$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa File: 86904349-f07e-3073-9f05-8546aacd61f6.roa (raw, json) Hash identifier: eWwo8Byk2gAHNJ7AVmE0rO43xgxvgi1O1Gthji6KC1I= Subject key identifier: 5E:91:74:5C:D1:C7:A6:30:E9:5B:6A:E7:83:8F:A1:36:34:7C:77:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BAD628B6CC8417F20E4F3C8A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.29.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8b:6c:c8:41:7f:20:e4:f3:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=d045019f-cf68-42d5-8722-176ad06c5648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0c:46:6a:c2:e5:db:7b:fb:c9:0a:61:7d:1b: 0a:44:41:87:86:92:11:b5:c7:e2:ad:6a:5d:d9:c8: 86:6d:be:15:a4:37:82:06:cf:44:37:4a:43:51:77: b1:f5:8c:03:3c:aa:7b:99:55:9e:a9:6e:8a:c9:5c: 1b:13:12:e9:64:81:47:2b:6b:cc:7f:3a:6e:2d:37: d0:ce:ed:73:a0:37:48:14:d0:89:f4:d2:68:4a:ae: 8c:5b:58:fc:41:8e:2a:2f:d3:77:2b:8e:af:b8:54: ac:ef:51:da:6b:2b:b3:ba:1d:39:17:3b:c2:93:be: 3d:76:e0:9c:a6:c2:b9:a8:74:7f:61:01:63:cc:21: 49:db:18:5b:10:14:89:28:54:dd:32:26:1b:39:0a: fe:e3:6f:1f:da:e9:70:a8:b2:a2:d2:cc:69:2e:4c: 07:e3:7c:9e:e3:6c:54:0c:75:31:99:2d:2b:07:88: 95:0b:f6:31:40:9a:ea:3b:05:2e:2c:76:be:a2:8e: 14:ae:79:fd:85:9b:57:bc:43:2a:97:95:a6:da:8b: e6:af:db:34:88:7e:e1:b5:a4:a3:82:cb:1a:55:f0: 3d:a7:69:51:3e:da:a9:d7:2c:98:b7:ec:b6:dd:0b: 2d:3c:48:a8:e9:cb:db:5b:15:6a:56:4e:57:06:ba: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:91:74:5C:D1:C7:A6:30:E9:5B:6A:E7:83:8F:A1:36:34:7C:77:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1d:3c:61:3b:88:9e:9d:69:28:7f:78:e2:d1:75:8f:20:90: f1:cf:36:01:f0:84:93:85:9d:4d:58:a9:5e:a1:58:59:8c:1e: 23:b1:f7:7e:cd:9d:ad:1e:53:15:fe:60:d9:47:47:f6:b2:d0: d1:65:e5:b6:14:71:63:35:aa:aa:02:a1:3d:b7:fb:b6:94:eb: 1e:b4:ed:b0:83:ec:fa:ed:f9:fa:a1:03:0f:f1:05:5f:21:27: 4f:98:7a:f0:9d:e3:89:28:f1:3b:3e:f9:8a:8f:ee:96:37:e9: f2:6e:c4:7a:c9:54:47:3d:73:4c:ce:7b:77:1c:88:41:74:04: 6c:46:9c:7a:ef:74:d0:41:60:82:59:c4:73:a4:4e:fc:ca:b1: f1:40:84:e1:5c:9d:bd:88:31:41:07:3a:d1:6e:2d:ae:69:32: 8b:77:88:60:59:a7:71:04:93:d7:56:70:73:34:ef:7f:07:98: c9:30:71:d1:cd:2e:4e:48:d2:0c:e8:80:77:c8:ed:d1:a8:f6: 47:88:1a:8f:40:94:d5:38:34:28:e7:c3:36:bf:79:6b:f0:43: ba:1a:e1:50:da:c1:8d:80:fa:21:ba:99:61:59:f6:ae:4f:03: 58:f1:3e:ab:c4:40:99:a0:8b:43:d8:47:9c:6d:b3:77:80:ba: 4d:3b:db:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYotsyEF/IOTzyKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZDA0NTAxOWYtY2Y2OC00MmQ1LTg3MjItMTc2YWQwNmM1NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QxGasLl23v7yQphfRsKREGHhpIRtcfirWpd 2ciGbb4VpDeCBs9EN0pDUXex9YwDPKp7mVWeqW6KyVwbExLpZIFHK2vMfzpuLTfQ zu1zoDdIFNCJ9NJoSq6MW1j8QY4qL9N3K46vuFSs71Haayuzuh05FzvCk749duCc psK5qHR/YQFjzCFJ2xhbEBSJKFTdMiYbOQr+428f2ulwqLKi0sxpLkwH43ye42xU DHUxmS0rB4iVC/YxQJrqOwUuLHa+oo4Urnn9hZtXvEMql5Wm2ovmr9s0iH7htaSj gssaVfA9p2lRPtqp1yyYt+y23QstPEio6cvbWxVqVk5XBrp2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6RdFzRx6Yw6Vtq54OPoTY0fHf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODY5MDQzNDktZjA3ZS0z MDczLTlmMDUtODU0NmFhY2Q2MWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYdPGE7iJ6daSh/eOLRdY8gkPHPNgHwhJOFnU1YqV6hWFmMHiOx937N na0eUxX+YNlHR/ay0NFl5bYUcWM1qqoCoT23+7aU6x607bCD7Prt+fqhAw/xBV8h J0+YevCd44ko8Ts++YqP7pY36fJuxHrJVEc9c0zOe3cciEF0BGxGnHrvdNBBYIJZ xHOkTvzKsfFAhOFcnb2IMUEHOtFuLa5pMot3iGBZp3EEk9dWcHM0738HmMkwcdHN Lk5I0gzogHfI7dGo9keIGo9AlNU4NCjnwza/eWvwQ7oa4VDawY2A+iG6mWFZ9q5P A1jxPqvEQJmgi0PYR5xts3eAuk072xY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:50 2025 by rpki-client