$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa File: 58c98bd2-dcad-3956-be00-36aa73050259.roa (raw, json) Hash identifier: zH90B6/2WhDcbfWjbnRtI1ULY9rDQAPbsjoChNlqfCE= Subject key identifier: 84:BA:0D:2C:AE:B1:28:E6:C6:F4:83:B5:6A:59:28:C6:D7:83:EF:5C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B99D7FD894DB8C578CB209D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.16.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fd:89:4d:b8:c5:78:cb:20:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=60014d63-9898-4406-9cda-67e217df76eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:42:9c:d4:19:49:2f:35:02:ce:42:b8:fa:a5: d3:6a:f9:50:7e:f3:6a:91:ba:73:9b:c9:06:73:4d: 46:2e:2b:47:5d:fb:89:5c:cb:a0:17:e5:13:29:9a: 36:07:38:0f:27:1e:2d:84:9b:1f:49:47:27:74:57: 97:d3:10:07:32:40:33:df:81:47:b5:ad:29:38:fb: 4a:bc:c7:ce:20:83:34:c5:ae:0b:de:3b:cf:32:92: ab:3a:5b:60:68:1a:5d:ef:f3:c2:5b:35:bc:3a:ff: 01:fe:7e:be:fb:4c:e4:d0:f2:9a:d8:8c:5e:f6:ee: 9f:db:df:ef:7b:bb:37:ce:20:04:53:54:d5:cc:82: 75:29:0d:00:1c:a1:a9:97:f5:cb:99:ea:64:31:64: 02:d3:c3:af:37:db:4e:35:ce:40:8a:85:af:d0:00: 32:43:ff:76:2a:6f:b6:57:54:d4:bd:b9:a2:59:0d: 21:95:2a:19:03:4f:6e:9e:37:91:f4:bc:c3:08:16: a2:35:c6:1a:66:52:f6:84:ad:89:ab:09:c2:cb:53: 22:b7:78:68:ea:5c:a0:ec:d2:2c:67:49:2d:9f:df: 6d:78:28:9d:34:0f:68:1f:05:dc:d4:6f:bf:5b:2f: 09:62:bd:ec:e4:93:4e:c7:c3:f0:8d:f9:47:b6:43: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:0D:2C:AE:B1:28:E6:C6:F4:83:B5:6A:59:28:C6:D7:83:EF:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f7:1e:12:83:bc:fc:4f:7e:61:62:12:25:14:d9:b1:b3:a8: c2:ef:91:7c:29:25:25:55:2a:9c:ab:d0:d8:07:3d:fd:2b:50: b8:0d:17:99:38:2c:23:0c:09:f2:52:28:ca:69:2f:6b:fa:2f: 28:ce:b5:f3:25:bf:00:03:81:fd:5a:52:79:cb:db:b6:b6:bc: 6f:20:45:8c:a9:96:85:35:0d:77:58:0e:0b:c1:d3:4e:f7:73: 6b:06:40:47:96:4c:62:ad:a9:fc:5e:17:35:37:43:86:fe:a6: f5:8a:a6:20:fe:e5:65:f4:33:2d:fd:b2:1c:83:2f:4c:a9:29: 53:8e:e6:dd:d4:77:78:30:2b:e8:d1:cd:64:3c:9e:19:3b:0a: 62:f7:b8:ec:03:2d:bc:c1:37:ac:35:84:9d:5c:e6:89:15:28: af:52:0a:bb:7d:5c:64:6d:35:59:13:73:bd:60:5f:5a:de:34: b8:b7:31:b5:b5:48:f5:1f:ef:cf:77:90:26:fd:17:3c:fe:48: 7c:59:78:9e:05:3e:a4:16:ec:d0:b0:b9:af:41:ae:41:e2:86: ac:70:25:e0:90:2a:21:e5:38:c4:cd:d8:4d:67:55:13:f9:34: 92:a9:37:55:d5:35:4e:49:b0:0f:9d:0d:79:b0:45:e1:e9:d4: 78:8d:24:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1/2JTbjFeMsgnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjAwMTRkNjMtOTg5OC00NDA2LTljZGEtNjdlMjE3ZGY3NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUKc1BlJLzUCzkK4+qXTavlQfvNqkbpzm8kG c01GLitHXfuJXMugF+UTKZo2BzgPJx4thJsfSUcndFeX0xAHMkAz34FHta0pOPtK vMfOIIM0xa4L3jvPMpKrOltgaBpd7/PCWzW8Ov8B/n6++0zk0PKa2Ixe9u6f29/v e7s3ziAEU1TVzIJ1KQ0AHKGpl/XLmepkMWQC08OvN9tONc5AioWv0AAyQ/92Km+2 V1TUvbmiWQ0hlSoZA09unjeR9LzDCBaiNcYaZlL2hK2JqwnCy1Mit3ho6lyg7NIs Z0ktn99teCidNA9oHwXc1G+/Wy8JYr3s5JNOx8PwjflHtkOgLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS6DSyusSjmxvSDtWpZKMbXg+9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThjOThiZDItZGNhZC0z OTU2LWJlMDAtMzZhYTczMDUwMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr3HhKDvPxPfmFiEiUU2bGzqMLvkXwpJSVVKpyr0NgHPf0rULgNF5k4 LCMMCfJSKMppL2v6LyjOtfMlvwADgf1aUnnL27a2vG8gRYyploU1DXdYDgvB0073 c2sGQEeWTGKtqfxeFzU3Q4b+pvWKpiD+5WX0My39shyDL0ypKVOO5t3Ud3gwK+jR zWQ8nhk7CmL3uOwDLbzBN6w1hJ1c5okVKK9SCrt9XGRtNVkTc71gX1reNLi3MbW1 SPUf7893kCb9Fzz+SHxZeJ4FPqQW7NCwua9BrkHihqxwJeCQKiHlOMTN2E1nVRP5 NJKpN1XVNU5JsA+dDXmwReHp1HiNJB0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:49:50 2025 by rpki-client