$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10c530b2-4279-3511-983f-778deece41c6.roa File: 10c530b2-4279-3511-983f-778deece41c6.roa (raw, json) Hash identifier: ykjgc92+LWdLT/L/ZLeAavdHzKDCEHyrIsvL8oitOz8= Subject key identifier: 04:6B:35:3B:B8:2C:CF:4C:03:7B:6A:B1:67:F4:29:26:FC:C8:D5:42 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6632082ECD0CBAEBA07FA660 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10c530b2-4279-3511-983f-778deece41c6.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 30036 IP address blocks: 173.19.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:08:2e:cd:0c:ba:eb:a0:7f:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=3a2a5ef9-0c14-4e78-b57c-82d9bf7738f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:cb:58:9a:75:2a:5d:8d:5e:17:b2:94:d3: 21:71:65:c3:3e:f8:92:ca:b0:b1:f4:30:92:43:99: 91:18:91:8a:93:15:0d:af:70:a9:c0:73:f5:ed:24: f2:61:cd:c8:b2:a5:03:28:65:f6:83:0f:b1:1e:0d: 51:13:da:5b:f4:49:99:2a:39:54:62:af:eb:ab:eb: f6:33:75:61:b5:f5:71:99:a0:1f:35:60:ed:b3:2a: ed:78:64:51:89:28:5e:4b:18:2a:27:24:be:87:89: a7:59:32:b9:40:ed:db:30:c6:66:1b:fb:9e:3f:fa: 5e:19:34:a1:aa:81:e8:de:d2:fa:aa:43:5e:57:34: 51:29:91:b6:99:d9:05:b7:9d:cf:13:b4:a0:da:46: 0a:2d:80:0e:80:c0:24:f8:7c:09:2c:60:d7:3c:de: 31:a1:62:d0:f3:75:14:88:a4:19:e3:91:9b:4d:85: 7f:c0:5b:97:4c:c0:4b:86:1d:5c:78:60:5e:1e:09: d8:9a:ce:4f:ea:13:ae:92:db:b8:8e:ae:0a:d7:cd: 53:51:0a:b7:54:ed:8a:54:88:97:95:53:3a:96:c6: ed:a0:3a:72:ab:f1:3f:36:71:31:6c:3f:16:38:c3: 79:e0:1f:2c:39:38:29:4f:5b:a5:9d:e3:cb:fa:06: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6B:35:3B:B8:2C:CF:4C:03:7B:6A:B1:67:F4:29:26:FC:C8:D5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10c530b2-4279-3511-983f-778deece41c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9f:63:85:17:16:67:b6:4e:c3:d9:82:42:09:68:d5:75:3e: 3f:98:99:d4:f0:4b:1a:eb:dc:86:6a:f4:35:f8:84:74:cc:31: 0a:10:64:93:bc:74:09:e6:e5:10:07:e0:42:bd:4e:6c:58:e7: fa:14:fc:a6:02:16:ae:0a:23:e1:02:e4:bb:ee:2b:a5:87:b8: ec:bf:04:83:84:74:95:bb:f9:09:d1:31:cd:79:2d:34:95:9e: 86:fc:9c:e6:f3:2f:6e:db:b0:62:b7:84:28:ca:3a:bf:38:ff: 59:12:dd:17:15:11:ea:55:26:55:7f:20:eb:da:36:ca:80:41: 2d:c1:2d:e9:d9:15:cc:6e:87:85:64:92:4b:d4:21:73:aa:5c: f6:85:32:c2:ce:bf:42:31:b3:fc:f3:d2:ab:41:2b:2e:26:fb: 47:b1:c1:4b:c5:51:b3:70:6f:f4:0c:06:ef:21:30:55:bb:0b: 8c:7e:1f:91:8e:04:aa:4e:14:e8:f7:a8:23:49:28:eb:59:0c: cd:76:cd:52:6c:5c:6a:7b:a6:b6:2b:09:1f:62:e7:2b:c1:17: f0:ca:32:24:5b:26:b7:20:4f:52:72:02:1f:14:d3:b8:17:4f: cc:e2:c6:52:86:9b:84:95:bc:97:99:e2:33:5e:40:6d:82:97: 1b:cb:20:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgguzQy666B/pmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk M2EyYTVlZjktMGMxNC00ZTc4LWI1N2MtODJkOWJmNzczOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoHLWJp1Kl2NXheylNMhcWXDPviSyrCx9DCS Q5mRGJGKkxUNr3CpwHP17STyYc3IsqUDKGX2gw+xHg1RE9pb9EmZKjlUYq/rq+v2 M3VhtfVxmaAfNWDtsyrteGRRiSheSxgqJyS+h4mnWTK5QO3bMMZmG/ueP/peGTSh qoHo3tL6qkNeVzRRKZG2mdkFt53PE7Sg2kYKLYAOgMAk+HwJLGDXPN4xoWLQ83UU iKQZ45GbTYV/wFuXTMBLhh1ceGBeHgnYms5P6hOuktu4jq4K181TUQq3VO2KVIiX lVM6lsbtoDpyq/E/NnExbD8WOMN54B8sOTgpT1ulnePL+gb2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARrNTu4LM9MA3tqsWf0KSb8yNVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTBjNTMwYjItNDI3OS0z NTExLTk4M2YtNzc4ZGVlY2U0MWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGufY4UXFme2TsPZgkIJaNV1Pj+YmdTwSxrr3IZq9DX4hHTMMQoQZJO8 dAnm5RAH4EK9TmxY5/oU/KYCFq4KI+EC5LvuK6WHuOy/BIOEdJW7+QnRMc15LTSV nob8nObzL27bsGK3hCjKOr84/1kS3RcVEepVJlV/IOvaNsqAQS3BLenZFcxuh4Vk kkvUIXOqXPaFMsLOv0Ixs/zz0qtBKy4m+0exwUvFUbNwb/QMBu8hMFW7C4x+H5GO BKpOFOj3qCNJKOtZDM12zVJsXGp7prYrCR9i5yvBF/DKMiRbJrcgT1JyAh8U07gX T8zixlKGm4SVvJeZ4jNeQG2ClxvLIPo= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:41 2025 by rpki-client