$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa File: 0f8bd921-1438-3359-a561-4ea35af7895d.roa (raw, json) Hash identifier: 0GgLaGlQ1Jid7kRjje06Tj62qH9HWO9K/CA6fbztjQY= Subject key identifier: 80:A1:F2:24:DD:C5:39:70:EA:8B:BF:3A:CE:81:5F:68:51:F0:97:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6CB69397C51BA6E7E0AC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.23.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b6:93:97:c5:1b:a6:e7:e0:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=2d64d469-c48a-4fad-bc26-3c187422682b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:37:af:94:4c:26:6a:0f:c9:97:fe:6c:22: 8a:9c:46:6d:78:4b:84:2f:19:f8:1d:3d:df:35:91: 25:59:08:23:54:7e:22:3d:33:a0:1f:45:55:c6:41: cf:c0:08:0a:47:48:13:ca:01:38:21:a3:71:36:c4: 02:1d:76:06:2d:f3:89:2c:fa:80:39:f4:5c:06:16: ba:40:3e:fa:10:79:7e:30:52:ab:48:cb:1e:f5:b6: 19:0c:4e:04:cc:d0:3d:dc:67:10:6f:b1:73:c5:d0: 56:c5:1f:98:fc:22:cd:68:96:c1:bf:12:d8:69:f0: 54:91:8e:97:f7:c5:40:a8:3b:d3:7f:c9:df:e7:2d: 67:78:cc:76:08:84:8d:e7:36:2f:52:0d:09:bf:e9: e6:5e:a0:32:c4:82:fc:a5:52:9e:55:54:79:df:b6: ff:6f:0d:e0:1a:3d:ec:3e:2c:26:1d:37:9c:11:60: cd:ca:0b:61:c5:1c:cb:88:59:73:f7:88:da:55:68: e8:d4:00:80:37:f0:35:ef:62:a9:5e:d0:8b:62:9c: 91:45:7a:02:18:d1:d5:64:a7:b5:6b:c0:89:09:d3: a7:de:1f:af:92:1f:2c:92:f4:50:15:05:14:34:be: 4d:c4:f3:65:78:ff:37:38:64:ed:ad:a1:bd:be:5a: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A1:F2:24:DD:C5:39:70:EA:8B:BF:3A:CE:81:5F:68:51:F0:97:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:99:49:b7:2e:a6:ed:d9:3a:7c:00:d5:56:21:6a:3a:bf:d6: 91:76:ef:76:2e:3b:18:03:80:ef:81:eb:c3:09:d0:2b:47:e9: 9c:67:4a:e3:3f:0b:8b:0f:2a:da:74:85:76:c9:b1:fd:02:91: 35:8f:c1:7c:c4:d8:61:8c:cd:7b:3a:8f:3a:90:82:27:d4:37: 33:78:3e:1a:de:81:91:9c:f1:9a:de:32:39:82:e5:23:b2:26: 0a:3f:fa:1f:8d:83:4b:d0:90:a7:65:2d:2f:28:06:0f:19:09: a4:5b:96:41:02:f0:ab:2a:d9:c6:ed:5a:51:7f:f9:c6:2f:82: 81:00:e0:e6:88:d1:3d:d0:24:d1:a4:33:5c:de:8d:51:a5:f3: dd:cc:8f:f6:a9:4a:eb:60:42:c3:86:71:17:84:6c:60:13:81: 39:99:fe:42:56:90:cf:63:56:ac:b2:c4:c7:4a:da:e7:eb:56: c7:56:02:b4:13:d2:29:af:69:c1:1a:70:2d:36:9d:4b:3c:bd: 07:33:8e:af:00:35:2c:6b:26:5a:83:d1:4c:0e:2c:d3:e6:fe: c6:79:5a:84:85:47:07:7f:30:1f:47:24:62:c3:38:c5:28:02: 1e:19:50:54:3d:30:c3:60:d3:fb:d8:bc:ab:58:69:13:f6:4b: 61:2b:fe:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLaTl8UbpufgrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MmQ2NGQ0NjktYzQ4YS00ZmFkLWJjMjYtM2MxODc0MjI2ODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FQ3r5RMJmoPyZf+bCKKnEZteEuELxn4HT3f NZElWQgjVH4iPTOgH0VVxkHPwAgKR0gTygE4IaNxNsQCHXYGLfOJLPqAOfRcBha6 QD76EHl+MFKrSMse9bYZDE4EzNA93GcQb7FzxdBWxR+Y/CLNaJbBvxLYafBUkY6X 98VAqDvTf8nf5y1neMx2CISN5zYvUg0Jv+nmXqAyxIL8pVKeVVR537b/bw3gGj3s PiwmHTecEWDNygthxRzLiFlz94jaVWjo1ACAN/A172KpXtCLYpyRRXoCGNHVZKe1 a8CJCdOn3h+vkh8skvRQFQUUNL5NxPNleP83OGTtraG9vlph5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICh8iTdxTlw6ou/Os6BX2hR8Jd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGY4YmQ5MjEtMTQzOC0z MzU5LWE1NjEtNGVhMzVhZjc4OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2ZSbcupu3ZOnwA1VYhajq/1pF273YuOxgDgO+B68MJ0CtH6ZxnSuM/ C4sPKtp0hXbJsf0CkTWPwXzE2GGMzXs6jzqQgifUNzN4PhregZGc8ZreMjmC5SOy Jgo/+h+Ng0vQkKdlLS8oBg8ZCaRblkEC8Ksq2cbtWlF/+cYvgoEA4OaI0T3QJNGk M1zejVGl893Mj/apSutgQsOGcReEbGATgTmZ/kJWkM9jVqyyxMdK2ufrVsdWArQT 0imvacEacC02nUs8vQczjq8ANSxrJlqD0UwOLNPm/sZ5WoSFRwd/MB9HJGLDOMUo Ah4ZUFQ9MMNg0/vYvKtYaRP2S2Er/us= -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:14 2025 by rpki-client