$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa File: a225a24e-a3c2-3e99-b9d9-9013830f3396.roa (raw, json) Hash identifier: AnMHFkCF9vnWUigh801m9wJWneQth2Q7nGB/L+My/+I= Subject key identifier: B7:95:8A:63:83:1C:37:B1:9A:17:40:F8:01:F1:B8:D6:3B:1D:EA:E5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE4CDABB6F3F01510E9C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.23.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4c:da:bb:6f:3f:01:51:0e:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3c962e81-2016-4360-9c24-9a7726dcf316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:20:49:79:d3:97:0d:14:67:a5:72:4f:90: c8:73:96:62:9e:86:ef:13:11:a9:16:f7:b5:10:9a: f9:f5:32:51:a5:18:c8:9f:56:c4:90:f6:0d:a9:d5: 50:29:c5:3f:20:9d:f6:a5:32:36:ab:85:6e:a4:6c: 27:49:b6:5a:0d:55:98:97:4a:fc:bd:87:f6:6a:5e: 0a:51:a4:d1:c4:07:76:00:4f:62:8a:75:3c:b1:24: 56:f9:b2:ce:c2:96:62:1e:24:ab:47:ec:a0:8a:db: 99:47:bb:00:0f:cf:17:5b:f2:df:07:5c:1d:45:4f: 00:49:03:0c:e5:87:96:85:e9:a7:05:86:18:df:04: 7e:3e:5c:46:9b:ed:2f:d8:ae:a7:2f:94:22:ab:00: e2:9b:b5:f2:1e:18:67:3c:0e:8f:21:bc:47:a5:38: 75:0c:a4:31:11:c9:c9:86:18:96:f9:d1:da:6f:06: 7b:28:bb:af:6e:c0:03:68:9c:c7:6a:30:ea:72:b9: 94:6e:aa:54:9d:7f:69:04:7b:28:c5:13:e4:83:67: ac:8a:68:77:41:ee:1c:c2:04:3e:21:d8:39:be:58: 9d:fa:c7:4d:3d:ee:21:60:f7:f0:2d:26:4a:7f:1c: 36:1d:21:0d:94:7c:80:8b:ac:b1:cc:67:58:a5:bc: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:95:8A:63:83:1C:37:B1:9A:17:40:F8:01:F1:B8:D6:3B:1D:EA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8f:43:de:fe:cf:4f:b4:2a:30:8c:24:bc:cb:18:80:c2:60: b5:7b:c1:1a:c6:57:b0:23:ce:2e:78:38:3d:c9:82:d5:76:f6: ce:6d:04:02:cb:cb:55:0c:d4:02:a3:d3:46:08:33:90:68:ff: 62:e5:b4:5b:b5:10:3a:02:4b:cb:75:e5:d8:5a:51:9b:ef:42: af:01:df:54:aa:0b:86:46:d1:b3:02:d4:b9:f7:e1:94:33:7c: e4:84:33:5b:01:aa:da:75:6d:12:ba:6d:5a:ea:12:65:5e:a3: de:d6:63:aa:79:79:e9:1c:ff:a1:f4:46:39:03:99:21:85:77: 74:a5:25:f5:ab:c4:be:6f:92:6d:7b:6b:34:36:76:84:3e:8a: 82:75:f9:50:44:4c:27:e2:7f:91:e7:f9:3d:5a:84:bc:ab:f3: 7e:9b:5d:81:a9:ea:a9:00:72:9e:b2:a6:ec:ba:48:4b:a4:3f: c5:a2:57:4e:4d:a9:13:f5:87:7c:37:90:81:47:fb:77:bf:61: 03:49:85:e1:55:3c:8c:de:76:a9:e0:0a:b8:73:0b:76:79:90: e0:db:37:ba:01:52:5a:23:c9:be:00:bd:36:58:07:00:fd:8d: 1b:9b:42:a0:8a:67:f0:e3:89:32:22:69:8f:dd:75:9b:8c:a8: d8:74:76:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkzau28/AVEOnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2M5NjJlODEtMjAxNi00MzYwLTljMjQtOWE3NzI2ZGNmMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsikgSXnTlw0UZ6VyT5DIc5ZinobvExGpFve1 EJr59TJRpRjIn1bEkPYNqdVQKcU/IJ32pTI2q4VupGwnSbZaDVWYl0r8vYf2al4K UaTRxAd2AE9iinU8sSRW+bLOwpZiHiSrR+ygituZR7sAD88XW/LfB1wdRU8ASQMM 5YeWhemnBYYY3wR+PlxGm+0v2K6nL5QiqwDim7XyHhhnPA6PIbxHpTh1DKQxEcnJ hhiW+dHabwZ7KLuvbsADaJzHajDqcrmUbqpUnX9pBHsoxRPkg2esimh3Qe4cwgQ+ Idg5vlid+sdNPe4hYPfwLSZKfxw2HSENlHyAi6yxzGdYpbxKXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeVimODHDexmhdA+AHxuNY7HerlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIyNWEyNGUtYTNjMi0z ZTk5LWI5ZDktOTAxMzgzMGYzMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2PQ97+z0+0KjCMJLzLGIDCYLV7wRrGV7Ajzi54OD3JgtV29s5tBALL y1UM1AKj00YIM5Bo/2LltFu1EDoCS8t15dhaUZvvQq8B31SqC4ZG0bMC1Ln34ZQz fOSEM1sBqtp1bRK6bVrqEmVeo97WY6p5eekc/6H0RjkDmSGFd3SlJfWrxL5vkm17 azQ2doQ+ioJ1+VBETCfif5Hn+T1ahLyr836bXYGp6qkAcp6ypuy6SEukP8WiV05N qRP1h3w3kIFH+3e/YQNJheFVPIzedqngCrhzC3Z5kODbN7oBUlojyb4AvTZYBwD9 jRubQqCKZ/DjiTIiaY/ddZuMqNh0dps= -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:27 2025 by rpki-client