$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa File: 223021f3-e1cd-3b6d-a238-c230b97e42a8.roa (raw, json) Hash identifier: XnfnGvHorece5fdzQgMvKZ3ihAccW1/6DM1ZrddIUzw= Subject key identifier: 30:0F:8F:70:63:72:3D:D1:E0:3E:CE:2C:B7:59:FF:26:99:01:1B:DE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA2378C97ED20E3080119CDA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.16.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8c:97:ed:20:e3:08:01:19:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=2b58a893-a68e-450f-946d-b36c4314f881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:17:80:6f:75:f7:db:50:0b:3c:53:e4:a3:72: b9:89:53:2d:aa:25:8d:4f:ef:26:02:dc:4c:b1:d1: c9:1f:86:25:b0:e2:bb:3c:5a:6d:0c:b9:5d:a1:27: fd:69:8c:54:2c:82:22:53:7c:6e:18:3c:c3:b8:be: 57:26:05:f9:65:08:65:22:05:2a:9c:55:a3:30:e5: ce:75:f6:14:c6:f8:ea:12:9c:bc:bc:fa:0f:e2:af: 54:cf:7b:3f:c0:0f:0c:e3:92:68:e6:10:47:11:67: c7:47:c7:2d:be:04:4d:77:c5:68:21:a8:b4:ac:ac: c1:8d:61:f3:f4:10:f5:22:37:e3:ea:93:9f:9a:b9: c8:df:d6:9a:75:25:f3:a2:43:3c:79:78:9f:19:11: d9:d5:3c:32:b0:7c:97:18:de:53:13:8e:ad:15:00: af:d9:b7:2a:6a:ed:ca:ea:61:0a:be:8a:03:95:e5: b3:04:c7:fa:67:9d:3a:40:1c:4c:88:1d:e1:9f:fb: 83:77:1b:c3:95:66:98:dc:d8:ac:98:27:69:40:d2: 89:9d:cc:44:44:8d:91:32:5d:aa:ef:cf:70:35:ee: dc:15:85:6d:ee:54:24:15:58:c5:ed:81:c5:f4:61: ad:17:95:44:6c:4d:21:2d:d3:42:b2:f7:89:0c:6e: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0F:8F:70:63:72:3D:D1:E0:3E:CE:2C:B7:59:FF:26:99:01:1B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e9:3c:f1:90:e1:c1:56:33:a6:50:5e:d1:05:7c:1b:46:7b: 83:bc:8e:e4:b0:da:f8:c7:d0:ad:2f:e9:bb:74:d8:6b:00:1b: 96:4b:66:43:2d:56:e0:ba:48:4b:93:c6:6a:39:c7:1b:be:5a: 34:38:dd:f1:71:32:b4:7d:2f:3d:f1:f1:44:db:06:23:21:f3: 5b:7e:97:08:5e:b8:1c:c8:ed:bc:65:a6:87:90:47:59:c0:35: 5e:f8:11:c0:42:22:2d:cc:67:36:cf:a5:40:e3:12:53:64:74: 82:f1:e7:b4:6d:bb:50:48:be:a9:e2:cc:53:9d:9d:e1:40:d9: 50:a7:62:ac:b8:fc:f6:47:a4:fa:df:4f:cf:04:ef:b1:73:dc: 26:04:e9:f6:b7:b9:a5:d4:be:11:2c:35:1b:d7:79:48:0d:05: fb:e4:94:60:65:99:51:d1:a7:d3:b5:5c:f0:3d:62:61:94:de: 9e:76:f7:5b:be:f4:a1:d7:6d:11:e0:62:5d:e1:f5:a1:7b:b2: b6:fb:86:03:42:c1:79:2b:92:8e:0b:32:2f:be:d8:23:a5:18: 79:df:60:e6:82:6a:39:58:c8:e7:0b:7e:1f:22:d7:8e:6e:eb: d7:65:71:49:a0:ab:b8:89:0f:e5:45:7d:c4:bb:36:8a:1b:ac: b3:70:b6:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN4yX7SDjCAEZzaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MmI1OGE4OTMtYTY4ZS00NTBmLTk0NmQtYjM2YzQzMTRmODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxeAb3X321ALPFPko3K5iVMtqiWNT+8mAtxM sdHJH4YlsOK7PFptDLldoSf9aYxULIIiU3xuGDzDuL5XJgX5ZQhlIgUqnFWjMOXO dfYUxvjqEpy8vPoP4q9Uz3s/wA8M45Jo5hBHEWfHR8ctvgRNd8VoIai0rKzBjWHz 9BD1Ijfj6pOfmrnI39aadSXzokM8eXifGRHZ1TwysHyXGN5TE46tFQCv2bcqau3K 6mEKvooDleWzBMf6Z506QBxMiB3hn/uDdxvDlWaY3NismCdpQNKJncxERI2RMl2q 789wNe7cFYVt7lQkFVjF7YHF9GGtF5VEbE0hLdNCsveJDG744wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAPj3Bjcj3R4D7OLLdZ/yaZARveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjIzMDIxZjMtZTFjZC0z YjZkLWEyMzgtYzIzMGI5N2U0MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHpPPGQ4cFWM6ZQXtEFfBtGe4O8juSw2vjH0K0v6bt02GsAG5ZLZkMt VuC6SEuTxmo5xxu+WjQ43fFxMrR9Lz3x8UTbBiMh81t+lwheuBzI7bxlpoeQR1nA NV74EcBCIi3MZzbPpUDjElNkdILx57Rtu1BIvqnizFOdneFA2VCnYqy4/PZHpPrf T88E77Fz3CYE6fa3uaXUvhEsNRvXeUgNBfvklGBlmVHRp9O1XPA9YmGU3p5291u+ 9KHXbRHgYl3h9aF7srb7hgNCwXkrko4LMi++2COlGHnfYOaCajlYyOcLfh8i145u 69dlcUmgq7iJD+VFfcS7NoobrLNwtg8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:27:20 2025 by rpki-client