$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa File: 3cff4f2a-68ad-3c28-8482-467530c2801c.roa (raw, json) Hash identifier: FIXO6c27dOgmVWscBSbRSogdNEqPZXXbZpapTJ9dWgw= Subject key identifier: 66:64:00:3E:A2:DA:CF:AC:2D:C4:42:D6:8A:26:A3:A5:99:18:55:A1 Certificate issuer: /CN=c3c300ec-9927-491d-bd77-8107cc89e4f3 Certificate serial: 010D0C9F4328584BB2F7BC929C74B63206F6EB00 Authority key identifier: 9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 376 IP address blocks: 204.28.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:bc:92:9c:74:b6:32:06:f6:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c300ec-9927-491d-bd77-8107cc89e4f3 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=2693f0bd-a239-48c2-9eb0-84e20f4ac2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:e4:6f:e3:17:1e:7d:89:d1:b2:18:63:44: 70:e0:85:5b:f9:e3:fd:01:17:71:65:6c:db:d4:7b: 6b:a4:19:54:cc:f5:84:64:d9:08:18:70:37:c4:64: 69:ef:e5:59:67:21:1a:17:20:12:a0:fc:a5:93:e0: 8d:7c:dd:4e:a4:58:b5:90:fb:f0:44:8c:72:be:33: 93:34:72:67:10:fa:41:7a:83:68:08:9e:d7:47:25: 1b:34:c2:e2:1c:2b:1a:56:86:f7:bc:d0:65:69:21: 03:8d:cf:52:16:29:11:08:d5:5b:e0:05:ed:08:05: 67:33:2f:2b:5e:f2:80:f5:5a:36:39:df:59:d8:7f: d2:8b:97:62:11:e5:e7:2e:c1:6e:13:51:01:1c:06: 97:95:e7:96:e8:d8:51:da:c0:bd:22:17:3b:ac:5f: 24:a9:04:fd:b0:c9:2e:14:d2:8f:ac:88:af:90:8c: 42:9d:2f:6f:27:da:0a:ca:76:f2:cd:57:a2:9c:61: 5b:4e:29:a0:8b:2d:ed:27:88:94:ff:ec:a1:b3:53: 2e:69:86:a1:dc:ab:02:21:40:e5:70:ed:39:5e:67: a1:0e:75:9a:68:1b:0d:e7:d0:7e:ea:5d:4b:3d:9d: 61:2f:2d:7a:34:5a:93:53:10:32:06:c3:fe:de:13: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:64:00:3E:A2:DA:CF:AC:2D:C4:42:D6:8A:26:A3:A5:99:18:55:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl X509v3 Authority Key Identifier: keyid:9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer sbgp-ipAddrBlock: critical IPv4: 204.28.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1e:ce:60:cf:13:e2:bd:db:56:42:13:0a:1d:ba:9c:4a:e3: 73:7c:e0:ff:0c:82:a6:51:8f:67:e5:0c:e9:d9:a4:69:53:66: 36:78:62:3a:97:19:92:f3:aa:bb:2d:31:b4:b3:74:6b:b1:34: ff:6b:0e:22:79:1e:06:21:15:51:ed:65:cf:db:01:70:67:a6: ed:ca:00:b0:e8:52:f0:eb:00:4a:7e:42:50:66:00:2d:24:c4: e7:87:85:3b:95:23:41:f0:bf:d2:91:ad:42:44:a0:16:5b:b2: f3:2a:9f:bd:8e:8f:1d:be:83:e0:15:40:74:24:71:ca:f2:96: 54:fc:84:40:cb:d8:3d:93:05:20:59:d2:70:4f:6c:ee:d5:20: 9b:ed:7d:d2:d8:f8:70:9b:f9:82:29:8e:23:36:d6:5a:49:7e: 8d:4e:00:08:c6:84:74:71:7a:a0:57:48:81:c2:35:79:75:27: 96:db:3f:4b:3b:5b:12:6d:50:2c:e6:e9:1e:42:03:d0:b5:96: ad:3e:e1:19:f2:ba:18:89:6f:a3:22:63:2c:5c:39:e9:35:53: 3e:d7:57:f9:6c:29:d9:7e:fa:6b:14:91:6e:a3:79:80:f8:a6: d6:7e:9a:b6:14:c3:c6:b9:75:bc:c9:fc:85:5a:93:f1:d6:b0: 07:ad:80:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97ySnHS2Mgb26wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjMzAwZWMtOTkyNy00OTFkLWJkNzctODEwN2NjODll NGYzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MjY5M2YwYmQtYTIzOS00OGMyLTllYjAtODRlMjBmNGFjMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY7kb+MXHn2J0bIYY0Rw4IVb+eP9ARdxZWzb 1HtrpBlUzPWEZNkIGHA3xGRp7+VZZyEaFyASoPylk+CNfN1OpFi1kPvwRIxyvjOT NHJnEPpBeoNoCJ7XRyUbNMLiHCsaVob3vNBlaSEDjc9SFikRCNVb4AXtCAVnMy8r XvKA9Vo2Od9Z2H/Si5diEeXnLsFuE1EBHAaXleeW6NhR2sC9Ihc7rF8kqQT9sMku FNKPrIivkIxCnS9vJ9oKynbyzVeinGFbTimgiy3tJ4iU/+yhs1MuaYah3KsCIUDl cO05XmehDnWaaBsN59B+6l1LPZ1hLy16NFqTUxAyBsP+3hPPyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZkAD6i2s+sLcRC1oomo6WZGFWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Mz MDBlYy05OTI3LTQ5MWQtYmQ3Ny04MTA3Y2M4OWU0ZjMvM2NmZjRmMmEtNjhhZC0z YzI4LTg0ODItNDY3NTMwYzI4MDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNjMzAwZWMtOTkyNy00OTFkLWJk NzctODEwN2NjODllNGYzL2MzYzMwMGVjLTk5MjctNDkxZC1iZDc3LTgxMDdjYzg5 ZTRmMy5jcmwwHwYDVR0jBBgwFoAUnN0pukMWDSh68N69hu4dxDQ2cYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2MzMDBlYy05OTI3LTQ5MWQtYmQ3Ny04MTA3 Y2M4OWU0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoezmDPE+K921ZCEwodupxK43N84P8MgqZRj2flDOnZpGlTZjZ4YjqX GZLzqrstMbSzdGuxNP9rDiJ5HgYhFVHtZc/bAXBnpu3KALDoUvDrAEp+QlBmAC0k xOeHhTuVI0Hwv9KRrUJEoBZbsvMqn72Ojx2+g+AVQHQkccryllT8hEDL2D2TBSBZ 0nBPbO7VIJvtfdLY+HCb+YIpjiM21lpJfo1OAAjGhHRxeqBXSIHCNXl1J5bbP0s7 WxJtUCzm6R5CA9C1lq0+4RnyuhiJb6MiYyxcOek1Uz7XV/lsKdl++msUkW6jeYD4 ptZ+mrYUw8a5dbzJ/IVak/HWsAetgGI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:39 2025 by rpki-client