$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71bb9197-cc04-38e4-9653-b83695e30ecd.roa File: 71bb9197-cc04-38e4-9653-b83695e30ecd.roa (raw, json) Hash identifier: KObAuvICHHFU0ZNr6EzCPZQegeGYMrbDiE/Qx4wmAyI= Subject key identifier: 01:F3:49:D2:FF:B6:CF:E9:99:25:A8:6A:99:18:C7:C5:CD:ED:22:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D74A181BC4F8A5748E3C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71bb9197-cc04-38e4-9653-b83695e30ecd.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.31.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:4a:18:1b:c4:f8:a5:74:8e:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=9fcd71f9-7fdb-4e85-a198-84b3fcf9c23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:74:a8:0d:47:4e:f8:6a:95:30:8e:31:53: 0f:7f:51:63:31:26:6b:2a:67:af:b5:3e:d5:38:7a: da:fd:23:7c:90:0f:9c:5d:ea:3f:54:5f:3c:e7:35: 7a:7f:ff:0c:a2:81:d1:28:8d:82:69:12:83:2f:11: 14:35:04:d4:71:15:e1:ab:8d:42:b3:a6:fb:8a:e9: de:2e:d6:19:3f:20:66:91:5e:65:3d:e7:85:8d:a4: 5f:9f:de:01:c6:50:6a:fa:fd:a8:e6:6a:a0:60:56: 66:f2:a6:d0:54:34:61:8d:67:a0:ac:50:96:c6:c2: fa:bf:48:39:81:53:c3:04:93:3d:fe:7a:b7:df:7d: b6:84:e7:86:9a:1e:23:3d:fc:9c:b1:88:a4:5f:14: f6:4d:6a:26:6d:16:84:69:f5:fa:39:7a:77:6a:3e: 79:2d:24:dd:43:31:57:57:b1:09:50:ae:5e:f4:ae: 3e:6d:b9:66:04:53:4e:f7:07:3f:f8:47:ce:92:e0: 8e:04:4a:47:dc:79:55:04:f1:29:15:88:d4:5f:c9: 25:90:39:51:e7:85:6e:5b:ec:b6:f1:31:76:5e:47: 28:78:26:de:da:57:3b:38:96:c2:b8:7c:b4:01:c1: 9f:9f:8a:f0:09:9f:79:1f:d4:84:40:79:66:85:be: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F3:49:D2:FF:B6:CF:E9:99:25:A8:6A:99:18:C7:C5:CD:ED:22:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71bb9197-cc04-38e4-9653-b83695e30ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3e:a6:1e:22:8c:e6:70:71:c4:93:b8:b6:e4:73:a3:cc:d4: a8:b4:fb:13:ee:26:d5:f4:b8:71:63:c8:55:7b:1f:dd:f5:24: 3f:35:cc:24:e6:7a:b7:3c:db:e5:d3:e0:3a:53:5b:7a:bc:94: 53:9a:20:73:63:28:c6:f3:4f:c3:90:0c:5d:1f:2c:43:ec:48: 5d:f5:ed:57:f4:32:97:52:5e:e0:d3:d5:65:b8:53:37:c9:88: 6e:c8:b4:2d:db:05:8d:d1:fc:2a:85:4b:cc:a6:db:42:80:ad: 76:ff:4d:a9:0d:07:b3:c6:93:45:83:4a:ff:14:a0:ce:80:8b: 00:09:e5:eb:cd:70:58:42:94:cb:34:62:ee:84:62:0e:56:75: 03:45:b7:31:01:8a:9d:a6:ec:51:f1:51:6f:60:28:4d:58:f9: 28:7f:4d:7a:77:38:93:5d:ce:95:18:d9:07:ee:95:ed:c6:05: 59:e5:70:3f:47:c2:be:88:47:b0:12:a8:a7:c5:06:60:bd:c6: 94:6c:2e:27:77:bf:57:3d:2b:a9:56:03:b5:01:f8:4a:49:1c: 4f:c4:59:a0:c7:db:d8:1e:52:92:19:17:94:9c:13:48:b6:6c: 1c:0c:39:d3:64:a1:d4:c3:f2:37:c5:63:cf:ab:60:d8:83:23: 84:37:98:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10oYG8T4pXSOPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk OWZjZDcxZjktN2ZkYi00ZTg1LWExOTgtODRiM2ZjZjljMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA10qA1HTvhqlTCOMVMPf1FjMSZrKmevtT7V OHra/SN8kA+cXeo/VF885zV6f/8MooHRKI2CaRKDLxEUNQTUcRXhq41Cs6b7iune LtYZPyBmkV5lPeeFjaRfn94BxlBq+v2o5mqgYFZm8qbQVDRhjWegrFCWxsL6v0g5 gVPDBJM9/nq33322hOeGmh4jPfycsYikXxT2TWombRaEafX6OXp3aj55LSTdQzFX V7EJUK5e9K4+bblmBFNO9wc/+EfOkuCOBEpH3HlVBPEpFYjUX8klkDlR54VuW+y2 8TF2XkcoeCbe2lc7OJbCuHy0AcGfn4rwCZ95H9SEQHlmhb74UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHzSdL/ts/pmSWoapkYx8XN7SLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzFiYjkxOTctY2MwNC0z OGU0LTk2NTMtYjgzNjk1ZTMwZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw+ph4ijOZwccSTuLbkc6PM1Ki0+xPuJtX0uHFjyFV7H931JD81zCTm erc82+XT4DpTW3q8lFOaIHNjKMbzT8OQDF0fLEPsSF317Vf0MpdSXuDT1WW4UzfJ iG7ItC3bBY3R/CqFS8ym20KArXb/TakNB7PGk0WDSv8UoM6AiwAJ5evNcFhClMs0 Yu6EYg5WdQNFtzEBip2m7FHxUW9gKE1Y+Sh/TXp3OJNdzpUY2Qfule3GBVnlcD9H wr6IR7ASqKfFBmC9xpRsLid3v1c9K6lWA7UB+EpJHE/EWaDH29geUpIZF5ScE0i2 bBwMOdNkodTD8jfFY8+rYNiDI4Q3mMg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:41:52 2025 by rpki-client