$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa File: a3a4121a-a44e-3a44-951c-be4fd4286fee.roa (raw, json) Hash identifier: ZJlUS6ebPh1CfX1FD+n+Av2uhqrgHi6ldVPBIt5XVYM= Subject key identifier: 5A:F4:81:F7:68:8D:33:F0:86:32:06:C2:C3:E7:D9:B8:74:11:F7:D7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797390A4DF71D191B236440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.22.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:39:0a:4d:f7:1d:19:1b:23:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b5cee60c-eea8-41cb-a69d-fdebf3f123f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:84:2f:b3:79:a5:78:a0:bc:6a:2d:27:e3: 85:9a:d1:00:78:a5:7d:fd:3b:ac:37:eb:ae:18:2b: 5c:bf:b1:d0:43:ff:d3:e1:83:18:30:60:3e:24:01: a2:a3:c2:65:51:2f:06:b3:47:c0:f3:dc:a6:9a:de: d4:bf:e1:ec:ba:08:fe:95:ca:32:f5:b5:b2:72:68: 9d:4f:d7:77:e9:0b:1c:da:fd:cd:e6:dd:9b:cb:db: 2e:e0:5d:71:c5:cd:93:7f:52:45:90:2e:70:2a:e1: f5:ab:9f:35:c2:34:72:38:bc:2b:d1:44:a1:67:19: 15:f4:49:38:dc:e0:9c:5f:5e:c6:78:1b:58:90:1f: 83:cc:49:a1:3d:a8:5f:0f:c6:66:06:66:5c:71:8e: 9e:e6:59:ef:8a:76:18:37:67:3a:9c:b2:c3:9b:97: b1:cc:98:9c:f3:6d:75:b3:eb:d5:87:45:30:24:b8: 93:a3:c9:ea:e4:70:38:3f:7c:70:7f:ad:0b:9f:af: 1d:8d:c4:0b:37:1c:6b:2c:64:d0:d1:52:0f:cb:1b: 87:2d:8f:c5:62:62:a2:e2:9e:04:1f:bf:37:c9:67: 21:5c:f9:68:28:59:fc:3c:73:f4:92:59:61:9b:9c: 34:31:53:7c:3f:a5:43:09:ed:4f:3d:ec:e8:9c:0a: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:81:F7:68:8D:33:F0:86:32:06:C2:C3:E7:D9:B8:74:11:F7:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:48:1a:e5:3b:d7:d0:28:7d:7d:9a:25:8b:9f:f8:15:6b:13: cd:5c:93:e6:75:49:af:0e:cd:d7:28:ab:8c:1f:c9:65:aa:b8: af:d5:65:d2:d2:b7:06:42:62:01:ba:0c:72:7b:58:b2:ee:94: 3f:a2:2e:10:00:37:a3:30:67:71:33:bb:0c:7b:c8:58:a1:3d: 92:9b:8e:26:3d:88:34:e5:78:c6:71:5a:7f:b5:13:34:65:df: df:5a:30:a1:fd:e1:ce:1b:85:73:77:7b:86:f5:c7:fd:7b:f1: bf:99:b7:c1:37:7f:95:14:ae:bb:df:95:99:0f:dd:1f:a7:e6: 7b:44:d6:67:0f:d4:f9:2c:58:47:c6:a3:3a:28:1f:f6:66:d9: 33:01:57:6e:93:e2:46:15:ca:52:64:63:77:b9:83:15:af:24: 53:41:ad:ca:d4:30:83:00:97:52:07:be:21:7c:6e:fd:80:2c: 65:30:fd:84:6e:4d:35:05:19:21:2e:be:80:83:5b:5f:69:dd: b3:56:7e:4b:f8:49:e3:8d:78:11:a6:5d:04:01:7f:f5:78:b7: 76:05:74:57:59:eb:73:73:db:b5:9e:4f:34:53:fb:8e:f8:fe: 27:51:d6:5c:c1:bf:64:ff:fa:5e:2d:9a:c4:8b:fe:bf:bf:74: b8:c3:a2:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzkKTfcdGRsjZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjVjZWU2MGMtZWVhOC00MWNiLWE2OWQtZmRlYmYzZjEyM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5qEL7N5pXigvGotJ+OFmtEAeKV9/TusN+uu GCtcv7HQQ//T4YMYMGA+JAGio8JlUS8Gs0fA89ymmt7Uv+Hsugj+lcoy9bWycmid T9d36Qsc2v3N5t2by9su4F1xxc2Tf1JFkC5wKuH1q581wjRyOLwr0UShZxkV9Ek4 3OCcX17GeBtYkB+DzEmhPahfD8ZmBmZccY6e5lnvinYYN2c6nLLDm5exzJic8211 s+vVh0UwJLiTo8nq5HA4P3xwf60Ln68djcQLNxxrLGTQ0VIPyxuHLY/FYmKi4p4E H783yWchXPloKFn8PHP0kllhm5w0MVN8P6VDCe1PPezonAooVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr0gfdojTPwhjIGwsPn2bh0EffXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhNDEyMWEtYTQ0ZS0z YTQ0LTk1MWMtYmU0ZmQ0Mjg2ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVIGuU719AofX2aJYuf+BVrE81ck+Z1Sa8Ozdcoq4wfyWWquK/VZdLS twZCYgG6DHJ7WLLulD+iLhAAN6MwZ3Ezuwx7yFihPZKbjiY9iDTleMZxWn+1EzRl 399aMKH94c4bhXN3e4b1x/178b+Zt8E3f5UUrrvflZkP3R+n5ntE1mcP1PksWEfG ozooH/Zm2TMBV26T4kYVylJkY3e5gxWvJFNBrcrUMIMAl1IHviF8bv2ALGUw/YRu TTUFGSEuvoCDW19p3bNWfkv4SeONeBGmXQQBf/V4t3YFdFdZ63Nz27WeTzRT+474 /idR1lzBv2T/+l4tmsSL/r+/dLjDosk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:14 2025 by rpki-client