$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f074fa-4e67-3961-b8df-6960f25c2a01.roa File: f2f074fa-4e67-3961-b8df-6960f25c2a01.roa (raw, json) Hash identifier: qQCKrh0ZhTG3oxqUd63sTzJWus9aZEbnUl5GOhHsDvM= Subject key identifier: 4D:DE:B5:E1:06:88:EF:0A:2E:31:B0:55:15:2F:87:43:89:68:FE:2B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201D50F50C076ABB4BBDBF0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f074fa-4e67-3961-b8df-6960f25c2a01.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.25.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d5:0f:50:c0:76:ab:b4:bb:db:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=2d11c884-ce7f-4bdf-afdd-d2002f90d9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:20:ca:db:88:f4:f0:d5:b8:77:42:89:1e: b5:7d:f8:8a:74:a2:6e:dc:f0:7c:59:b3:9c:40:b4: fd:f8:c5:c4:97:4f:1b:22:27:06:eb:11:4e:13:81: fb:b3:ad:2f:57:c6:e4:21:6d:b1:0c:8e:22:59:62: 50:3f:73:1d:78:5b:8f:2f:eb:f2:26:44:dc:02:3a: 4c:4d:c0:cd:df:0d:71:5a:a1:03:b2:41:d8:be:65: f2:40:1f:97:fa:90:d1:f0:fb:71:e4:01:38:69:f5: d2:54:e8:20:f9:94:22:ee:e6:eb:1e:91:e1:7b:52: ef:a3:41:c9:d1:e6:3b:9c:5e:6e:bf:48:85:33:0b: b8:15:33:4b:f2:c2:8b:59:3e:4c:0d:ed:98:76:5e: d3:43:e3:b3:5b:8a:b6:d6:ef:67:51:76:ff:b2:32: 7c:cc:53:83:0b:39:ee:0d:6c:e6:fc:8a:83:0b:1b: 59:c9:04:29:c2:21:4e:cc:e7:6d:5b:ae:79:a2:e1: f4:df:c3:f7:c0:05:7f:48:85:4a:e0:a6:77:4a:68: 5a:e6:67:2a:c5:53:ab:34:be:52:18:a0:9f:e8:a5: 97:29:75:87:e3:f5:69:6e:ec:ae:4f:bd:4d:e9:25: c4:4c:44:4c:27:80:53:99:3a:21:05:ca:ef:6b:6f: 9c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DE:B5:E1:06:88:EF:0A:2E:31:B0:55:15:2F:87:43:89:68:FE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f074fa-4e67-3961-b8df-6960f25c2a01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5b:97:29:aa:97:62:6d:60:48:78:56:a0:44:16:bc:18:af: 28:f3:f4:4e:87:d5:ee:4f:b7:9a:52:f2:9a:7b:74:7c:a8:8d: 82:41:af:49:a2:08:89:f5:88:57:8c:a9:d6:c5:79:b3:01:75: 45:da:6f:c1:91:22:58:f4:6d:8d:15:a7:fa:2e:5d:ce:af:ac: 27:56:cc:b8:aa:b7:5d:6b:99:42:87:77:2c:20:8d:5e:76:b2: 27:db:11:fe:e9:7f:50:92:c6:09:74:7b:60:3b:ba:18:ca:cd: 4e:8c:4e:70:81:26:49:69:d6:d2:5a:e4:0c:0b:d2:90:ba:c5: 7f:70:7a:e9:38:f2:a0:d2:28:98:30:ad:83:d8:53:6b:aa:37: 05:19:a0:56:4e:18:6c:2c:41:57:e3:eb:a1:d9:e2:63:49:20: 84:c9:e1:0d:aa:a0:b2:4f:81:ef:c5:0b:d6:85:5e:1a:45:08: ec:40:35:c4:5d:24:00:af:2b:02:0a:88:96:e8:2c:10:33:14: 15:ef:b3:b5:5b:4a:12:04:79:e7:bc:51:ca:66:92:a2:e2:ae: 0f:cb:70:a5:c8:a2:40:e2:76:57:d7:61:e5:ca:af:ee:32:08: c4:b0:87:1c:6a:49:cc:46:d3:10:99:53:b6:74:37:f4:bf:3d: 3e:63:e2:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdUPUMB2q7S72/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmQxMWM4ODQtY2U3Zi00YmRmLWFmZGQtZDIwMDJmOTBkOWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunAgytuI9PDVuHdCiR61ffiKdKJu3PB8WbOc QLT9+MXEl08bIicG6xFOE4H7s60vV8bkIW2xDI4iWWJQP3MdeFuPL+vyJkTcAjpM TcDN3w1xWqEDskHYvmXyQB+X+pDR8Ptx5AE4afXSVOgg+ZQi7ubrHpHhe1Lvo0HJ 0eY7nF5uv0iFMwu4FTNL8sKLWT5MDe2Ydl7TQ+OzW4q21u9nUXb/sjJ8zFODCznu DWzm/IqDCxtZyQQpwiFOzOdtW655ouH038P3wAV/SIVK4KZ3Smha5mcqxVOrNL5S GKCf6KWXKXWH4/VpbuyuT71N6SXETERMJ4BTmTohBcrva2+c2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3eteEGiO8KLjGwVRUvh0OJaP4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjJmMDc0ZmEtNGU2Ny0z OTYxLWI4ZGYtNjk2MGYyNWMyYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJblymql2JtYEh4VqBEFrwYryjz9E6H1e5Pt5pS8pp7dHyojYJBr0mi CIn1iFeMqdbFebMBdUXab8GRIlj0bY0Vp/ouXc6vrCdWzLiqt11rmUKHdywgjV52 sifbEf7pf1CSxgl0e2A7uhjKzU6MTnCBJklp1tJa5AwL0pC6xX9weuk48qDSKJgw rYPYU2uqNwUZoFZOGGwsQVfj66HZ4mNJIITJ4Q2qoLJPge/FC9aFXhpFCOxANcRd JACvKwIKiJboLBAzFBXvs7VbShIEeee8UcpmkqLirg/LcKXIokDidlfXYeXKr+4y CMSwhxxqScxG0xCZU7Z0N/S/PT5j4hg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:04 2025 by rpki-client