$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa File: 593485a7-c008-3e53-82f6-d39ddaa6358a.roa (raw, json) Hash identifier: w0pbh3GM64RjsUpb077kR+wHl9SFpWKCIfGzI3qFh2E= Subject key identifier: 11:5C:7F:7C:32:59:46:5A:42:0D:E7:A1:A7:7D:7F:F5:F4:C0:65:8B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67973AEF792A901B5B950E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.18.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:3a:ef:79:2a:90:1b:5b:95:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3429b0a3-5654-472a-94d5-0c70ec78c270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f6:c9:25:81:eb:55:f9:56:81:f9:32:7c:9f: 95:06:d9:66:bb:d5:a6:bd:bd:d0:a6:90:08:a4:67: 6f:da:e1:5e:5a:cf:7d:12:7b:32:eb:e5:d5:16:37: 33:01:71:ea:00:8b:fb:03:ee:72:1c:c3:36:aa:64: 39:8b:e5:99:0d:3d:44:15:4e:d7:8a:66:59:59:75: d5:22:ac:30:cf:f1:ef:69:c7:64:18:20:33:00:6a: 1e:c8:4c:d0:99:87:91:c6:ac:1e:7d:bf:0a:88:f0: 21:12:cd:50:bc:2d:2a:fc:56:cf:b0:ea:36:4b:e0: e8:52:2b:ca:38:6c:4a:b1:77:75:b4:5c:74:97:5b: 71:1a:7b:c8:bb:c6:48:0f:ae:57:ff:9b:2f:4a:f6: 1d:61:13:bb:00:f5:1c:7d:b4:23:b3:3f:62:d8:c5: c1:8a:3e:ff:13:11:9e:c3:7c:bf:92:0b:ab:dc:3d: 6a:e2:55:d9:35:0d:ad:9f:9a:7d:d0:c0:36:70:4a: 0e:c8:fa:54:9f:2e:fa:c4:8a:c7:6b:cf:2c:7e:29: 83:e5:ee:2e:98:90:c9:a1:e9:4b:ed:70:89:2c:15: ab:ac:85:ea:b8:49:1e:53:58:c6:d7:fb:37:1c:ef: db:8d:10:7c:fd:08:80:53:b6:fb:8a:4a:48:47:8b: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5C:7F:7C:32:59:46:5A:42:0D:E7:A1:A7:7D:7F:F5:F4:C0:65:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c6:63:4f:cc:d2:8a:78:c2:08:6e:75:d6:24:07:c3:2f:5b: 4b:10:be:90:e9:5c:04:57:e2:e4:b2:33:1e:07:b7:bf:59:a6: 54:80:6b:68:f1:75:e6:71:fb:de:02:39:9f:ab:30:5b:32:6e: 3c:a8:39:71:69:1d:25:d4:7b:fb:ad:bd:3b:fc:c9:90:a8:e9: 2b:79:5b:3b:f6:87:44:5b:6b:38:1a:ac:91:a1:a6:37:c4:bb: 34:d3:4c:66:fb:e1:f3:b8:2b:32:a4:ec:8f:59:92:c5:bf:6b: fb:cb:74:9f:1c:b6:3c:cc:39:4c:12:7f:39:91:3f:27:a4:52: d2:b1:b4:c4:5c:28:bc:5f:c5:8d:58:de:9c:ea:df:05:40:7e: 05:ad:ba:3e:f2:f3:11:14:a1:40:57:46:8a:a5:40:df:0f:0d: 8d:9c:0a:6d:14:e5:91:d7:5d:3f:38:7c:27:87:da:0f:b8:c1: ab:57:9c:e1:00:b1:12:30:a0:0b:6e:45:4d:fc:14:ca:63:20: 11:fb:06:68:7f:fe:aa:45:0c:d0:b3:26:ed:a7:7c:79:2c:e9: 95:21:96:e7:0b:ff:0d:90:51:b6:06:a4:a7:2b:8a:56:42:c7: 79:20:69:9a:2c:41:3c:b6:67:83:6a:5b:e1:9e:4f:4d:2d:c2: de:c3:83:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzrveSqQG1uVDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzQyOWIwYTMtNTY1NC00NzJhLTk0ZDUtMGM3MGVjNzhjMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/bJJYHrVflWgfkyfJ+VBtlmu9Wmvb3QppAI pGdv2uFeWs99Ensy6+XVFjczAXHqAIv7A+5yHMM2qmQ5i+WZDT1EFU7XimZZWXXV Iqwwz/HvacdkGCAzAGoeyEzQmYeRxqwefb8KiPAhEs1QvC0q/FbPsOo2S+DoUivK OGxKsXd1tFx0l1txGnvIu8ZID65X/5svSvYdYRO7APUcfbQjsz9i2MXBij7/ExGe w3y/kgur3D1q4lXZNQ2tn5p90MA2cEoOyPpUny76xIrHa88sfimD5e4umJDJoelL 7XCJLBWrrIXquEkeU1jG1/s3HO/bjRB8/QiAU7b7ikpIR4vuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFcf3wyWUZaQg3noad9f/X0wGWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTkzNDg1YTctYzAwOC0z ZTUzLTgyZjYtZDM5ZGRhYTYzNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLGY0/M0op4wghuddYkB8MvW0sQvpDpXARX4uSyMx4Ht79ZplSAa2jx deZx+94COZ+rMFsybjyoOXFpHSXUe/utvTv8yZCo6St5Wzv2h0RbazgarJGhpjfE uzTTTGb74fO4KzKk7I9ZksW/a/vLdJ8ctjzMOUwSfzmRPyekUtKxtMRcKLxfxY1Y 3pzq3wVAfgWtuj7y8xEUoUBXRoqlQN8PDY2cCm0U5ZHXXT84fCeH2g+4watXnOEA sRIwoAtuRU38FMpjIBH7Bmh//qpFDNCzJu2nfHks6ZUhlucL/w2QUbYGpKcrilZC x3kgaZosQTy2Z4NqW+GeT00twt7Dg7E= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:44 2025 by rpki-client