$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa File: 969878da-bed4-396c-a9aa-8380a6b47039.roa (raw, json) Hash identifier: Ca8YWQ9vZtzKKx7C6rt3wQMcG/XuwLMdhy/bgPVRiB4= Subject key identifier: B4:DC:4C:DC:9A:C9:1F:88:84:D2:79:37:5A:BB:C7:3B:00:B9:05:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE3C6EB1CD4B94A6998C90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.25.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3c:6e:b1:cd:4b:94:a6:99:8c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=936ea3a7-b177-4e1e-a7d3-3968c23cbd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:b3:01:9b:e4:e3:69:b0:32:53:26:65:34: c3:3f:57:63:89:18:e4:aa:f2:0e:9a:ce:40:7a:f0: d7:75:83:7c:10:39:14:48:0d:b6:6a:9c:29:1f:6b: 17:6b:ed:b8:ae:ca:2b:69:14:29:15:7d:80:5e:e9: 03:b5:3a:42:1d:db:ed:6e:7e:db:c1:a2:9a:a6:e7: a6:89:34:27:b6:7e:6c:f3:d1:c2:55:12:b6:c5:ae: 01:e6:0d:e1:a8:da:b6:34:35:37:6b:dc:5c:47:70: 44:a8:48:75:c9:6c:ef:5d:1e:f4:1e:22:11:84:2e: e0:ea:1b:90:75:ab:f3:76:57:c4:8f:be:80:28:12: 2e:16:18:50:b7:02:e9:80:cd:ea:bc:5b:f8:b2:d0: 5f:a6:c0:40:7d:f1:8f:ae:ef:51:9c:ff:74:62:7f: 8e:25:7e:f7:06:67:da:04:75:64:53:cf:ec:cd:a6: 78:32:d3:c6:0b:cf:ec:98:08:50:56:44:88:f0:55: 93:8c:bf:01:1e:7d:a6:13:90:d1:66:fe:15:cf:96: 92:b8:8a:d6:80:f7:52:04:4a:16:2b:18:b8:50:0f: 17:70:e2:97:89:fb:61:b5:47:8e:b2:bf:0f:19:8d: d5:36:bf:de:0c:03:7d:e2:d8:49:9f:36:ea:d3:5c: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DC:4C:DC:9A:C9:1F:88:84:D2:79:37:5A:BB:C7:3B:00:B9:05:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:59:6d:a5:fd:6c:4b:71:e6:05:95:81:26:97:3e:c4:b1:8a: 9b:93:0d:5b:e4:9a:e3:09:e5:37:89:7c:f6:77:b0:a8:76:08: 53:f1:05:be:f9:ca:96:75:5a:8a:a5:b2:3e:0e:dc:f0:a5:15: 51:06:78:64:14:7c:e1:56:55:7f:fa:71:12:bb:6b:fb:3d:47: f4:c8:c2:2d:25:67:8b:59:41:f2:91:49:52:e2:62:9f:2d:f8: ba:f8:bd:6f:7b:4f:85:5f:45:ae:cd:75:d7:3b:0a:37:1a:b3: 0a:e4:93:81:c3:52:56:56:93:d7:62:2d:4d:77:96:db:20:ce: 80:3b:1b:82:08:f5:6c:c5:57:c8:ab:b7:6f:5d:3b:04:8d:44: 99:71:b2:30:50:4d:98:dd:5b:17:e3:6e:cb:28:6e:1e:50:fa: 91:84:2d:66:58:31:51:53:9d:68:84:57:83:fe:fa:cd:01:5e: cc:fa:b4:78:3a:06:56:4a:49:67:53:40:a6:42:dd:01:d0:b3: 6c:e3:d9:af:60:19:76:c2:c2:56:74:05:b4:65:47:b6:8d:ed: 9f:74:f8:db:3c:48:77:57:2f:40:aa:6b:0e:82:7b:fc:45:34: f7:4f:ed:81:34:0a:f3:6f:48:f2:4a:92:7a:2c:08:11:f3:f5: 4c:66:d2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzjxusc1LlKaZjJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTM2ZWEzYTctYjE3Ny00ZTFlLWE3ZDMtMzk2OGMyM2NiZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjWzAZvk42mwMlMmZTTDP1djiRjkqvIOms5A evDXdYN8EDkUSA22apwpH2sXa+24rsoraRQpFX2AXukDtTpCHdvtbn7bwaKapuem iTQntn5s89HCVRK2xa4B5g3hqNq2NDU3a9xcR3BEqEh1yWzvXR70HiIRhC7g6huQ davzdlfEj76AKBIuFhhQtwLpgM3qvFv4stBfpsBAffGPru9RnP90Yn+OJX73Bmfa BHVkU8/szaZ4MtPGC8/smAhQVkSI8FWTjL8BHn2mE5DRZv4Vz5aSuIrWgPdSBEoW Kxi4UA8XcOKXifthtUeOsr8PGY3VNr/eDAN94thJnzbq01xkVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTcTNyayR+IhNJ5N1q7xzsAuQWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY5ODc4ZGEtYmVkNC0z OTZjLWE5YWEtODM4MGE2YjQ3MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABZbaX9bEtx5gWVgSaXPsSxipuTDVvkmuMJ5TeJfPZ3sKh2CFPxBb75 ypZ1Woqlsj4O3PClFVEGeGQUfOFWVX/6cRK7a/s9R/TIwi0lZ4tZQfKRSVLiYp8t +Lr4vW97T4VfRa7Nddc7Cjcaswrkk4HDUlZWk9diLU13ltsgzoA7G4II9WzFV8ir t29dOwSNRJlxsjBQTZjdWxfjbssobh5Q+pGELWZYMVFTnWiEV4P++s0BXsz6tHg6 BlZKSWdTQKZC3QHQs2zj2a9gGXbCwlZ0BbRlR7aN7Z90+Ns8SHdXL0Cqaw6Ce/xF NPdP7YE0CvNvSPJKknosCBHz9Uxm0uw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:50:24 2025 by rpki-client