$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa File: f1b86a0a-93ba-368e-9650-058271f8c2a3.roa (raw, json) Hash identifier: btz+XyKejEsJggS1pAxPaz2IsFjzTESVNKbuHPh+DiE= Subject key identifier: 36:2C:88:72:89:2C:A6:E4:8A:B6:B1:AE:74:90:62:4E:CB:4D:D0:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE48DE769FAE223D50D3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:48:de:76:9f:ae:22:3d:50:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1cdfa328-058a-4cde-8ac0-86cf3253cc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cc:af:82:13:68:74:44:4d:e1:70:f6:00:8a: 9b:ec:51:fa:5a:8e:52:33:80:c2:99:9c:38:3f:fe: fd:11:42:96:18:d6:f5:f5:39:3e:77:0b:5a:da:c0: 35:9d:5d:20:56:38:b7:c6:ec:4c:b9:ce:5a:9a:35: 3b:89:88:03:95:e8:85:3f:3c:bc:18:b3:2b:90:59: 55:d4:b2:af:83:46:2d:d3:d6:12:94:ed:9d:46:f5: 07:37:5e:8c:c8:bd:00:81:f1:0c:4b:a5:b6:35:b3: bd:26:d6:8d:12:35:91:41:b2:37:23:db:d5:0d:83: 05:6c:72:59:e5:0d:b7:81:bc:9c:d4:04:0a:79:e0: 59:21:25:d2:c1:d3:01:73:1b:52:17:ce:ff:5b:4a: 59:28:6d:59:46:8a:0f:2f:73:7c:cc:93:54:31:f5: ae:2a:b0:0d:d9:9f:b2:42:d4:bb:8c:a7:ff:65:e6: 72:26:d4:54:7b:e7:81:94:e4:0f:3d:bd:e4:de:e5: d5:88:3f:dd:65:92:e6:81:9d:55:47:eb:e4:6a:8b: 51:54:c1:e8:20:c4:c0:bf:01:83:68:22:3c:8a:01: 1f:b4:36:9f:e7:c6:e6:27:c5:54:cd:f7:34:1f:06: 8b:c0:48:80:4c:8c:9f:fb:e5:b6:f7:53:91:29:ae: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2C:88:72:89:2C:A6:E4:8A:B6:B1:AE:74:90:62:4E:CB:4D:D0:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:98:3a:c2:52:0d:d7:e1:57:a0:bd:5e:11:92:56:5e:ca:02: 5b:f9:d6:9a:93:0f:77:30:e8:98:b6:2d:a6:ef:a1:15:c3:65: cf:81:75:06:3c:10:9b:b6:c0:e1:6a:9d:81:fb:3d:69:ca:a7: 80:96:1c:e1:05:29:b3:4d:ba:39:6a:26:1e:70:f8:68:01:0e: 31:03:4c:8c:7a:41:62:c1:40:f6:aa:88:d5:bc:91:9d:f5:1c: a3:2f:c0:58:e8:a3:19:b1:ab:38:fd:08:e0:ec:9e:4d:21:66: 42:16:74:8d:5a:d1:66:2e:09:34:14:78:e3:a1:d6:18:64:7c: 33:b5:27:3a:b2:72:c3:eb:3b:0e:92:21:30:e3:e4:69:d1:c0: 4a:ce:1f:6e:a3:3a:9e:65:c3:a1:e5:df:98:a4:09:c0:46:2a: 72:4f:0f:db:33:f1:6d:9b:03:57:bc:69:80:a1:02:e1:12:50: 09:d8:8c:d6:51:b6:ab:33:eb:1f:93:60:25:22:2f:52:93:89: 80:33:a8:7b:48:10:37:f7:d3:f2:5c:39:13:87:40:7e:26:6d: 2d:d4:c7:d5:89:7e:4a:fc:ab:d2:c9:7c:ce:dc:65:0a:a9:ba: 5c:4d:41:03:3f:fa:93:d5:6e:22:fc:0d:9f:76:69:92:c1:12: 5e:b1:36:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkjedp+uIj1Q08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWNkZmEzMjgtMDU4YS00Y2RlLThhYzAtODZjZjMyNTNjYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMyvghNodERN4XD2AIqb7FH6Wo5SM4DCmZw4 P/79EUKWGNb19Tk+dwta2sA1nV0gVji3xuxMuc5amjU7iYgDleiFPzy8GLMrkFlV 1LKvg0Yt09YSlO2dRvUHN16MyL0AgfEMS6W2NbO9JtaNEjWRQbI3I9vVDYMFbHJZ 5Q23gbyc1AQKeeBZISXSwdMBcxtSF87/W0pZKG1ZRooPL3N8zJNUMfWuKrAN2Z+y QtS7jKf/ZeZyJtRUe+eBlOQPPb3k3uXViD/dZZLmgZ1VR+vkaotRVMHoIMTAvwGD aCI8igEftDaf58bmJ8VUzfc0HwaLwEiATIyf++W291ORKa4z9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYsiHKJLKbkiraxrnSQYk7LTdDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjFiODZhMGEtOTNiYS0z NjhlLTk2NTAtMDU4MjcxZjhjMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKYOsJSDdfhV6C9XhGSVl7KAlv51pqTD3cw6Ji2LabvoRXDZc+BdQY8 EJu2wOFqnYH7PWnKp4CWHOEFKbNNujlqJh5w+GgBDjEDTIx6QWLBQPaqiNW8kZ31 HKMvwFjooxmxqzj9CODsnk0hZkIWdI1a0WYuCTQUeOOh1hhkfDO1JzqycsPrOw6S ITDj5GnRwErOH26jOp5lw6Hl35ikCcBGKnJPD9sz8W2bA1e8aYChAuESUAnYjNZR tqsz6x+TYCUiL1KTiYAzqHtIEDf30/JcOROHQH4mbS3Ux9WJfkr8q9LJfM7cZQqp ulxNQQM/+pPVbiL8DZ92aZLBEl6xNu0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:00 2025 by rpki-client