$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157c81be-8ba0-35d7-a6b7-d0857b14b02c.roa File: 157c81be-8ba0-35d7-a6b7-d0857b14b02c.roa (raw, json) Hash identifier: AEWQYR4pjZo9zwjuqxl/Am0rxihhxk9srDHuY8oGnpo= Subject key identifier: 6F:1C:59:91:5F:7B:96:E6:07:E7:34:EF:87:57:54:35:45:BE:4C:8C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B3AEC3A3E974BB4DF742DD540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157c81be-8ba0-35d7-a6b7-d0857b14b02c.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 30036 IP address blocks: 173.22.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:3a:3e:97:4b:b4:df:74:2d:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=d494575f-a22a-494a-9b9b-7b0b606d43de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:8c:78:cc:b6:b1:0d:e7:e4:c7:0b:92:07: 41:27:9f:c8:8b:a5:9b:42:4f:2b:ba:01:03:25:6e: 05:8e:47:1e:ae:c1:fc:ae:a2:a5:12:b8:4b:dc:41: ec:8a:a2:94:60:6f:7a:1d:d5:68:99:6a:46:29:a6: ae:48:91:d0:63:3e:ac:aa:3a:11:0d:b1:3a:93:c7: d0:95:15:e6:e4:63:99:a1:31:2b:b8:5a:79:73:f6: 65:2f:b0:c1:66:0a:82:dd:28:f8:c4:a4:37:a5:df: 4f:cb:f9:0c:8b:b3:83:ec:ce:4b:ff:fd:4c:c4:70: a1:d9:40:bd:08:e6:34:d5:54:58:7a:13:e4:90:b9: e5:a8:13:e7:10:b0:7d:c1:1d:fa:2d:63:ac:94:75: 65:21:55:a8:58:77:1d:9c:b9:48:30:e1:f9:a9:6a: 88:9d:f9:0d:4a:b3:da:5e:42:6c:52:b1:b6:f7:ce: 12:56:a0:19:43:26:89:f5:52:4c:32:fa:62:61:ac: e3:7d:42:b5:ed:1f:59:01:67:c6:24:b4:a8:0f:3f: 14:21:16:fb:9d:50:47:94:11:a5:df:31:5d:70:19: e0:47:10:f1:01:13:f6:f5:b0:d6:8b:4c:ce:9c:32: 2e:5a:22:ec:41:41:65:f1:68:8f:5f:f2:7f:13:90: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1C:59:91:5F:7B:96:E6:07:E7:34:EF:87:57:54:35:45:BE:4C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157c81be-8ba0-35d7-a6b7-d0857b14b02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6d:4f:98:1e:24:06:45:d5:9b:ac:0a:df:04:ca:e3:d6:a4: 00:34:7a:85:fa:1d:a7:f4:6b:5c:f3:0b:b0:f3:97:50:ad:ac: 61:f2:62:b0:87:5d:86:5d:40:94:4b:b1:d7:dc:c3:ac:fa:2f: 41:f4:d0:a7:10:cd:da:01:ee:a6:a1:bd:26:a7:f5:1f:f9:b0: 5c:cc:4e:5a:67:07:b2:93:d6:67:5e:9a:99:c2:b5:64:82:b5: c9:65:17:4a:0f:b9:ab:06:52:d1:f5:72:9f:00:be:0f:95:2b: 55:5c:3c:9c:34:b3:02:95:4e:09:db:e4:05:03:ea:94:31:1d: a2:62:2d:98:f9:74:05:8f:15:7e:c4:4b:93:a0:e2:b3:78:f5: 97:23:71:1e:d2:c9:f2:b9:2b:e6:fe:8a:33:c0:d0:02:8b:f2: c1:c4:41:2d:53:20:a1:ac:b9:94:99:d4:ac:02:cb:85:e2:81: 5b:16:b6:0f:6a:4f:5b:4d:40:a7:b6:f5:08:6f:73:c9:62:82: b8:f3:98:98:68:88:ff:27:b4:21:42:80:b0:84:88:70:d0:e7: c2:b3:50:f5:ae:b9:ce:8a:90:79:13:c9:2b:b9:c6:45:6e:bf: 1d:93:25:61:41:db:7c:09:65:c9:1a:c2:c4:bd:ff:52:14:9c: 0e:4a:f9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67Do+l0u033Qt1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk ZDQ5NDU3NWYtYTIyYS00OTRhLTliOWItN2IwYjYwNmQ0M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIOMeMy2sQ3n5McLkgdBJ5/Ii6WbQk8rugED JW4FjkcersH8rqKlErhL3EHsiqKUYG96HdVomWpGKaauSJHQYz6sqjoRDbE6k8fQ lRXm5GOZoTEruFp5c/ZlL7DBZgqC3Sj4xKQ3pd9Py/kMi7OD7M5L//1MxHCh2UC9 COY01VRYehPkkLnlqBPnELB9wR36LWOslHVlIVWoWHcdnLlIMOH5qWqInfkNSrPa XkJsUrG2984SVqAZQyaJ9VJMMvpiYazjfUK17R9ZAWfGJLSoDz8UIRb7nVBHlBGl 3zFdcBngRxDxARP29bDWi0zOnDIuWiLsQUFl8WiPX/J/E5DlDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8cWZFfe5bmB+c074dXVDVFvkyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTU3YzgxYmUtOGJhMC0z NWQ3LWE2YjctZDA4NTdiMTRiMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRbnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABttT5geJAZF1ZusCt8EyuPWpAA0eoX6Haf0a1zzC7Dzl1CtrGHyYrCH XYZdQJRLsdfcw6z6L0H00KcQzdoB7qahvSan9R/5sFzMTlpnB7KT1mdempnCtWSC tcllF0oPuasGUtH1cp8Avg+VK1VcPJw0swKVTgnb5AUD6pQxHaJiLZj5dAWPFX7E S5Og4rN49ZcjcR7SyfK5K+b+ijPA0AKL8sHEQS1TIKGsuZSZ1KwCy4XigVsWtg9q T1tNQKe29Qhvc8ligrjzmJhoiP8ntCFCgLCEiHDQ58KzUPWuuc6KkHkTySu5xkVu vx2TJWFB23wJZckawsS9/1IUnA5K+S0= -----END CERTIFICATE-----Generated at Wed Nov 5 02:34:36 2025 by rpki-client