$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f9a10e-d224-34ca-8993-b864151738b9.roa File: 47f9a10e-d224-34ca-8993-b864151738b9.roa (raw, json) Hash identifier: ig+OVGhdopxnjEwNTgedqjOi8GmeFDUDOCy9TBNcCfs= Subject key identifier: E8:89:FA:78:6A:14:0D:D0:82:E0:C1:C4:9C:17:33:C7:7C:90:C7:12 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6A6204F91627B24F437E9780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f9a10e-d224-34ca-8993-b864151738b9.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.22.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:04:f9:16:27:b2:4f:43:7e:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=71be8f45-ebc0-4d18-b843-873bc4f1b45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:67:45:56:39:36:1f:68:41:09:c0:55:e5:5c: 6c:aa:6c:82:09:ff:c7:80:ca:3c:22:c6:a0:6f:7f: 1e:cf:6d:c7:8e:f3:b4:6a:04:23:e3:0a:70:ca:4c: e9:f4:b2:6e:1f:a7:80:53:24:06:e0:69:a0:a5:bf: 21:9a:2a:2d:99:35:76:a1:d9:ba:3d:57:3a:50:2e: 68:25:56:dc:fd:a3:2e:8a:c2:4b:ef:96:87:61:97: 37:d5:50:e1:c3:5d:1c:c7:89:ba:49:f1:de:21:54: db:de:55:91:a6:8b:0e:55:61:0c:0e:01:08:83:b7: 3f:8b:6b:7c:84:cd:ca:95:64:b4:bd:9c:ac:2b:ae: 4f:ef:56:79:ed:30:44:c6:2a:bd:ca:a1:1d:9a:da: 78:57:1a:50:11:42:57:9d:97:c6:40:7e:d2:e3:52: 44:db:b1:f0:ad:df:c1:e7:7d:06:58:e2:a0:d5:43: 6b:be:31:f8:63:28:bf:13:c7:ea:73:27:da:b4:75: c5:4e:a8:83:97:e5:24:90:e5:dc:cb:2d:10:32:49: 2a:8d:2b:dc:4a:9b:df:f1:68:a4:b9:8c:f9:68:63: fc:d4:89:86:f4:28:83:2d:bb:0a:d7:ff:0b:8a:d7: 96:9e:18:19:1a:c3:79:64:e5:10:56:fb:be:95:18: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:89:FA:78:6A:14:0D:D0:82:E0:C1:C4:9C:17:33:C7:7C:90:C7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f9a10e-d224-34ca-8993-b864151738b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:15:fa:f9:dc:cd:f2:31:f3:6c:df:fa:f7:ae:f2:8a:a9:c0: 81:03:60:22:82:b7:39:cf:e4:57:e7:09:05:f6:be:ea:f3:c4: f3:ac:a4:78:64:e6:6a:40:0e:91:e2:fc:ab:0e:5a:48:91:05: b9:6b:94:9d:d1:8f:4b:ae:6d:46:36:96:00:c1:2d:ed:8c:44: bc:3f:74:82:ca:93:32:e4:f3:b6:34:04:3e:71:21:d5:19:7e: 3f:d6:6c:1d:34:7f:f7:fd:ee:76:fc:57:fd:1d:f0:ee:b8:0d: d8:ca:ec:a7:ef:95:e8:0e:90:f8:cf:83:5b:cb:27:f4:4a:8f: e9:3b:47:bd:b6:d7:91:b6:13:51:9d:47:32:da:e2:b0:c3:4a: 97:a4:94:92:8c:48:9f:80:4a:f7:cf:26:42:97:67:5f:ea:bf: 7e:2a:89:b1:15:86:49:9f:67:ed:99:b9:87:04:08:a9:9f:de: 8e:e4:62:5f:60:cd:60:6d:d4:6e:7f:67:02:a6:26:43:19:96: dc:c5:a6:39:e8:bf:98:7a:d7:97:dc:02:3c:e3:b0:91:ff:4f: 8d:5e:c9:af:87:83:d3:dd:de:e1:cb:60:8c:5d:06:fe:c9:f6: 28:d0:46:a4:b8:6b:a2:54:1a:f7:66:98:52:04:1a:59:2d:78: 28:1e:ca:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYgT5FieyT0N+l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NzFiZThmNDUtZWJjMC00ZDE4LWI4NDMtODczYmM0ZjFiNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWdFVjk2H2hBCcBV5VxsqmyCCf/HgMo8Isag b38ez23HjvO0agQj4wpwykzp9LJuH6eAUyQG4Gmgpb8hmiotmTV2odm6PVc6UC5o JVbc/aMuisJL75aHYZc31VDhw10cx4m6SfHeIVTb3lWRposOVWEMDgEIg7c/i2t8 hM3KlWS0vZysK65P71Z57TBExiq9yqEdmtp4VxpQEUJXnZfGQH7S41JE27Hwrd/B 530GWOKg1UNrvjH4Yyi/E8fqcyfatHXFTqiDl+UkkOXcyy0QMkkqjSvcSpvf8Wik uYz5aGP81ImG9CiDLbsK1/8LiteWnhgZGsN5ZOUQVvu+lRi4QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiJ+nhqFA3QguDBxJwXM8d8kMcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDdmOWExMGUtZDIyNC0z NGNhLTg5OTMtYjg2NDE1MTczOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcV+vnczfIx82zf+veu8oqpwIEDYCKCtznP5FfnCQX2vurzxPOspHhk 5mpADpHi/KsOWkiRBblrlJ3Rj0uubUY2lgDBLe2MRLw/dILKkzLk87Y0BD5xIdUZ fj/WbB00f/f97nb8V/0d8O64DdjK7KfvlegOkPjPg1vLJ/RKj+k7R72215G2E1Gd RzLa4rDDSpeklJKMSJ+ASvfPJkKXZ1/qv34qibEVhkmfZ+2ZuYcECKmf3o7kYl9g zWBt1G5/ZwKmJkMZltzFpjnov5h615fcAjzjsJH/T41eya+Hg9Pd3uHLYIxdBv7J 9ijQRqS4a6JUGvdmmFIEGlkteCgeyoI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:50:20 2025 by rpki-client