$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ebd5f5c-561d-3121-8d5d-7c637b48af70.roa File: 5ebd5f5c-561d-3121-8d5d-7c637b48af70.roa (raw, json) Hash identifier: jA5KjmEBjd+rds4fBPeX+KFooalJsuA9JqMFOu6M7Ak= Subject key identifier: 48:74:96:BA:FC:80:DE:EC:90:7D:7C:B6:FB:70:03:30:D7:0C:4A:7C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B08ABEF25317CE477BC9E4500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ebd5f5c-561d-3121-8d5d-7c637b48af70.roa Signing time: Sun 31 Aug 2025 01:00:33 +0000 ROA not before: Sun 31 Aug 2025 01:00:33 +0000 ROA not after: Sat 29 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.31.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:ab:ef:25:31:7c:e4:77:bc:9e:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 31 01:00:33 2025 GMT Not After : Nov 29 02:00:33 2025 GMT Subject: CN=c299f3a5-451e-4bb8-bdc8-ded48c8a80c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:44:e1:7f:6d:51:b6:4d:9d:9c:5e:ff:1f: ee:d8:15:82:e6:9f:c3:6a:35:35:41:44:29:22:d3: 23:dc:be:f5:e5:c2:ea:25:16:78:58:45:a8:42:9e: 24:48:c9:45:d1:84:4f:78:8c:a8:4e:28:66:94:cf: f4:63:96:1e:0e:63:87:c5:87:5e:10:45:a9:3d:72: c0:70:38:de:03:d1:90:7d:00:b3:88:8a:e9:c8:6e: 30:04:96:47:2e:95:b9:2c:16:88:b9:ef:56:ac:e6: af:1b:e8:73:c4:43:f2:df:3f:e1:70:19:69:2d:3c: a0:85:6c:4b:dd:f3:88:98:9c:f4:17:1f:47:bb:98: 39:01:3e:26:23:a3:74:0d:ab:25:bb:8e:a5:f6:f5: 67:d9:87:1c:d8:66:67:63:3c:d0:66:73:2b:18:ab: 0e:67:2e:46:1a:e9:a9:ae:86:b3:cd:1b:20:fd:44: ee:29:8b:ba:f1:b8:6d:3b:9c:de:ec:5e:a3:0d:33: e6:4e:d7:06:ce:0d:d4:64:d6:34:86:68:85:7e:c6: 82:da:0f:e0:ba:7a:47:ce:70:62:9b:ed:05:ae:12: 91:3e:23:01:57:e3:51:6c:d1:f9:bd:ce:63:be:18: 51:ba:35:45:bb:82:92:04:d4:0c:d1:0e:00:26:8f: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:74:96:BA:FC:80:DE:EC:90:7D:7C:B6:FB:70:03:30:D7:0C:4A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ebd5f5c-561d-3121-8d5d-7c637b48af70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:70:d8:a3:aa:47:19:58:d8:fb:f7:75:13:50:02:2f:05:00: 4d:e2:bc:f3:9b:a1:26:53:ef:c3:33:32:d0:97:12:27:2d:2b: 30:dd:30:b0:18:23:5a:53:bb:1e:94:f4:31:88:97:c7:98:f5: ce:33:28:6d:f1:ff:e6:2d:54:fc:f5:02:aa:97:95:50:cc:46: d2:8c:04:e9:3b:1d:2a:54:ae:b0:5e:e4:7f:3f:d0:3d:f4:09: 7d:75:be:b5:10:0d:c7:e5:da:e7:ec:ce:f3:98:e8:52:7f:38: b6:a5:e0:2f:05:ed:42:46:a6:c7:22:d3:f1:29:82:8d:0d:5a: 4b:15:8b:38:b9:ce:39:28:8d:55:31:09:56:f9:3b:2d:9c:7c: 83:43:8d:db:32:3e:2b:59:78:5b:ae:9e:08:04:20:47:19:bd: c7:69:f4:ab:bb:7f:54:f7:23:49:4a:25:a7:0c:23:12:b0:d0: fe:aa:7c:96:b6:8e:00:fb:56:83:a3:56:8b:aa:8c:4f:58:da: 1c:dc:6b:e7:5d:09:a3:96:c4:f7:e3:72:01:80:a4:7e:96:ed: 19:8b:49:26:9c:47:b6:09:6a:fe:96:6e:28:7c:91:1f:e3:ef: 52:14:ee:dd:9f:e2:89:e7:0b:ce:13:28:28:7a:b7:a0:b7:d3: 07:7d:8e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsIq+8lMXzkd7yeRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk YzI5OWYzYTUtNDUxZS00YmI4LWJkYzgtZGVkNDhjOGE4MGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7pE4X9tUbZNnZxe/x/u2BWC5p/DajU1QUQp ItMj3L715cLqJRZ4WEWoQp4kSMlF0YRPeIyoTihmlM/0Y5YeDmOHxYdeEEWpPXLA cDjeA9GQfQCziIrpyG4wBJZHLpW5LBaIue9WrOavG+hzxEPy3z/hcBlpLTyghWxL 3fOImJz0Fx9Hu5g5AT4mI6N0Daslu46l9vVn2Ycc2GZnYzzQZnMrGKsOZy5GGump roazzRsg/UTuKYu68bhtO5ze7F6jDTPmTtcGzg3UZNY0hmiFfsaC2g/gunpHznBi m+0FrhKRPiMBV+NRbNH5vc5jvhhRujVFu4KSBNQM0Q4AJo9ATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh0lrr8gN7skH18tvtwAzDXDEp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWViZDVmNWMtNTYxZC0z MTIxLThkNWQtN2M2MzdiNDhhZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVw2KOqRxlY2Pv3dRNQAi8FAE3ivPOboSZT78MzMtCXEictKzDdMLAY I1pTux6U9DGIl8eY9c4zKG3x/+YtVPz1AqqXlVDMRtKMBOk7HSpUrrBe5H8/0D30 CX11vrUQDcfl2ufszvOY6FJ/OLal4C8F7UJGpsci0/Epgo0NWksVizi5zjkojVUx CVb5Oy2cfINDjdsyPitZeFuunggEIEcZvcdp9Ku7f1T3I0lKJacMIxKw0P6qfJa2 jgD7VoOjVouqjE9Y2hzca+ddCaOWxPfjcgGApH6W7RmLSSacR7YJav6Wbih8kR/j 71IU7t2f4onnC84TKCh6t6C30wd9jhQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:20:38 2025 by rpki-client