$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa File: 337df950-6eaf-3e9d-936b-d50519c2dbd8.roa (raw, json) Hash identifier: rbDZWVpWXp92+hujkYO5q0/+TE+2+KBCY2YnOd0Xe6g= Subject key identifier: 25:30:DB:7C:B1:EF:37:D5:B3:2A:11:BB:02:6C:37:4B:9F:01:E5:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62021F86575A7D36C2821580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.16.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1f:86:57:5a:7d:36:c2:82:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e87527ac-cbf2-4ed3-a4f3-71db3271d670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:a8:bb:77:98:72:19:79:f3:e4:74:b6:3d: c5:49:35:e7:93:4b:74:3f:af:e2:ab:ad:65:6c:02: 04:ee:7c:d0:e4:e3:49:46:72:13:a9:a3:fd:82:c2: e2:80:a9:de:b3:1d:9d:c9:61:95:e1:5f:14:1d:24: 59:4c:5d:ee:9b:5f:a5:a4:8b:d4:29:0f:a5:d2:a7: d8:30:38:56:46:8d:43:b2:33:fe:cb:56:93:61:00: e9:fa:78:01:99:2a:01:d0:b4:50:e1:6c:5d:bf:b1: 88:2f:9f:ee:f9:99:0a:33:0b:d6:44:c1:b2:18:25: 51:f7:fb:7d:c8:46:41:4e:00:4d:1c:88:2a:a5:83: b1:7e:b7:b3:0e:df:99:5b:51:b2:a0:50:b6:bd:a8: 06:9a:5d:34:63:42:00:43:69:a9:79:e7:75:17:39: 0c:ed:03:53:52:9d:44:0b:51:13:03:cc:22:0a:7c: 74:6e:66:e2:f8:6e:24:72:08:54:5b:c7:79:ff:d2: 55:07:b4:3e:db:10:d1:79:c1:89:5e:58:a9:bf:ff: 8e:80:7a:6f:89:7c:60:5e:b6:f0:83:89:a0:6d:00: 38:cd:03:4a:55:4b:c1:44:c6:26:fd:5b:b0:eb:f7: 65:06:84:52:5f:fe:a4:32:c1:80:dc:b0:4e:ba:0a: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:30:DB:7C:B1:EF:37:D5:B3:2A:11:BB:02:6C:37:4B:9F:01:E5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:df:70:d1:34:3d:a2:a3:ee:88:b4:69:9e:70:2f:e2:eb:4c: 0b:cd:72:c8:58:a8:15:8d:7a:22:a5:6e:01:c5:c5:b5:15:43: a0:9c:51:ad:4a:39:75:b0:51:4a:7e:24:3e:af:28:4b:74:fc: cc:fd:2e:94:12:f5:4f:36:0c:57:fb:93:cb:91:20:d2:f3:54: 53:cd:11:dc:b4:45:8c:eb:af:46:00:e6:1b:5e:02:43:fd:d4: 3e:6c:e1:77:21:13:50:9a:88:64:c0:3d:37:94:6a:80:f1:cf: ab:cf:cf:74:08:70:03:57:23:7c:13:0f:b2:98:4f:f5:1a:fc: c9:13:b9:c4:da:e3:26:61:1d:78:b1:be:da:72:be:31:d8:95: 3e:d6:06:08:80:f1:11:ad:c0:a7:fa:7e:ed:b5:2b:b7:91:d0: d0:65:00:d3:ce:9f:e1:76:76:43:b5:c5:3a:b2:20:51:a6:33: 85:ef:f3:71:53:fd:0e:7d:a7:0b:b1:28:e9:c6:22:36:91:1d: 05:94:d5:e4:59:43:c1:90:59:6e:8a:92:42:72:ce:fd:87:84: 4d:ba:29:02:80:2e:1b:65:43:b9:1c:02:fa:b7:66:5c:24:80: 8c:3a:65:1f:e7:ff:07:98:93:ae:1c:d0:03:aa:d1:12:d1:7c: 2d:c2:33:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAh+GV1p9NsKCFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTg3NTI3YWMtY2JmMi00ZWQzLWE0ZjMtNzFkYjMyNzFkNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW6ou3eYchl58+R0tj3FSTXnk0t0P6/iq61l bAIE7nzQ5ONJRnITqaP9gsLigKnesx2dyWGV4V8UHSRZTF3um1+lpIvUKQ+l0qfY MDhWRo1DsjP+y1aTYQDp+ngBmSoB0LRQ4Wxdv7GIL5/u+ZkKMwvWRMGyGCVR9/t9 yEZBTgBNHIgqpYOxfrezDt+ZW1GyoFC2vagGml00Y0IAQ2mpeed1FzkM7QNTUp1E C1ETA8wiCnx0bmbi+G4kcghUW8d5/9JVB7Q+2xDRecGJXlipv/+OgHpviXxgXrbw g4mgbQA4zQNKVUvBRMYm/Vuw6/dlBoRSX/6kMsGA3LBOugqXzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUw23yx7zfVsyoRuwJsN0ufAeVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzM3ZGY5NTAtNmVhZi0z ZTlkLTkzNmItZDUwNTE5YzJkYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILfcNE0PaKj7oi0aZ5wL+LrTAvNcshYqBWNeiKlbgHFxbUVQ6CcUa1K OXWwUUp+JD6vKEt0/Mz9LpQS9U82DFf7k8uRINLzVFPNEdy0RYzrr0YA5hteAkP9 1D5s4XchE1CaiGTAPTeUaoDxz6vPz3QIcANXI3wTD7KYT/Ua/MkTucTa4yZhHXix vtpyvjHYlT7WBgiA8RGtwKf6fu21K7eR0NBlANPOn+F2dkO1xTqyIFGmM4Xv83FT /Q59pwuxKOnGIjaRHQWU1eRZQ8GQWW6KkkJyzv2HhE26KQKALhtlQ7kcAvq3Zlwk gIw6ZR/n/weYk64c0AOq0RLRfC3CM4k= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:36 2025 by rpki-client