$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa File: 9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa (raw, json) Hash identifier: AzzK36qDViK/4rY3XeUA1q+vzbpzmhgUDBLP1ysiQxc= Subject key identifier: 40:BD:83:83:58:CD:25:50:12:13:AC:9F:DC:D7:7C:E4:06:1F:66:9C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201D8182A3CE8DEA2506D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.29.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d8:18:2a:3c:e8:de:a2:50:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=57d7310a-63f2-4bc1-971a-2f422ef97e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:fb:e4:bb:d8:79:3f:20:36:6f:60:dd:27: 4c:53:03:4c:6a:ba:d4:50:03:ae:d7:13:18:e4:0e: 82:5f:b3:25:87:69:89:ac:6a:4e:62:64:79:3d:dc: b8:1a:67:59:0f:65:bf:2e:40:d1:0f:34:28:a8:83: 81:0a:f4:a9:89:04:04:30:7a:88:38:f9:c4:ec:63: b6:d7:9a:f5:73:c2:47:ad:73:b6:2c:67:77:a5:f4: c5:f3:4b:45:ef:52:e5:a9:e2:ea:23:e8:de:4d:c9: 9e:03:69:33:92:86:94:75:1e:91:bb:41:2d:21:d5: dd:94:c4:fb:15:b0:a2:58:7d:c2:49:a4:7c:ee:ce: d7:bc:95:64:26:9b:46:43:70:c5:00:bb:44:34:2a: f5:59:f5:9f:70:81:94:57:ea:4a:3d:47:dd:4e:f4: 00:ba:66:b9:d4:d4:c0:44:df:35:10:db:5d:65:4b: f0:9d:20:58:6c:dc:56:88:8c:96:c6:18:fe:a7:4c: 5f:03:92:ad:8d:e0:6a:24:82:f5:e3:20:57:16:00: 12:a6:70:f6:53:13:e8:bf:56:de:d5:5a:88:74:ff: b1:0a:ae:65:3d:8a:95:87:aa:7a:84:66:11:81:6a: 59:d6:4a:6f:ae:56:1e:66:aa:06:70:bf:05:6c:44: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BD:83:83:58:CD:25:50:12:13:AC:9F:DC:D7:7C:E4:06:1F:66:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:29:59:07:ad:2f:f9:90:3b:f6:aa:19:fc:4b:34:10:80:9c: 00:bd:58:04:da:c7:cb:8b:a3:a1:3b:7f:13:14:fa:2b:6d:92: 85:b6:41:df:8d:10:72:87:c5:6f:e2:0a:4d:64:00:13:94:4d: be:a2:23:79:3a:d0:b3:33:3f:d9:26:54:68:84:ba:b5:da:66: d2:58:1e:79:af:7f:37:73:31:00:eb:f8:cd:81:31:b3:80:5b: 5a:c5:be:39:e8:c0:21:2b:42:a9:31:91:f9:04:96:49:ce:21: fd:4f:6b:46:17:ae:df:a6:fc:69:88:f8:ad:c7:98:3d:fc:dc: b2:13:57:7b:a2:e3:41:33:00:24:99:4d:ee:9e:4d:34:c8:0d: 01:e5:06:6e:35:15:e0:91:e4:b1:01:9b:df:94:7e:56:7d:c7: 81:67:b1:42:7b:45:7e:96:d1:42:50:58:94:fb:45:55:87:5e: c2:21:09:c3:3e:00:b4:60:8f:bd:cb:e1:ab:de:53:40:c9:e1: d6:89:23:0b:fe:54:7b:a2:58:85:8a:a9:3a:e8:e1:7a:29:79: 2d:4a:3b:c3:5b:ac:df:62:ee:56:cc:e8:c8:14:48:70:d6:56: 4f:40:0f:e4:ad:a5:20:df:78:1e:88:e1:1d:c4:50:98:53:dc: bd:b2:df:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdgYKjzo3qJQbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTdkNzMxMGEtNjNmMi00YmMxLTk3MWEtMmY0MjJlZjk3ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIX75LvYeT8gNm9g3SdMUwNMarrUUAOu1xMY 5A6CX7Mlh2mJrGpOYmR5Pdy4GmdZD2W/LkDRDzQoqIOBCvSpiQQEMHqIOPnE7GO2 15r1c8JHrXO2LGd3pfTF80tF71LlqeLqI+jeTcmeA2kzkoaUdR6Ru0EtIdXdlMT7 FbCiWH3CSaR87s7XvJVkJptGQ3DFALtENCr1WfWfcIGUV+pKPUfdTvQAuma51NTA RN81ENtdZUvwnSBYbNxWiIyWxhj+p0xfA5KtjeBqJIL14yBXFgASpnD2UxPov1be 1VqIdP+xCq5lPYqVh6p6hGYRgWpZ1kpvrlYeZqoGcL8FbER6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC9g4NYzSVQEhOsn9zXfOQGH2acMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWNmOWYzYzAtMjAxNi0z YTIxLThkOWQtOTA4MWJhMmRkZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYpWQetL/mQO/aqGfxLNBCAnAC9WATax8uLo6E7fxMU+ittkoW2Qd+N EHKHxW/iCk1kABOUTb6iI3k60LMzP9kmVGiEurXaZtJYHnmvfzdzMQDr+M2BMbOA W1rFvjnowCErQqkxkfkElknOIf1Pa0YXrt+m/GmI+K3HmD383LITV3ui40EzACSZ Te6eTTTIDQHlBm41FeCR5LEBm9+UflZ9x4FnsUJ7RX6W0UJQWJT7RVWHXsIhCcM+ ALRgj73L4aveU0DJ4daJIwv+VHuiWIWKqTro4XopeS1KO8NbrN9i7lbM6MgUSHDW Vk9AD+StpSDfeB6I4R3EUJhT3L2y35o= -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:01 2025 by rpki-client