$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa File: 2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa (raw, json) Hash identifier: wrMsXA6gz/3yIMyDZaDa+4VVnzJbQbatan74RCoKpUE= Subject key identifier: 8C:26:0A:62:40:71:99:A2:F6:BC:CC:04:D3:7E:78:BE:66:86:09:06 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA7CCE80220EE21AC56ED2E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:e8:02:20:ee:21:ac:56:ed:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=02af47d9-fa01-45cd-8f80-6e3a75714d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:37:ad:84:c1:4c:59:1c:7a:93:e3:e0:e0: 44:6e:75:a4:4a:35:5b:96:2a:c3:60:75:f8:f4:15: df:f3:6e:fd:e1:ae:64:7e:34:26:92:1e:c3:83:71: 28:13:d1:ba:74:a1:b4:02:60:ee:6a:73:d0:15:f6: 2b:6e:68:9d:73:66:66:dd:a3:ae:c5:74:a8:93:c4: 34:6e:9c:a0:31:92:2f:ed:4c:cd:3e:3d:88:25:ec: a0:b6:ad:7c:21:0f:01:f0:44:63:99:4a:24:77:64: 72:95:92:0b:57:18:40:86:ca:f6:55:30:63:59:e9: dc:be:2a:7b:98:b3:32:a5:76:17:29:a4:e4:09:b1: c9:62:48:3c:32:b3:76:cf:53:f0:5e:9f:13:03:98: 7e:d0:3e:da:5b:e1:57:93:42:43:cb:0a:af:ce:23: ce:4d:31:60:00:23:47:80:8a:64:39:4c:9c:f4:01: c0:35:14:51:f4:03:41:1a:7d:d2:0c:a0:99:31:51: cb:d9:30:58:a4:58:59:ba:14:0e:0b:b6:76:a7:da: ba:01:3e:d0:c8:e4:b6:ac:fb:dc:ca:3a:27:8c:17: 13:6b:5a:b9:ae:fa:43:38:e8:ef:be:72:ad:7d:4d: 80:87:19:31:29:ae:67:f6:1f:db:e1:43:1f:d8:c3: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:26:0A:62:40:71:99:A2:F6:BC:CC:04:D3:7E:78:BE:66:86:09:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:84:f0:7e:3b:01:c4:a4:7b:c2:7a:5b:20:12:11:18:f6:2e: f4:02:ac:5e:09:7a:ac:a8:e7:36:39:f4:48:1f:1c:87:6a:8b: ea:24:ec:24:ef:ff:9d:90:10:5b:0a:7c:9a:cb:19:99:96:e4: 5e:b6:99:bf:d9:42:b3:eb:70:6d:b8:54:c3:12:19:9b:5a:d6: 38:8b:cd:b1:52:c2:7a:31:d3:a6:67:2e:4a:96:28:b2:71:75: 2e:6d:d2:41:78:69:22:fd:f5:ad:3e:99:c6:d1:25:e1:e7:7d: 2e:d2:82:38:41:3a:ea:5b:81:1c:62:50:bd:c4:58:4c:f7:46: fa:92:d6:47:57:4b:96:77:2b:d8:ea:87:c3:b3:eb:a3:97:75: 6d:58:c7:b2:e4:76:d8:3f:09:49:e9:30:4c:cb:29:eb:ea:b6: 39:1e:84:d6:78:6b:b2:57:1e:39:54:e7:22:c3:99:eb:e7:7b: 9e:8a:7b:e5:6a:1d:53:66:1e:3f:72:3c:a5:21:c6:f9:34:71: e2:5b:e1:e9:4f:28:24:c9:56:c8:ce:22:26:e1:e7:c2:3c:d6: c7:f2:58:5a:2f:92:30:ed:a8:3b:7a:dc:36:63:18:91:dc:ee: 0a:40:e6:c9:1c:ed:d1:97:25:89:07:b3:22:5e:1b:29:a2:b3: a3:e2:bf:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOgCIO4hrFbtLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MDJhZjQ3ZDktZmEwMS00NWNkLThmODAtNmUzYTc1NzE0ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3g3rYTBTFkcepPj4OBEbnWkSjVblirDYHX4 9BXf82794a5kfjQmkh7Dg3EoE9G6dKG0AmDuanPQFfYrbmidc2Zm3aOuxXSok8Q0 bpygMZIv7UzNPj2IJeygtq18IQ8B8ERjmUokd2RylZILVxhAhsr2VTBjWencvip7 mLMypXYXKaTkCbHJYkg8MrN2z1PwXp8TA5h+0D7aW+FXk0JDywqvziPOTTFgACNH gIpkOUyc9AHANRRR9ANBGn3SDKCZMVHL2TBYpFhZuhQOC7Z2p9q6AT7QyOS2rPvc yjonjBcTa1q5rvpDOOjvvnKtfU2AhxkxKa5n9h/b4UMf2MONtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwmCmJAcZmi9rzMBNN+eL5mhgkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjUwNmMzZTAtYTU2YS0z MTQyLThkYTktM2M4YWJlOWQwODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSE8H47AcSke8J6WyASERj2LvQCrF4Jeqyo5zY59EgfHIdqi+ok7CTv /52QEFsKfJrLGZmW5F62mb/ZQrPrcG24VMMSGZta1jiLzbFSwnox06ZnLkqWKLJx dS5t0kF4aSL99a0+mcbRJeHnfS7SgjhBOupbgRxiUL3EWEz3RvqS1kdXS5Z3K9jq h8Oz66OXdW1Yx7Lkdtg/CUnpMEzLKevqtjkehNZ4a7JXHjlU5yLDmevne56Ke+Vq HVNmHj9yPKUhxvk0ceJb4elPKCTJVsjOIibh58I81sfyWFovkjDtqDt63DZjGJHc 7gpA5skc7dGXJYkHsyJeGymis6PivwA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:23 2025 by rpki-client