$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b95d3e5-df63-3a59-a897-c4cfdb695a8d.roa File: 2b95d3e5-df63-3a59-a897-c4cfdb695a8d.roa (raw, json) Hash identifier: 6YZS5l85ahn59qNVr6jC0FeKvCq+VSjbD6aFEQOxPts= Subject key identifier: 03:9E:25:D7:EC:8F:93:F1:3C:EE:5A:52:70:1C:E1:BB:EC:99:58:E5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201F52C4D539A3DF4C4F840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b95d3e5-df63-3a59-a897-c4cfdb695a8d.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.25.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f5:2c:4d:53:9a:3d:f4:c4:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=3bffde8e-61ef-4f42-9a72-e1e26cd72db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:27:45:c4:7d:ae:83:14:0f:27:2a:28:bc: fd:38:7a:19:c1:83:25:3f:2a:1e:b4:f9:b3:36:67: df:4d:ca:b5:44:44:be:fb:43:ca:04:8f:80:1e:a5: fe:b0:fe:1a:aa:86:ac:ef:cd:b6:ea:50:71:b3:38: 62:59:30:c5:ef:b6:67:b9:65:d6:e1:71:53:a3:9c: 22:04:ae:c6:01:a7:25:8a:f4:67:10:a4:61:06:86: 29:53:e5:23:ca:89:9f:35:9e:72:22:b4:cd:cc:a2: 89:7f:a9:0f:45:5c:3e:0f:a6:e8:7b:ed:0d:62:ba: a5:cb:bf:b6:02:ca:a2:98:34:08:9c:78:9e:5e:e4: 00:ce:a4:0a:5e:28:34:56:3c:af:2f:1d:8c:44:3d: c5:dd:fd:04:41:83:04:47:55:7c:78:80:19:eb:05: 6a:51:99:0d:39:f4:70:2f:4d:a4:4c:8d:ed:c3:08: 9b:e2:7b:31:e9:2f:02:15:9c:70:49:f2:3f:98:2b: 33:2a:da:a0:d4:a7:ac:3c:bb:d7:03:51:e9:f9:dc: 9b:ac:aa:38:69:28:1d:69:69:22:b5:0a:23:39:eb: 31:3e:28:89:67:8e:6f:92:e4:8f:48:e2:4d:64:e7: e8:a0:19:91:2e:37:66:5a:7f:63:92:62:44:19:a5: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:25:D7:EC:8F:93:F1:3C:EE:5A:52:70:1C:E1:BB:EC:99:58:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b95d3e5-df63-3a59-a897-c4cfdb695a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:16:88:2e:0a:f8:f8:f7:0d:bb:00:97:e2:9a:9c:2e:38:a2: ad:2f:d0:d6:29:41:58:88:6d:9f:fc:06:dd:67:d0:38:d3:94: 3b:52:b7:c5:0a:1b:b4:a4:bc:f0:7b:cb:b1:3c:54:93:f2:e7: 18:e5:fc:dc:bf:b0:3d:92:9e:04:b4:11:34:cb:d7:a5:3a:4f: 21:3c:da:9f:35:07:2a:0c:92:38:fe:27:05:6e:e9:0e:a7:42: 85:69:4d:56:e7:ea:30:65:cb:00:df:9f:50:42:f8:63:f8:db: e5:59:a5:8e:45:a9:fd:84:33:53:8f:23:ae:f0:41:2f:c3:76: d4:d4:0a:60:6f:51:22:20:4a:44:a0:74:e3:29:ba:df:40:1e: 88:95:22:72:65:22:c2:b6:a8:fc:c9:04:65:62:bc:ae:5d:b4: 00:4d:b5:a6:da:4a:94:72:a1:5a:79:81:fa:de:e0:d5:18:4e: c8:59:0e:37:b3:6b:24:a8:5d:0f:53:07:df:d5:da:c9:c4:41: 28:77:8b:d3:f7:6d:84:eb:f5:88:c6:22:13:9f:22:81:11:90: 43:51:74:a0:6c:cf:97:1a:9c:48:f8:a6:81:31:91:60:e7:6a: 58:3b:60:9d:de:96:e3:01:e1:bd:67:2b:9c:34:f5:81:1a:c7: d6:af:91:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfUsTVOaPfTE+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk M2JmZmRlOGUtNjFlZi00ZjQyLTlhNzItZTFlMjZjZDcyZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfInRcR9roMUDycqKLz9OHoZwYMlPyoetPmz NmffTcq1RES++0PKBI+AHqX+sP4aqoas78226lBxszhiWTDF77ZnuWXW4XFTo5wi BK7GAaclivRnEKRhBoYpU+UjyomfNZ5yIrTNzKKJf6kPRVw+D6boe+0NYrqly7+2 AsqimDQInHieXuQAzqQKXig0VjyvLx2MRD3F3f0EQYMER1V8eIAZ6wVqUZkNOfRw L02kTI3twwib4nsx6S8CFZxwSfI/mCszKtqg1KesPLvXA1Hp+dybrKo4aSgdaWki tQojOesxPiiJZ45vkuSPSOJNZOfooBmRLjdmWn9jkmJEGaWnKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOeJdfsj5PxPO5aUnAc4bvsmVjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmI5NWQzZTUtZGY2My0z YTU5LWE4OTctYzRjZmRiNjk1YThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAWiC4K+Pj3DbsAl+KanC44oq0v0NYpQViIbZ/8Bt1n0DjTlDtSt8UK G7SkvPB7y7E8VJPy5xjl/Ny/sD2SngS0ETTL16U6TyE82p81ByoMkjj+JwVu6Q6n QoVpTVbn6jBlywDfn1BC+GP42+VZpY5Fqf2EM1OPI67wQS/DdtTUCmBvUSIgSkSg dOMput9AHoiVInJlIsK2qPzJBGVivK5dtABNtabaSpRyoVp5gfre4NUYTshZDjez aySoXQ9TB9/V2snEQSh3i9P3bYTr9YjGIhOfIoERkENRdKBsz5canEj4poExkWDn alg7YJ3eluMB4b1nK5w09YEax9avkQs= -----END CERTIFICATE-----Generated at Wed Nov 5 02:32:07 2025 by rpki-client