$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fb95db7-cca4-3b0d-9197-5172e3952ba2.roa File: 9fb95db7-cca4-3b0d-9197-5172e3952ba2.roa (raw, json) Hash identifier: 2rszYB5OKVNB1zdevFD/o4uV9cXplMk+/M0Vr7i5nak= Subject key identifier: 46:5E:75:4A:6F:0A:ED:FD:9F:76:F3:30:83:FE:2A:DB:5D:B5:70:BF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B12DE832167BADD1C560C0400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fb95db7-cca4-3b0d-9197-5172e3952ba2.roa Signing time: Wed 03 Sep 2025 16:40:35 +0000 ROA not before: Wed 03 Sep 2025 16:40:35 +0000 ROA not after: Tue 02 Dec 2025 17:40:35 +0000 asID: 30036 IP address blocks: 173.29.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:de:83:21:67:ba:dd:1c:56:0c:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 3 16:40:35 2025 GMT Not After : Dec 2 17:40:35 2025 GMT Subject: CN=4e817692-a149-45aa-8aa1-d4c5bafa63b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:2c:fd:72:eb:96:b8:59:54:0d:45:67:25: 23:fa:02:40:6c:8d:bc:4c:f2:7c:c3:69:2d:f3:a6: 65:0a:16:a3:9c:9a:9d:cd:c1:cb:24:aa:29:17:cd: ce:19:7c:62:9f:0e:ce:47:db:f8:89:ed:65:5a:25: 9c:5a:74:05:98:23:93:85:ef:b9:b3:ab:18:47:89: 0c:5d:44:a1:a9:9b:53:24:c5:b6:2d:82:f5:e1:93: 85:73:4f:0a:8b:8e:a6:77:59:83:99:cb:df:55:19: 9e:07:96:e5:c1:13:d3:20:24:31:95:12:6f:72:79: cf:a1:39:10:63:c1:e4:f1:bb:dd:41:17:0c:f3:79: 54:00:3a:62:ad:2a:f0:15:61:ba:b0:41:e4:d7:ed: 07:46:e0:57:cb:a1:3b:1c:2d:a8:b7:36:5b:c7:66: d1:91:ad:ca:c6:7a:78:a8:03:17:59:b0:63:0f:8b: af:cd:5c:a7:34:aa:b4:8d:7e:1b:7e:cf:ef:ab:0d: 17:6b:c0:54:84:16:94:05:d9:f7:5e:a5:8d:bf:20: b0:2b:0b:e8:5e:03:5f:7e:a3:4e:08:19:43:e0:7e: 42:e9:53:27:4b:30:44:0d:e3:0d:ce:f4:3f:99:99: ff:de:78:ad:f2:84:4c:41:60:9a:06:62:b0:38:21: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:75:4A:6F:0A:ED:FD:9F:76:F3:30:83:FE:2A:DB:5D:B5:70:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fb95db7-cca4-3b0d-9197-5172e3952ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8d:45:0d:b7:7c:2f:30:31:31:ec:f3:ce:e0:6e:2c:13:c5: 37:b0:b2:b9:5a:cf:ba:3c:16:f3:4e:cb:d1:66:cf:d2:16:e9: 76:8e:00:7b:d6:ca:34:ec:ca:9f:55:96:7c:c3:5f:af:87:5c: 81:ff:c7:c1:68:cd:2e:98:dd:01:4e:e4:85:a4:f1:0c:e6:cb: d6:27:21:5a:9e:67:8b:4d:e6:de:31:10:4d:a2:ba:78:dc:3a: f2:9b:be:f5:3b:28:02:4b:83:d3:1c:d7:12:25:6d:fe:5c:aa: 92:84:51:ae:e2:d2:8f:85:17:23:b6:c6:48:3e:df:ca:47:c1: 70:b1:27:c7:f3:47:e1:4f:f5:26:cd:ee:f5:f2:d9:96:b7:0f: 11:1a:b5:f8:58:7b:fd:e7:3d:6b:76:95:2a:e9:f3:7e:83:a8: 44:10:dc:54:39:65:5d:a7:eb:f3:6d:ad:07:43:d0:f7:8f:18: a8:7f:bc:00:f2:27:ee:ba:b3:e1:cc:fa:9a:4f:79:d1:99:4c: c3:a2:0c:53:81:ab:6b:ef:a6:4a:28:dc:be:7b:04:a8:67:31: a4:23:07:7a:63:37:1b:41:df:df:65:de:46:d5:90:f1:e2:05: 8e:47:f8:fb:e6:f3:e9:9a:c7:7f:04:3d:ff:0a:79:34:89:01: b9:83:bb:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsS3oMhZ7rdHFYMBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMzE2NDAzNVoXDTI1MTIwMjE3NDAzNVowLzEtMCsGA1UEAxMk NGU4MTc2OTItYTE0OS00NWFhLThhYTEtZDRjNWJhZmE2M2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVos/XLrlrhZVA1FZyUj+gJAbI28TPJ8w2kt 86ZlChajnJqdzcHLJKopF83OGXxinw7OR9v4ie1lWiWcWnQFmCOThe+5s6sYR4kM XUShqZtTJMW2LYL14ZOFc08Ki46md1mDmcvfVRmeB5blwRPTICQxlRJvcnnPoTkQ Y8Hk8bvdQRcM83lUADpirSrwFWG6sEHk1+0HRuBXy6E7HC2otzZbx2bRka3Kxnp4 qAMXWbBjD4uvzVynNKq0jX4bfs/vqw0Xa8BUhBaUBdn3XqWNvyCwKwvoXgNffqNO CBlD4H5C6VMnSzBEDeMNzvQ/mZn/3nit8oRMQWCaBmKwOCFijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZedUpvCu39n3bzMIP+KttdtXC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWZiOTVkYjctY2NhNC0z YjBkLTkxOTctNTE3MmUzOTUyYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2NRQ23fC8wMTHs887gbiwTxTewsrlaz7o8FvNOy9Fmz9IW6XaOAHvW yjTsyp9VlnzDX6+HXIH/x8FozS6Y3QFO5IWk8Qzmy9YnIVqeZ4tN5t4xEE2iunjc OvKbvvU7KAJLg9Mc1xIlbf5cqpKEUa7i0o+FFyO2xkg+38pHwXCxJ8fzR+FP9SbN 7vXy2Za3DxEatfhYe/3nPWt2lSrp836DqEQQ3FQ5ZV2n6/NtrQdD0PePGKh/vADy J+66s+HM+ppPedGZTMOiDFOBq2vvpkoo3L57BKhnMaQjB3pjNxtB399l3kbVkPHi BY5H+Pvm8+max38EPf8KeTSJAbmDu6U= -----END CERTIFICATE-----Generated at Wed Nov 5 06:36:28 2025 by rpki-client