$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2353b0ff-d181-3bf5-a3ac-8dbb6d827397.roa File: 2353b0ff-d181-3bf5-a3ac-8dbb6d827397.roa (raw, json) Hash identifier: hazQyjWXm0RNK/CqJbjPhgGMKhDm2Aijlua3OkQiWT0= Subject key identifier: A5:C4:24:A8:10:BE:58:62:AE:DD:A4:D0:D1:07:2D:D7:6C:32:EB:BC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B1330675826409F7ACC37BA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2353b0ff-d181-3bf5-a3ac-8dbb6d827397.roa Signing time: Wed 03 Sep 2025 19:25:35 +0000 ROA not before: Wed 03 Sep 2025 19:25:35 +0000 ROA not after: Tue 02 Dec 2025 20:25:35 +0000 asID: 19905 IP address blocks: 173.25.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:30:67:58:26:40:9f:7a:cc:37:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 3 19:25:35 2025 GMT Not After : Dec 2 20:25:35 2025 GMT Subject: CN=a43c4ea8-77e1-4ae6-919a-8a24e9f45fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:88:99:93:1f:85:b7:7c:f4:b1:98:64:b1: 97:9e:fe:c6:4c:a9:ee:a9:70:11:05:a0:31:df:0a: dc:d6:3c:c6:a2:44:ac:d6:2c:7e:a2:5d:93:f7:cf: 4b:26:ce:b8:20:de:96:d8:53:e9:4a:1b:63:2c:55: ef:cd:83:8a:af:60:33:0b:fd:ee:31:bc:9a:f3:1b: 25:c0:2b:e0:43:e8:7c:25:c0:e3:a8:aa:4a:df:54: 91:8a:5d:8d:72:a3:ec:83:32:af:23:90:0a:7a:74: 73:7f:8a:db:99:ea:dc:5b:01:10:be:2e:12:05:89: 2b:2e:50:08:fb:74:38:ec:d1:dc:00:16:b9:1a:6e: 0e:9e:cf:ba:55:f5:80:76:92:75:10:36:cf:ff:80: 04:66:e7:fa:51:7e:6d:f6:30:9e:3c:3b:c1:25:55: e8:4d:43:50:97:84:73:95:e1:57:40:c9:7a:f8:6e: 21:94:c3:e7:be:f2:b0:38:68:1c:72:65:c1:5e:c0: 12:3a:39:68:2f:0c:f9:59:b6:7d:99:04:36:21:4e: 58:15:8a:b8:d1:c4:c1:45:ec:ae:79:f7:cd:ad:bf: dd:67:cc:1b:3b:83:db:a7:b3:be:6d:2e:d0:4a:d9: c0:db:83:cd:c9:35:3c:b9:ca:d8:7f:23:3c:81:d6: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C4:24:A8:10:BE:58:62:AE:DD:A4:D0:D1:07:2D:D7:6C:32:EB:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2353b0ff-d181-3bf5-a3ac-8dbb6d827397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a4:2e:c8:c3:fd:fa:9b:eb:15:65:bd:b3:f3:c7:55:bc:6a: ce:7a:75:4a:1b:f2:21:dc:c4:20:2b:a7:ce:39:92:82:f2:35: ea:bd:8a:b6:13:32:53:48:95:f0:d1:0b:1a:50:db:13:ad:c2: 11:0f:e1:15:8a:8d:63:83:cd:aa:58:97:e1:db:46:0b:a9:2d: 4e:95:af:d9:5c:22:22:94:95:e2:ff:7a:d9:40:3c:02:ef:8d: ea:c7:79:e5:9d:6b:e1:e0:ed:c4:3e:ca:d7:e7:cd:73:66:2a: 71:0a:21:d8:42:0e:3e:69:ec:22:15:5f:3a:7b:17:53:9e:32: 33:1a:d9:6f:1a:8a:25:76:05:46:e8:55:e8:ec:ee:33:8c:41: e3:34:8e:ff:26:a1:e0:5e:88:4f:b1:9a:3e:c9:d7:63:43:62: be:62:9a:88:7d:9d:9d:ff:92:33:d9:98:75:94:e3:de:2f:98: b3:bc:e3:70:ec:f4:c0:28:82:ad:cb:d6:3d:13:ec:9d:bd:e6: 84:44:08:5a:aa:6b:09:d2:b1:03:7c:5a:54:24:ca:2f:9c:fc: a5:9d:bf:69:34:b9:74:63:c5:c0:09:9d:d4:e9:6f:ee:3c:c7: 1b:83:af:8f:f4:54:c4:d9:b7:68:9e:ed:40:8c:bb:74:ec:5c: a5:d6:77:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsTMGdYJkCfesw3uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMzE5MjUzNVoXDTI1MTIwMjIwMjUzNVowLzEtMCsGA1UEAxMk YTQzYzRlYTgtNzdlMS00YWU2LTkxOWEtOGEyNGU5ZjQ1ZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9yImZMfhbd89LGYZLGXnv7GTKnuqXARBaAx 3wrc1jzGokSs1ix+ol2T989LJs64IN6W2FPpShtjLFXvzYOKr2AzC/3uMbya8xsl wCvgQ+h8JcDjqKpK31SRil2NcqPsgzKvI5AKenRzf4rbmercWwEQvi4SBYkrLlAI +3Q47NHcABa5Gm4Ons+6VfWAdpJ1EDbP/4AEZuf6UX5t9jCePDvBJVXoTUNQl4Rz leFXQMl6+G4hlMPnvvKwOGgccmXBXsASOjloLwz5WbZ9mQQ2IU5YFYq40cTBReyu effNrb/dZ8wbO4Pbp7O+bS7QStnA24PNyTU8ucrYfyM8gdad0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXEJKgQvlhirt2k0NEHLddsMuu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM1M2IwZmYtZDE4MS0z YmY1LWEzYWMtOGRiYjZkODI3Mzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqkLsjD/fqb6xVlvbPzx1W8as56dUob8iHcxCArp845koLyNeq9irYT MlNIlfDRCxpQ2xOtwhEP4RWKjWODzapYl+HbRgupLU6Vr9lcIiKUleL/etlAPALv jerHeeWda+Hg7cQ+ytfnzXNmKnEKIdhCDj5p7CIVXzp7F1OeMjMa2W8aiiV2BUbo Vejs7jOMQeM0jv8moeBeiE+xmj7J12NDYr5imoh9nZ3/kjPZmHWU494vmLO843Ds 9MAogq3L1j0T7J295oRECFqqawnSsQN8WlQkyi+c/KWdv2k0uXRjxcAJndTpb+48 xxuDr4/0VMTZt2ie7UCMu3TsXKXWd6s= -----END CERTIFICATE-----Generated at Sat Sep 6 05:34:24 2025 by rpki-client