$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecadda43-dc05-3ef5-b786-d1a7f2144e10.roa File: ecadda43-dc05-3ef5-b786-d1a7f2144e10.roa (raw, json) Hash identifier: +NrVBvWbEY/Z+PllYX8wsmhxbLi2m90aIJ7fFqAH7HM= Subject key identifier: 37:A2:57:70:46:2D:A1:8D:43:A7:D3:A9:97:86:3D:67:CF:76:C9:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67973D23CDADF7A7EE05AD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecadda43-dc05-3ef5-b786-d1a7f2144e10.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.19.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:3d:23:cd:ad:f7:a7:ee:05:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=cd4dea64-1aa7-4aa8-a0be-47450a8f232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5b:ca:14:a4:4e:6d:e9:e3:c4:03:a5:41:42: 81:7f:7b:0d:da:07:13:51:13:24:de:4a:c5:ec:c2: 7a:ec:d4:a8:39:99:40:3d:73:36:d5:78:5c:50:14: 84:6a:20:2d:30:1d:c2:09:8a:48:95:1b:87:21:70: 8b:00:85:fb:4e:0f:d9:c2:56:fb:b2:8c:97:ea:78: fd:53:4d:ea:4d:84:37:bc:94:1c:51:e7:4f:49:a2: 2a:41:1b:2e:82:73:ad:07:75:b5:60:08:cb:6a:ac: 5a:23:de:9d:4a:bf:4e:e5:f7:93:da:0c:36:c3:de: 02:fd:cc:97:c5:0a:b2:c0:a1:a6:26:db:06:e5:03: 11:e0:7c:6d:af:ac:73:a4:62:24:58:7d:78:09:f1: 00:de:0a:75:cd:b8:81:10:6e:83:70:50:92:eb:13: 7a:2c:60:e6:08:59:f1:ff:f8:8d:1b:88:aa:60:b5: 77:dd:01:b4:b9:45:f6:97:f7:e3:26:40:52:c4:72: a0:47:84:e1:50:d8:f8:94:28:51:ef:17:d8:6b:65: ee:aa:1f:0c:ba:5d:bf:10:0a:9a:6b:35:94:ad:00: f0:85:31:de:2c:0e:5c:aa:bc:47:d0:5c:5c:18:96: 6f:b3:40:c8:fc:00:a9:b3:46:9f:fd:a3:d5:c4:5e: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A2:57:70:46:2D:A1:8D:43:A7:D3:A9:97:86:3D:67:CF:76:C9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecadda43-dc05-3ef5-b786-d1a7f2144e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2f:69:6b:15:16:ab:21:7f:9a:bd:30:62:eb:58:23:9a:fd: c3:aa:4b:27:e9:0c:73:0f:7b:d7:04:8b:5a:41:84:2b:99:53: ee:1f:ae:3e:61:b9:3b:8c:71:fc:01:f4:f6:fa:54:02:59:a5: 55:71:b1:11:bd:d2:ea:af:c9:55:ec:71:d9:70:df:34:3d:e0: fd:69:39:04:98:5f:66:5c:fb:2c:3d:65:8c:58:2b:e6:8f:16: 1f:d9:08:c0:11:dd:5f:fd:9b:e6:9d:b9:cf:82:78:6a:09:03: ee:95:4f:56:6c:fb:9d:4b:e9:59:5e:9c:f6:c5:0c:e1:97:16: 7a:b6:79:22:c0:07:28:57:94:2f:70:c8:e6:36:a5:82:1f:f4: 64:a4:a0:4f:de:a6:43:3b:24:12:4e:37:4d:2a:f9:4e:fb:bc: b5:a6:39:3e:b9:e3:ec:95:4e:d6:7a:30:cd:6c:53:54:00:8c: 1f:d3:86:6a:a1:54:de:ed:45:54:0f:5b:08:01:9c:61:f7:b9: 45:09:0e:4e:d0:00:7c:02:08:d5:4e:1f:e7:c9:a5:fa:99:fc: 14:dd:84:cc:f0:30:4f:03:7d:ef:1d:4a:9e:e5:16:d2:f2:18: ad:54:b3:e3:09:2d:2a:a9:12:26:1e:b7:a1:b3:58:7d:7e:69: 16:1b:30:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlz0jza33p+4FrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q0ZGVhNjQtMWFhNy00YWE4LWEwYmUtNDc0NTBhOGYyMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglvKFKRObenjxAOlQUKBf3sN2gcTURMk3krF 7MJ67NSoOZlAPXM21XhcUBSEaiAtMB3CCYpIlRuHIXCLAIX7Tg/Zwlb7soyX6nj9 U03qTYQ3vJQcUedPSaIqQRsugnOtB3W1YAjLaqxaI96dSr9O5feT2gw2w94C/cyX xQqywKGmJtsG5QMR4Hxtr6xzpGIkWH14CfEA3gp1zbiBEG6DcFCS6xN6LGDmCFnx //iNG4iqYLV33QG0uUX2l/fjJkBSxHKgR4ThUNj4lChR7xfYa2Xuqh8Mul2/EAqa azWUrQDwhTHeLA5cqrxH0FxcGJZvs0DI/ACps0af/aPVxF7+3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeiV3BGLaGNQ6fTqZeGPWfPdsllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWNhZGRhNDMtZGMwNS0z ZWY1LWI3ODYtZDFhN2YyMTQ0ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkvaWsVFqshf5q9MGLrWCOa/cOqSyfpDHMPe9cEi1pBhCuZU+4frj5h uTuMcfwB9Pb6VAJZpVVxsRG90uqvyVXscdlw3zQ94P1pOQSYX2Zc+yw9ZYxYK+aP Fh/ZCMAR3V/9m+aduc+CeGoJA+6VT1Zs+51L6VlenPbFDOGXFnq2eSLAByhXlC9w yOY2pYIf9GSkoE/epkM7JBJON00q+U77vLWmOT654+yVTtZ6MM1sU1QAjB/Thmqh VN7tRVQPWwgBnGH3uUUJDk7QAHwCCNVOH+fJpfqZ/BTdhMzwME8Dfe8dSp7lFtLy GK1Us+MJLSqpEiYet6GzWH1+aRYbMIY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:42:57 2025 by rpki-client