi3CWBmI9CrTWh abXixWNCI76J8fHKjOBmTrcS/2QCY6QW1dLdqnX4V5hLdk3ggQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2mN68kk+5WPsii0tdu9pD9RioJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWM1NmQyYzAtYzI4Yi0z MWZhLThjNzUtMTI5Yzk4NzdjNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyly+1rmM/K0D8KaOA4LnIB+Ee7u1HhQnbXlIC5WzEcYBvROboQP4vw GVkRlebdQzTNdZOYuOkGuMKivgx530WiyGfwM9EH6mEiXCMuwFKIGJqhA18wrUUE 2ZNw5QLKJMVQnIs4oRD4SBJnTtC3ARmz1Zo8jgobWt9E9/0mdQu5QW3F7w5FvOjX 6SlN5LXekhbpR9XBV2aEI03LYvMjnOvm9/JIM48NfFMNlFm+KNEuYeqZ2C3DYL/U KeXXGQIw7Al+ZVeytTNEPxjSTY8f0mQ8q4LT5gRQeb4GIgAVszSHq8sOEDIaCjXD m+w9i4hzWIRXveJL4woy6b+ArQZm3GM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:09 2025 by rpki-client