$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa File: 34e28fba-9008-3b9d-878b-6605842ac8c0.roa (raw, json) Hash identifier: MQTqieq4dJm/GQFhri/q/z6OgIzCtSQP8X4RvblJ4e0= Subject key identifier: 6D:70:C9:EF:E6:E2:91:10:F4:9C:0A:22:02:28:1A:BD:B3:F8:7B:76 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BBA1059DBCADBAF3D497FB500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 216.108.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:59:db:ca:db:af:3d:49:7f:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=75c43369-b43f-4534-a025-b0cf65d7dc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:87:d2:a5:27:2f:bb:87:fc:4d:ed:51:59: 80:87:22:9d:7f:aa:9b:f6:1d:0f:4c:e2:79:e7:e5: ef:07:35:45:e9:ca:05:5d:c6:7a:a2:fe:31:ff:15: 20:63:1a:89:9f:d5:ff:a3:25:1a:c3:38:81:3e:63: fa:ae:08:48:39:d3:74:31:99:be:b6:3d:53:ea:00: 3c:6c:ae:e8:6a:cd:1b:c9:e0:a6:32:9e:86:63:6e: b9:68:f4:51:db:ef:11:50:02:45:bf:54:ed:e7:3b: ff:11:94:d9:e1:8d:a3:7d:82:95:3f:0e:38:bd:5f: aa:7c:33:eb:48:ee:a2:7a:3c:94:d1:a7:32:50:2c: df:35:61:e2:86:6e:53:a0:28:32:49:6f:a2:a0:7d: 08:48:70:4c:8d:a9:f5:d3:0c:37:25:6a:72:1a:06: b1:ac:6d:d1:96:b8:42:7b:5c:56:61:7c:1d:13:c2: 92:1e:38:b3:9f:86:97:26:15:6c:02:57:75:f9:8b: cf:a7:c2:8d:cd:32:c2:16:4a:dd:b6:4b:fb:a5:ee: c4:2f:c6:6d:ee:6d:e3:06:70:8e:57:3a:11:4a:c3: 56:48:33:4f:85:d2:7a:56:e7:cb:c4:79:6b:d3:07: de:19:ef:33:d1:7d:e5:57:2e:8a:24:ec:88:0b:99: a5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:70:C9:EF:E6:E2:91:10:F4:9C:0A:22:02:28:1A:BD:B3:F8:7B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a5:62:50:03:62:5c:06:68:a2:3d:41:b8:a8:d7:e9:2e:a7: a0:58:89:55:9b:bc:15:7a:11:87:83:81:90:4e:56:64:45:13: db:31:e9:8b:00:8f:53:6e:7b:6d:97:0c:61:62:24:ea:b2:20: c5:7c:5f:fd:15:60:3d:b4:f9:c7:94:68:45:3c:b9:c2:ad:42: ad:14:65:ec:70:46:e7:f6:b6:d3:0f:0d:d8:83:99:9a:cc:dc: 16:4b:0e:cf:39:66:5d:09:67:f6:76:77:b0:5c:1d:50:f1:43: 39:57:50:de:44:ec:21:2d:a4:5d:b5:ce:06:11:67:ff:06:13: 41:ff:ef:c2:de:f8:79:ce:ec:8b:40:6c:de:0a:c8:6f:01:f7: b0:ad:36:d8:e2:a1:59:6b:43:a5:ab:8b:4f:b2:91:46:a3:9d: 43:1b:88:be:d3:95:e6:31:4e:f7:47:52:83:2b:a4:11:50:00: 75:b9:62:be:64:40:41:96:fd:4e:19:fc:99:33:db:b5:26:f9: 2f:96:2d:0d:df:f2:4c:fd:89:41:3e:71:60:a6:1e:60:10:cc: 09:eb:ff:40:83:e2:6d:72:a8:d2:9b:e6:44:9b:31:a2:e9:52: a2:e8:1d:7d:ad:41:ac:bc:33:f7:a8:29:0d:de:60:1e:61:dd: a0:56:69:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EFnbytuvPUl/tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NzVjNDMzNjktYjQzZi00NTM0LWEwMjUtYjBjZjY1ZDdkYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAociH0qUnL7uH/E3tUVmAhyKdf6qb9h0PTOJ5 5+XvBzVF6coFXcZ6ov4x/xUgYxqJn9X/oyUawziBPmP6rghIOdN0MZm+tj1T6gA8 bK7oas0byeCmMp6GY265aPRR2+8RUAJFv1Tt5zv/EZTZ4Y2jfYKVPw44vV+qfDPr SO6iejyU0acyUCzfNWHihm5ToCgySW+ioH0ISHBMjan10ww3JWpyGgaxrG3RlrhC e1xWYXwdE8KSHjizn4aXJhVsAld1+YvPp8KNzTLCFkrdtkv7pe7EL8Zt7m3jBnCO VzoRSsNWSDNPhdJ6VufLxHlr0wfeGe8z0X3lVy6KJOyIC5mlTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1wye/m4pEQ9JwKIgIoGr2z+Ht2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRlMjhmYmEtOTAwOC0z YjlkLTg3OGItNjYwNTg0MmFjOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6lYlADYlwGaKI9Qbio1+kup6BYiVWbvBV6EYeDgZBOVmRFE9sx6YsA j1Nue22XDGFiJOqyIMV8X/0VYD20+ceUaEU8ucKtQq0UZexwRuf2ttMPDdiDmZrM 3BZLDs85Zl0JZ/Z2d7BcHVDxQzlXUN5E7CEtpF21zgYRZ/8GE0H/78Le+HnO7ItA bN4KyG8B97CtNtjioVlrQ6Wri0+ykUajnUMbiL7TleYxTvdHUoMrpBFQAHW5Yr5k QEGW/U4Z/Jkz27Um+S+WLQ3f8kz9iUE+cWCmHmAQzAnr/0CD4m1yqNKb5kSbMaLp UqLoHX2tQay8M/eoKQ3eYB5h3aBWafk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:18 2025 by rpki-client