$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa File: 0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa (raw, json) Hash identifier: mr+p6NaVdT+Q87BiSYB7clFwwR3IQU9xzqitRfEfjQY= Subject key identifier: 36:13:08:59:DF:36:D1:A3:67:D3:29:05:63:96:BB:B5:88:0B:71:90 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA39D3A74C37E2BFB77900B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 173.19.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3a:74:c3:7e:2b:fb:77:90:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8ea24f96-c394-4531-a9fb-b877d9ab389b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4b:f5:f6:a1:14:04:22:26:fe:9f:52:23:e6: 47:27:be:46:8f:a3:59:1d:51:fb:67:42:02:50:3d: 24:90:a5:52:e0:21:06:8f:46:fd:ef:33:ff:25:40: a3:b6:85:df:c2:55:29:dc:d8:28:40:6d:a7:61:2f: 78:2f:93:44:59:f0:28:54:8c:44:c8:5f:03:c1:30: 08:a6:97:3e:1e:10:a6:45:8e:40:77:c5:d2:50:ee: 7c:82:46:61:b4:c2:f5:7f:52:8c:68:a8:63:2c:e6: 3d:e8:1e:6a:4b:db:e9:93:b3:b3:41:9a:56:e1:54: f2:af:53:95:5b:36:c1:30:6b:03:e3:f4:65:2a:78: 04:bf:85:02:84:58:45:52:32:1f:29:30:85:ed:6f: ca:04:e1:66:32:ea:62:8f:b1:2d:83:a2:59:fe:9f: 89:e8:78:0a:7f:fe:f7:56:8e:5f:54:4b:39:ea:2b: bb:00:12:9a:c6:cd:76:3e:0c:ce:01:41:f1:6b:9a: 9a:61:bd:42:81:60:cb:ba:4b:d9:e3:74:fe:86:a1: 1c:58:78:4f:bd:f0:3a:5d:86:48:1e:f0:cf:79:bd: 6b:ab:df:80:d3:46:74:40:af:44:86:f0:27:38:48: a1:43:24:e2:e2:6f:a7:ea:30:38:1e:41:40:ad:d5: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:13:08:59:DF:36:D1:A3:67:D3:29:05:63:96:BB:B5:88:0B:71:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a4:ba:7b:73:ab:8a:ea:7b:db:c0:87:03:17:d5:6c:fb:05: 54:68:57:97:ef:af:3d:e4:b8:6e:58:64:a2:7e:61:78:45:83: d7:23:19:19:b2:8a:81:bd:9f:c2:b9:f8:5d:7b:ea:b0:3b:2a: 4f:5f:16:f8:22:f0:82:21:18:fc:b1:0b:b4:7a:b6:6e:87:af: 2d:7f:c3:d7:7b:a7:a4:1e:a0:c6:c5:6b:d4:59:f4:72:67:18: 64:7a:b7:85:be:e3:4d:00:11:04:6a:c3:bb:12:54:45:25:01: cd:a2:7e:0e:31:79:4c:6a:55:71:79:6f:c7:9a:65:71:83:73: 73:a2:b5:e1:95:32:34:0a:10:ba:a7:68:92:67:58:f1:ba:02: 53:3b:ed:56:61:8a:04:3f:ab:00:71:5a:0c:f1:95:f0:92:50: c7:ef:f2:44:c1:32:8c:f8:5d:79:37:be:8c:6d:53:e3:06:b9: 7a:b5:7a:a5:78:60:6c:cb:79:12:78:5a:05:7a:31:4f:5f:17: ad:43:81:ef:83:c9:08:96:b2:c4:f5:1f:b0:2f:07:dc:71:ec: ce:4f:5e:74:68:86:dd:47:93:24:b1:09:a9:ec:a9:13:c2:17: 73:d5:e5:0c:f7:e7:67:bf:77:ce:c5:ed:ee:19:58:f8:09:4c: 36:3f:78:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTp0w34r+3eQCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGVhMjRmOTYtYzM5NC00NTMxLWE5ZmItYjg3N2Q5YWIzODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEv19qEUBCIm/p9SI+ZHJ75Gj6NZHVH7Z0IC UD0kkKVS4CEGj0b97zP/JUCjtoXfwlUp3NgoQG2nYS94L5NEWfAoVIxEyF8DwTAI ppc+HhCmRY5Ad8XSUO58gkZhtML1f1KMaKhjLOY96B5qS9vpk7OzQZpW4VTyr1OV WzbBMGsD4/RlKngEv4UChFhFUjIfKTCF7W/KBOFmMupij7Etg6JZ/p+J6HgKf/73 Vo5fVEs56iu7ABKaxs12PgzOAUHxa5qaYb1CgWDLukvZ43T+hqEcWHhPvfA6XYZI HvDPeb1rq9+A00Z0QK9EhvAnOEihQyTi4m+n6jA4HkFArdVM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYTCFnfNtGjZ9MpBWOWu7WIC3GQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGE5Y2FmNzAtNjkxMS0z YzcwLTgzNDMtMGJkNWI5M2QxMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSkuntzq4rqe9vAhwMX1Wz7BVRoV5fvrz3kuG5YZKJ+YXhFg9cjGRmy ioG9n8K5+F176rA7Kk9fFvgi8IIhGPyxC7R6tm6Hry1/w9d7p6QeoMbFa9RZ9HJn GGR6t4W+400AEQRqw7sSVEUlAc2ifg4xeUxqVXF5b8eaZXGDc3OiteGVMjQKELqn aJJnWPG6AlM77VZhigQ/qwBxWgzxlfCSUMfv8kTBMoz4XXk3voxtU+MGuXq1eqV4 YGzLeRJ4WgV6MU9fF61Dge+DyQiWssT1H7AvB9xx7M5PXnRoht1HkySxCansqRPC F3PV5Qz352e/d87F7e4ZWPgJTDY/eI0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:55:49 2025 by rpki-client