$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa File: 3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa (raw, json) Hash identifier: OkqL7C9ltSsEPQk8TTKkLqoF8wFfdyHPqswzxfk0qgc= Subject key identifier: 8B:02:33:37:84:08:31:EE:67:1A:31:F0:D2:96:6F:17:F7:AB:20:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6202232A35C52D118923A000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.28.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:23:2a:35:c5:2d:11:89:23:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=00e7ea2a-29fb-4bbc-9560-1218440fbd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:08:10:1a:9e:26:69:a9:c9:44:08:81:48: 70:a2:6e:d9:fb:17:b3:ae:dc:83:9f:14:63:4b:c6: 62:3d:34:3e:1d:98:a9:c2:e3:54:2b:ac:f9:94:e3: df:95:e3:14:67:31:78:33:99:88:f1:e5:b3:24:63: 6b:56:69:b1:b2:99:b6:a3:ed:d4:8e:dc:d3:c5:47: b3:e3:e8:cb:bd:5e:b5:8e:68:2b:ad:3d:95:52:8d: 16:4e:55:a0:cc:e7:90:48:8b:02:a8:e4:1c:1d:ea: aa:40:0d:03:9a:ad:2b:6a:b9:55:97:13:38:c0:77: d3:35:30:0f:94:62:9a:fc:b9:cf:d2:95:97:68:e8: 46:6b:cf:5f:69:1a:d7:4f:61:6d:b5:1a:ed:99:cb: 52:9e:90:d0:99:52:41:cd:51:a5:ca:4b:3e:60:9a: 3e:a7:cc:2f:cf:10:43:8d:0c:c9:10:64:6e:84:ef: 01:d9:f5:7e:cc:65:f6:d6:7b:cf:00:62:2d:8c:46: 55:17:b0:96:06:2c:d5:90:67:16:88:09:2e:27:f8: d3:65:6f:2f:d8:8d:62:a0:d9:2d:63:d0:04:41:74: e8:45:4d:42:4e:30:b5:aa:72:3b:a2:49:06:d7:50: c3:a4:ac:1e:bf:20:35:8e:f9:0e:a4:a6:02:ed:2b: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:02:33:37:84:08:31:EE:67:1A:31:F0:D2:96:6F:17:F7:AB:20:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2a:b4:91:a8:71:57:86:a5:59:43:69:d1:14:6a:11:8e:87: 9b:95:16:8d:33:f5:b4:0b:b6:5e:67:23:b9:90:c0:1c:6d:da: d7:98:54:60:34:26:0f:cd:f1:0f:04:2d:9e:86:18:cd:25:ee: 50:a1:d7:65:a4:d5:16:00:de:dd:51:a9:31:f6:a1:95:e4:d4: a1:ef:39:95:5a:14:a1:b7:2b:a1:1c:cc:11:50:03:bd:6f:49: 3d:97:44:1c:15:bc:73:cb:ac:c3:06:74:49:e3:63:e8:ef:4c: ac:4a:d7:e0:68:f2:ff:2c:d5:65:6c:e2:ee:2a:f0:35:8f:12: cc:97:7a:11:5a:cc:60:9d:7a:f9:a2:fa:a7:7e:7d:0a:79:9e: 04:45:65:2a:ea:00:a8:8e:8b:e0:73:f4:3d:21:e2:6b:55:80: c0:ec:cf:5d:e7:63:2d:92:f5:16:68:4f:3f:2e:50:04:6b:df: c7:ba:35:f7:53:96:af:52:5c:02:63:13:0d:9b:51:4b:ad:62: a5:74:e3:0c:1c:a6:50:b4:33:7b:83:da:c0:a2:dc:ed:0a:1b: 93:73:c6:1f:28:4b:a3:1e:99:08:38:de:12:60:b5:46:13:93: dd:b9:a3:90:82:0a:c9:de:3f:a4:7b:27:f1:29:b2:56:a5:43: aa:f6:6c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiMqNcUtEYkjoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDBlN2VhMmEtMjlmYi00YmJjLTk1NjAtMTIxODQ0MGZiZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aUIEBqeJmmpyUQIgUhwom7Z+xezrtyDnxRj S8ZiPTQ+HZipwuNUK6z5lOPfleMUZzF4M5mI8eWzJGNrVmmxspm2o+3UjtzTxUez 4+jLvV61jmgrrT2VUo0WTlWgzOeQSIsCqOQcHeqqQA0Dmq0rarlVlxM4wHfTNTAP lGKa/LnP0pWXaOhGa89faRrXT2FttRrtmctSnpDQmVJBzVGlyks+YJo+p8wvzxBD jQzJEGRuhO8B2fV+zGX21nvPAGItjEZVF7CWBizVkGcWiAkuJ/jTZW8v2I1ioNkt Y9AEQXToRU1CTjC1qnI7okkG11DDpKwevyA1jvkOpKYC7SurBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsCMzeECDHuZxox8NKWbxf3qyBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2VjMTEzYzgtODA0MS0z OGY0LTg0ZmItMTU3ZjJmZGY2NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMqtJGocVeGpVlDadEUahGOh5uVFo0z9bQLtl5nI7mQwBxt2teYVGA0 Jg/N8Q8ELZ6GGM0l7lCh12Wk1RYA3t1RqTH2oZXk1KHvOZVaFKG3K6EczBFQA71v ST2XRBwVvHPLrMMGdEnjY+jvTKxK1+Bo8v8s1WVs4u4q8DWPEsyXehFazGCdevmi +qd+fQp5ngRFZSrqAKiOi+Bz9D0h4mtVgMDsz13nYy2S9RZoTz8uUARr38e6NfdT lq9SXAJjEw2bUUutYqV04wwcplC0M3uD2sCi3O0KG5Nzxh8oS6MemQg43hJgtUYT k925o5CCCsneP6R7J/EpslalQ6r2bEM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:42:50 2025 by rpki-client