$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1289d8ad-f2b4-3ac1-9bd3-34012d7ee926.roa File: 1289d8ad-f2b4-3ac1-9bd3-34012d7ee926.roa (raw, json) Hash identifier: R1TJnaxhfr69zZr1w+t9t396T/2lHnFkzSLqZGoaQKw= Subject key identifier: 1C:01:4E:12:2F:B6:D8:B8:5C:ED:34:8F:30:2D:0B:4E:60:2A:AB:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B617385D3565EAE522536D940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1289d8ad-f2b4-3ac1-9bd3-34012d7ee926.roa Signing time: Wed 01 Oct 2025 20:13:52 +0000 ROA not before: Wed 01 Oct 2025 20:13:52 +0000 ROA not after: Tue 30 Dec 2025 21:13:52 +0000 asID: 19905 IP address blocks: 173.23.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:73:85:d3:56:5e:ae:52:25:36:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:13:52 2025 GMT Not After : Dec 30 21:13:52 2025 GMT Subject: CN=00ca9fa7-7e90-49b6-b186-85a9c3f01ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:98:6a:60:21:c8:64:20:da:ac:ba:38:9e:ca: 3e:4c:a3:04:cd:9b:d0:87:7f:b9:bb:ba:5b:b3:4c: 15:0b:01:c2:ce:ae:44:45:96:c5:80:57:05:96:2f: b2:d9:fb:3a:59:9a:7d:c4:c7:39:88:96:2c:46:f2: 46:91:72:be:c1:d2:d6:66:8e:35:11:55:65:da:fb: 79:f9:f1:58:6c:cf:04:6b:64:b9:ba:a0:11:11:68: 8f:b3:b3:53:07:14:7f:00:2d:a6:b9:94:5a:5c:ec: 65:89:cd:88:34:cd:35:66:fe:79:6a:f9:f0:f4:e2: 74:63:ff:9d:eb:92:d3:f5:e9:ac:38:67:bf:a5:0d: ba:21:6b:11:f5:6f:a9:89:34:08:65:3d:6a:42:76: 05:04:fe:09:d9:01:c0:da:29:e9:c3:04:ef:cc:1d: 45:ad:34:c7:ad:17:d0:4e:ed:ea:26:84:3b:ff:4d: b4:93:39:a5:ab:7e:ad:ff:4d:6f:18:37:61:79:05: bf:0e:90:ca:35:be:3b:23:14:66:71:12:8a:73:b3: 56:f3:41:f9:eb:fe:d5:38:2a:bd:2d:b9:33:99:31: 74:9f:08:98:43:24:5d:b9:19:08:21:49:73:eb:49: 71:e7:d1:63:54:05:d9:a6:cf:51:e2:fa:f0:22:8a: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:01:4E:12:2F:B6:D8:B8:5C:ED:34:8F:30:2D:0B:4E:60:2A:AB:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1289d8ad-f2b4-3ac1-9bd3-34012d7ee926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f0:3b:c2:91:cb:18:6d:67:64:c0:c6:f3:6d:04:ef:13:e7: 04:a1:8c:91:9e:6d:01:bd:67:02:a7:fd:c4:52:7c:4e:41:0c: f5:b1:ff:a0:54:b8:af:0d:f7:a7:75:f5:40:83:27:d7:64:6f: 35:98:6f:4a:a3:4e:4b:c1:5e:c8:d2:7b:48:14:77:6d:4d:43: 83:bd:06:59:ca:0d:ee:7d:51:34:c1:68:0d:48:d9:58:52:dc: 75:a8:c2:40:2d:08:27:fb:91:02:d7:7e:a9:d4:8e:ba:a0:22: df:ed:7c:be:40:ec:58:44:e5:e5:d8:75:d2:92:93:60:47:a4: 3c:82:25:5f:7d:e7:a7:87:e5:70:5a:7e:fa:8f:1b:55:e2:6b: cb:dd:af:7b:d0:61:d8:01:10:e5:ed:43:31:51:5e:a4:41:7e: 6e:51:e6:0d:64:3c:41:04:45:09:d1:cc:93:96:60:ed:49:e8: 88:08:04:f7:0e:c7:6c:58:98:56:df:02:a7:a0:77:47:cf:f8: 07:0a:b0:58:66:80:97:98:7f:3d:3f:68:aa:b9:f3:67:71:fe: 62:48:38:9c:cd:1c:d7:c0:df:b0:66:02:5f:f9:63:fd:e4:7e: f8:99:38:e0:f8:c5:14:92:29:e2:8b:48:ff:d4:e8:ec:45:6b: dd:09:43:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthc4XTVl6uUiU22UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTM1MloXDTI1MTIzMDIxMTM1MlowLzEtMCsGA1UEAxMk MDBjYTlmYTctN2U5MC00OWI2LWIxODYtODVhOWMzZjAxY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5hqYCHIZCDarLo4nso+TKMEzZvQh3+5u7pb s0wVCwHCzq5ERZbFgFcFli+y2fs6WZp9xMc5iJYsRvJGkXK+wdLWZo41EVVl2vt5 +fFYbM8Ea2S5uqAREWiPs7NTBxR/AC2muZRaXOxlic2INM01Zv55avnw9OJ0Y/+d 65LT9emsOGe/pQ26IWsR9W+piTQIZT1qQnYFBP4J2QHA2inpwwTvzB1FrTTHrRfQ Tu3qJoQ7/020kzmlq36t/01vGDdheQW/DpDKNb47IxRmcRKKc7NW80H56/7VOCq9 LbkzmTF0nwiYQyRduRkIIUlz60lx59FjVAXZps9R4vrwIoqX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwBThIvtti4XO00jzAtC05gKqujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTI4OWQ4YWQtZjJiNC0z YWMxLTliZDMtMzQwMTJkN2VlOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/wO8KRyxhtZ2TAxvNtBO8T5wShjJGebQG9ZwKn/cRSfE5BDPWx/6BU uK8N96d19UCDJ9dkbzWYb0qjTkvBXsjSe0gUd21NQ4O9BlnKDe59UTTBaA1I2VhS 3HWowkAtCCf7kQLXfqnUjrqgIt/tfL5A7FhE5eXYddKSk2BHpDyCJV9956eH5XBa fvqPG1Xia8vdr3vQYdgBEOXtQzFRXqRBfm5R5g1kPEEERQnRzJOWYO1J6IgIBPcO x2xYmFbfAqegd0fP+AcKsFhmgJeYfz0/aKq582dx/mJIOJzNHNfA37BmAl/5Y/3k fviZOOD4xRSSKeKLSP/U6OxFa90JQ5g= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:51 2025 by rpki-client