$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ad79b1-5e1c-3e6e-b116-76c1f0984d5f.roa File: 09ad79b1-5e1c-3e6e-b116-76c1f0984d5f.roa (raw, json) Hash identifier: 2OmKqWYf2Oo0SYTdhQfiCcOjN0pw+GIUezNI4bN/f4M= Subject key identifier: 3B:3D:63:B0:20:3B:7D:F1:94:BE:AD:98:FE:2A:3E:62:02:0D:EC:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475C26F2FE7942CC0D4A7F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ad79b1-5e1c-3e6e-b116-76c1f0984d5f.roa Signing time: Mon 22 Sep 2025 11:55:46 +0000 ROA not before: Mon 22 Sep 2025 11:55:46 +0000 ROA not after: Sun 21 Dec 2025 12:55:46 +0000 asID: 19905 IP address blocks: 173.22.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:26:f2:fe:79:42:cc:0d:4a:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:55:46 2025 GMT Not After : Dec 21 12:55:46 2025 GMT Subject: CN=bd77f557-34a3-46a4-82c6-e618802ad227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:82:5c:58:ea:36:0f:d4:71:9d:58:62:f6:33: 28:b3:5a:56:c3:e1:c3:21:68:7a:6f:95:db:ce:2b: 7e:89:ee:3b:ab:57:61:12:a6:77:3f:48:54:82:2a: 52:c5:00:30:40:1f:59:c3:88:7d:52:12:9b:c0:ea: 3a:1c:54:6d:ce:65:3b:81:e8:05:01:37:47:6e:3a: 3b:31:9d:a8:45:45:d5:66:dc:ec:dc:31:bb:f7:80: 3f:fc:c6:c1:6d:eb:4f:f1:e3:72:0e:5c:5a:79:25: 1d:f7:c7:2b:dc:be:e8:10:8d:28:0a:3d:03:7e:59: db:e2:50:12:6f:8c:62:b6:80:43:b6:99:13:31:10: 01:c8:d9:60:7b:48:67:38:e1:be:48:1b:9c:3f:68: 1e:f5:17:36:34:2c:3c:34:f8:af:c1:71:a2:9b:64: c1:2f:2d:c0:e9:ab:a1:da:a2:4c:e1:98:07:f7:39: 51:30:2d:37:e4:8d:5a:7a:87:93:0a:5e:df:20:22: 4a:f4:dd:a2:32:f7:9c:c5:3c:fc:b1:ad:3a:4c:5c: d6:20:9a:74:dd:9c:05:f5:dd:bf:1f:df:8f:77:86: 29:24:e7:4a:6b:e0:98:da:c3:8f:02:48:b9:82:32: 5a:db:0d:1a:44:57:29:bb:f1:4b:f2:87:dd:91:13: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3D:63:B0:20:3B:7D:F1:94:BE:AD:98:FE:2A:3E:62:02:0D:EC:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ad79b1-5e1c-3e6e-b116-76c1f0984d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9a:4a:9e:2f:92:6b:1b:5a:da:97:bf:e7:7a:2e:73:41:e5: 13:30:52:36:08:9c:39:83:2b:5d:c3:0f:38:5a:ce:77:72:51: 19:e4:5a:00:8e:66:40:4f:09:f2:e1:f2:f0:61:0d:be:5b:36: 91:35:6e:d7:2f:b2:23:f5:15:8a:44:2e:24:70:72:41:55:3c: 15:51:83:1c:bc:e8:9e:0b:f6:7f:35:60:e3:4b:1a:61:f2:08: 00:96:ad:73:2a:a5:e5:5f:74:bf:b1:9f:f8:86:12:67:71:47: 31:39:fd:14:00:32:3e:a8:d5:0e:c4:08:ea:cd:62:70:ee:56: 54:1c:f3:9d:e1:08:3b:66:0b:bd:27:53:9d:8b:3a:38:0d:31: 72:34:9a:47:79:34:ee:39:5c:ea:80:2b:c6:73:f8:5b:6d:12: 9a:87:3a:56:78:b8:68:aa:87:0a:3c:e2:a5:64:48:e9:7d:d8: 97:10:9a:af:50:88:d7:11:87:bd:a3:1a:a1:92:27:3e:23:fc: cd:ae:b4:20:fa:3e:9f:88:f1:52:e0:b7:58:b0:8a:33:d9:6e: 71:4e:f2:c9:04:89:a9:a5:fc:fe:07:8e:a8:3e:53:a2:b3:1f: 41:3b:71:b4:b2:2a:42:c1:7a:f5:a3:d3:2a:9e:30:0f:08:ab: 35:24:ce:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXCby/nlCzA1Kf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTU0NloXDTI1MTIyMTEyNTU0NlowLzEtMCsGA1UEAxMk YmQ3N2Y1NTctMzRhMy00NmE0LTgyYzYtZTYxODgwMmFkMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoJcWOo2D9RxnVhi9jMos1pWw+HDIWh6b5Xb zit+ie47q1dhEqZ3P0hUgipSxQAwQB9Zw4h9UhKbwOo6HFRtzmU7gegFATdHbjo7 MZ2oRUXVZtzs3DG794A//MbBbetP8eNyDlxaeSUd98cr3L7oEI0oCj0Dflnb4lAS b4xitoBDtpkTMRAByNlge0hnOOG+SBucP2ge9Rc2NCw8NPivwXGim2TBLy3A6auh 2qJM4ZgH9zlRMC035I1aeoeTCl7fICJK9N2iMvecxTz8sa06TFzWIJp03ZwF9d2/ H9+Pd4YpJOdKa+CY2sOPAki5gjJa2w0aRFcpu/FL8ofdkRMlIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs9Y7AgO33xlL6tmP4qPmICDey0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDlhZDc5YjEtNWUxYy0z ZTZlLWIxMTYtNzZjMWYwOTg0ZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGaSp4vkmsbWtqXv+d6LnNB5RMwUjYInDmDK13DDzhazndyURnkWgCO ZkBPCfLh8vBhDb5bNpE1btcvsiP1FYpELiRwckFVPBVRgxy86J4L9n81YONLGmHy CACWrXMqpeVfdL+xn/iGEmdxRzE5/RQAMj6o1Q7ECOrNYnDuVlQc853hCDtmC70n U52LOjgNMXI0mkd5NO45XOqAK8Zz+FttEpqHOlZ4uGiqhwo84qVkSOl92JcQmq9Q iNcRh72jGqGSJz4j/M2utCD6Pp+I8VLgt1iwijPZbnFO8skEiaml/P4Hjqg+U6Kz H0E7cbSyKkLBevWj0yqeMA8IqzUkzpI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:17 2025 by rpki-client