$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa File: f35ce1d9-4792-36cc-964a-028ad14820ea.roa (raw, json) Hash identifier: YcokyvmK6IQHmHXD+psNO3UCLnDEgDZzGYrAONvuGVg= Subject key identifier: D5:A1:6E:DC:D3:D1:89:47:4D:D9:15:D0:D1:99:FD:8F:76:B4:63:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797EEFF6DE0C97D0C1A7700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.31.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ee:ff:6d:e0:c9:7d:0c:1a:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6770bfcf-735f-46f6-80fd-783dc1ea1dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:be:e1:8c:42:54:76:a0:2d:b0:76:94:74: f1:cb:b6:ae:24:6d:45:e5:44:36:75:bc:f2:15:3e: 3b:46:83:97:e2:65:c2:54:3a:b3:68:16:c9:c3:3a: 45:46:22:72:41:1f:0a:16:41:66:75:50:d8:06:7a: dc:0f:69:8f:31:45:06:a7:5c:a1:fd:bf:ac:8b:25: 44:bb:b8:ac:7e:d9:03:fc:a9:77:ce:d5:18:62:16: cd:1c:7f:b2:d2:9c:02:a9:49:cb:2d:07:4f:c7:12: 96:62:08:57:6b:0b:a9:96:8c:cd:46:ea:7e:bb:bd: 06:ce:08:c0:96:c6:18:78:89:5d:57:3f:ca:b5:80: fc:f3:e6:f6:a8:43:3c:00:59:e9:de:9f:44:cf:4c: 8c:3f:b4:fd:d2:3a:b2:14:15:61:40:ab:08:1d:49: a1:c4:8c:af:f4:78:b7:ed:42:c8:f3:07:d5:4f:35: a4:da:c4:db:b5:e9:74:e0:b9:bd:0f:e1:94:c2:af: e1:35:f2:b1:9b:a2:61:f2:48:ce:2d:d5:37:45:b6: d2:33:92:04:a4:17:d1:3f:f8:fd:d6:a0:a2:23:81: 37:3d:25:29:61:94:01:f4:29:2f:95:d8:b5:bb:15: 91:87:d3:64:c2:8d:96:5d:0f:99:92:41:c2:92:55: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A1:6E:DC:D3:D1:89:47:4D:D9:15:D0:D1:99:FD:8F:76:B4:63:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:84:2b:df:16:78:45:8b:7b:76:fc:f8:da:3d:5c:ad:8b:63: 11:b5:58:84:0d:e3:73:f1:9a:28:28:92:17:89:8d:ae:85:81: ac:24:09:56:66:38:36:f9:c0:0d:f4:77:fc:fd:26:e6:ab:39: 11:4e:ab:16:bf:f0:e4:b7:23:c8:01:6f:76:d5:98:e4:da:47: 58:e4:8d:ce:0a:83:e7:80:05:99:7c:0d:e6:0b:89:ce:3c:33: 67:50:97:c9:9f:d4:96:39:f2:69:a4:59:ac:a7:9e:f7:3c:69: f1:4f:cb:be:f9:a5:6b:cf:0b:ee:98:5e:5e:e3:a7:02:c1:8f: 7a:bc:90:a5:2e:d0:90:aa:45:a3:22:3c:37:96:3e:9c:f9:5d: ae:6c:d8:50:f0:23:6d:18:cb:93:90:97:20:8c:be:76:fe:7f: 01:a9:e2:ec:e4:a2:89:33:89:b9:ec:64:de:10:a8:65:ab:74: ac:87:8a:47:54:5e:d0:43:d5:23:c6:da:19:27:6b:69:98:dd: da:c2:89:1d:9d:30:27:b2:26:b9:2d:b4:29:20:97:ba:aa:67: f3:20:3e:d9:64:96:11:4a:99:a8:5d:38:d5:1a:bf:0a:65:31: bb:5c:db:6f:43:57:b3:d2:66:ae:65:df:ad:45:b3:3b:ea:2d: 68:76:6c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+7/beDJfQwadwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Njc3MGJmY2YtNzM1Zi00NmY2LTgwZmQtNzgzZGMxZWExZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxS+4YxCVHagLbB2lHTxy7auJG1F5UQ2dbzy FT47RoOX4mXCVDqzaBbJwzpFRiJyQR8KFkFmdVDYBnrcD2mPMUUGp1yh/b+siyVE u7isftkD/Kl3ztUYYhbNHH+y0pwCqUnLLQdPxxKWYghXawuplozNRup+u70GzgjA lsYYeIldVz/KtYD88+b2qEM8AFnp3p9Ez0yMP7T90jqyFBVhQKsIHUmhxIyv9Hi3 7ULI8wfVTzWk2sTbtel04Lm9D+GUwq/hNfKxm6Jh8kjOLdU3RbbSM5IEpBfRP/j9 1qCiI4E3PSUpYZQB9Ckvldi1uxWRh9Nkwo2WXQ+ZkkHCklWrtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWhbtzT0YlHTdkV0NGZ/Y92tGPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjM1Y2UxZDktNDc5Mi0z NmNjLTk2NGEtMDI4YWQxNDgyMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaEK98WeEWLe3b8+No9XK2LYxG1WIQN43PxmigokheJja6FgawkCVZm ODb5wA30d/z9JuarORFOqxa/8OS3I8gBb3bVmOTaR1jkjc4Kg+eABZl8DeYLic48 M2dQl8mf1JY58mmkWaynnvc8afFPy775pWvPC+6YXl7jpwLBj3q8kKUu0JCqRaMi PDeWPpz5Xa5s2FDwI20Yy5OQlyCMvnb+fwGp4uzkookzibnsZN4QqGWrdKyHikdU XtBD1SPG2hkna2mY3drCiR2dMCeyJrkttCkgl7qqZ/MgPtlklhFKmahdONUavwpl Mbtc229DV7PSZq5l361FszvqLWh2bKw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:51:53 2025 by rpki-client