$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa File: 3df9ccdc-67c8-3624-92fe-71a135423673.roa (raw, json) Hash identifier: 4ZSi7TVjV1YRBCYMkQD+Sisq7zG75LzPhn71unqifzY= Subject key identifier: FF:F6:D2:D4:2C:F1:95:83:1E:E1:3A:1B:CB:C2:51:7E:FC:EB:FA:AE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B52C25AC17145C0C3DCA6CD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa Signing time: Fri 26 Sep 2025 13:55:35 +0000 ROA not before: Fri 26 Sep 2025 13:55:35 +0000 ROA not after: Thu 25 Dec 2025 14:55:35 +0000 asID: 30036 IP address blocks: 173.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:c2:5a:c1:71:45:c0:c3:dc:a6:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 13:55:35 2025 GMT Not After : Dec 25 14:55:35 2025 GMT Subject: CN=200cd05c-4bed-4518-94ce-e482890bd869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:aa:cb:ed:80:27:05:9b:a8:81:39:0d:89:87: ad:ad:7d:fa:1d:f6:41:99:bf:d2:3a:29:39:36:dc: e1:a0:a2:67:0e:b2:77:45:68:63:5e:65:53:46:e0: 52:16:a9:65:96:f1:d2:1c:c2:ed:3a:eb:e8:83:8a: 55:4f:0f:9a:34:79:cd:da:07:36:d7:e3:73:90:4b: f7:26:60:a5:ec:18:a3:53:51:40:05:9a:a3:f3:62: 86:ec:97:83:fa:ed:d8:42:53:0e:45:ae:fc:4c:2d: 31:a7:e7:42:16:48:29:f0:1c:52:91:6a:1e:32:85: 91:3b:9f:56:85:97:e0:f8:d2:f5:e8:8f:78:5e:08: 45:75:48:8e:6f:0a:79:06:0d:2f:6d:f5:86:a1:5c: c6:d1:44:a8:66:20:30:00:f3:e0:4c:e6:ea:34:60: ba:dc:da:2d:66:c3:53:2b:80:9e:2e:28:69:72:15: b2:7f:79:c3:bb:9b:15:e0:95:e0:9d:65:be:19:17: 1c:3d:08:c2:4a:a0:a5:cc:98:d2:75:46:8f:31:ff: d3:94:df:07:75:fa:73:5f:41:28:6b:64:b2:60:3b: 7c:d2:71:74:a7:ed:dc:e1:88:62:06:7c:06:e4:d8: 81:5c:53:7c:b5:26:c4:a9:cb:d5:4b:63:58:22:b7: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F6:D2:D4:2C:F1:95:83:1E:E1:3A:1B:CB:C2:51:7E:FC:EB:FA:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ff:ac:2b:37:00:bc:24:9e:72:54:51:e6:65:63:f3:67:b7: 5a:f4:4e:db:b5:47:75:cd:62:c7:be:c1:78:d8:e3:d9:9f:66: a9:bc:56:09:47:4b:68:b0:12:5b:47:a6:7f:74:35:4d:94:11: f9:6d:0b:dd:aa:a4:ab:26:ec:22:9b:bd:72:d2:43:eb:34:4e: 62:e3:e2:e4:cd:72:00:64:ac:ab:8f:db:99:6a:95:71:81:87: 28:0a:a8:4c:4a:ba:05:fd:b3:b0:3f:61:b1:72:ad:53:90:32: 01:a3:f3:5c:d6:d6:ff:b6:ca:a5:a6:11:9b:c0:27:70:fc:91: 03:73:5c:cf:45:9c:bd:36:e9:b4:b5:b2:8c:08:df:bf:88:be: b0:fa:fc:55:e1:39:b6:67:8b:22:c4:8d:a1:db:3d:6a:2b:e4: 21:61:ca:e1:66:d1:8e:cd:b5:4e:58:9c:d3:30:7d:ee:27:f5: 40:9c:6a:66:16:de:5f:6c:40:a9:57:ab:f3:3d:d1:96:f3:80: 2b:94:0c:43:6b:36:3f:05:05:16:53:8d:21:15:6e:d1:b8:db: 2e:22:f8:1b:ce:1e:05:4f:2d:f1:7e:79:3d:e0:49:79:2c:3b: d7:e7:91:53:ac:d4:dd:55:3c:c4:38:3c:1f:5b:7b:9b:23:25: 7f:ef:18:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSwlrBcUXAw9ymzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNjEzNTUzNVoXDTI1MTIyNTE0NTUzNVowLzEtMCsGA1UEAxMk MjAwY2QwNWMtNGJlZC00NTE4LTk0Y2UtZTQ4Mjg5MGJkODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqrL7YAnBZuogTkNiYetrX36HfZBmb/SOik5 NtzhoKJnDrJ3RWhjXmVTRuBSFqlllvHSHMLtOuvog4pVTw+aNHnN2gc21+NzkEv3 JmCl7BijU1FABZqj82KG7JeD+u3YQlMORa78TC0xp+dCFkgp8BxSkWoeMoWRO59W hZfg+NL16I94XghFdUiObwp5Bg0vbfWGoVzG0USoZiAwAPPgTObqNGC63NotZsNT K4CeLihpchWyf3nDu5sV4JXgnWW+GRccPQjCSqClzJjSdUaPMf/TlN8HdfpzX0Eo a2SyYDt80nF0p+3c4YhiBnwG5NiBXFN8tSbEqcvVS2NYIrdykQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/20tQs8ZWDHuE6G8vCUX786/quMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RmOWNjZGMtNjdjOC0z NjI0LTkyZmUtNzFhMTM1NDIzNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX/rCs3ALwknnJUUeZlY/Nnt1r0Ttu1R3XNYse+wXjY49mfZqm8VglH S2iwEltHpn90NU2UEfltC92qpKsm7CKbvXLSQ+s0TmLj4uTNcgBkrKuP25lqlXGB hygKqExKugX9s7A/YbFyrVOQMgGj81zW1v+2yqWmEZvAJ3D8kQNzXM9FnL026bS1 sowI37+IvrD6/FXhObZniyLEjaHbPWor5CFhyuFm0Y7NtU5YnNMwfe4n9UCcamYW 3l9sQKlXq/M90ZbzgCuUDENrNj8FBRZTjSEVbtG42y4i+BvOHgVPLfF+eT3gSXks O9fnkVOs1N1VPMQ4PB9be5sjJX/vGEw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:27:49 2025 by rpki-client