$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa File: a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa (raw, json) Hash identifier: cdS9ZoTPqj5ItW6svLddzoX3Vu2Vu7tqyHUfnzOT0kg= Subject key identifier: 9D:94:06:7F:DE:38:DD:A7:89:45:9F:E0:DA:76:91:45:1D:11:2D:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE55FD59019635F29E8C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.23.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:55:fd:59:01:96:35:f2:9e:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=67e88892-0fee-4bdd-914b-06ff667c0991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:3c:e0:97:a0:85:ab:90:c5:65:09:08:97: 38:da:0d:5d:b2:7c:1f:66:fd:bf:91:47:92:03:7c: 9f:89:26:36:09:95:86:26:b2:cf:64:d3:57:a3:d8: 86:2e:d4:02:c7:70:41:bf:f0:97:7d:c3:95:4e:de: e7:34:8e:89:a1:f3:44:ea:ed:ec:66:93:ee:72:15: 62:56:75:e2:79:71:66:1b:46:79:9e:8c:c7:36:d0: 33:81:8c:4e:d0:41:27:8b:5f:6f:3c:2a:1d:35:c7: 1e:46:f2:51:64:36:fc:4a:51:d0:e3:63:2f:8c:ca: 8d:a3:81:f6:57:ec:07:57:45:49:76:02:c4:2f:b7: 1b:6b:09:b3:8f:db:45:40:28:92:26:00:ba:41:3c: 93:60:2f:01:00:d3:fe:0d:c1:f6:0b:56:75:d6:b3: df:55:dc:39:14:46:7f:64:52:bd:52:88:ef:7a:59: de:31:84:42:e7:3e:74:83:18:5b:90:82:ca:85:e1: 77:8d:f5:28:79:d9:96:05:80:6a:14:6e:cf:0f:18: ab:91:1c:b3:3e:15:89:d4:e1:79:3f:47:7f:8c:e6: c8:ab:c7:8e:1a:f8:d3:5b:5e:a9:2b:ae:b1:31:53: 98:73:fa:df:cc:11:13:09:7e:bf:d0:9a:4b:4a:b5: a1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:06:7F:DE:38:DD:A7:89:45:9F:E0:DA:76:91:45:1D:11:2D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:30:60:6e:69:b1:df:7a:9e:eb:f6:76:7f:42:62:97:60:9f: ea:ef:94:8d:0f:11:19:f6:2b:9e:ad:e4:6c:bc:e1:99:c4:62: a3:f5:6a:d8:79:97:54:a4:ab:a4:04:89:1d:53:22:17:27:7b: 61:fd:6d:6a:b3:45:56:37:be:2d:6e:9c:e2:56:02:ef:08:96: d9:90:f9:b1:2c:b0:c2:1a:45:c6:66:fc:ce:c4:27:4b:49:2d: e8:43:dc:5b:20:41:59:7f:e7:b3:4f:1d:2c:2d:d9:9e:2e:dc: 31:c0:97:1f:28:bc:38:96:c3:89:64:42:8f:57:bc:89:c3:60: fb:d7:6c:35:49:52:1e:74:92:f9:f9:f0:48:5b:a0:54:5d:a0: a3:47:1c:46:38:3e:f8:3c:a9:ef:15:9e:54:c8:97:0a:e6:ef: 57:10:2a:9e:59:7f:33:d2:0e:81:7e:dc:c0:b3:00:f4:80:b1: cd:fb:7c:ab:f2:b7:f0:fb:99:db:f7:ba:bf:25:5b:a4:be:5f: ec:7c:5f:43:ad:f2:53:c3:10:e6:10:e9:eb:29:7b:f5:6b:0e: f9:43:83:ca:ae:20:9f:1e:3d:96:23:5e:da:96:32:ce:a3:a0: ea:2d:78:b7:97:da:7c:d2:05:77:30:14:df:24:7f:6f:bd:95: 4d:09:3f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzlX9WQGWNfKejIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjdlODg4OTItMGZlZS00YmRkLTkxNGItMDZmZjY2N2MwOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVM84JeghauQxWUJCJc42g1dsnwfZv2/kUeS A3yfiSY2CZWGJrLPZNNXo9iGLtQCx3BBv/CXfcOVTt7nNI6JofNE6u3sZpPuchVi VnXieXFmG0Z5nozHNtAzgYxO0EEni19vPCodNcceRvJRZDb8SlHQ42MvjMqNo4H2 V+wHV0VJdgLEL7cbawmzj9tFQCiSJgC6QTyTYC8BANP+DcH2C1Z11rPfVdw5FEZ/ ZFK9UojvelneMYRC5z50gxhbkILKheF3jfUoedmWBYBqFG7PDxirkRyzPhWJ1OF5 P0d/jObIq8eOGvjTW16pK66xMVOYc/rfzBETCX6/0JpLSrWhxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2UBn/eON2niUWf4Np2kUUdES0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTU0YWMyMmEtY2NhYi0z ZTI4LWI4OTctZTViMWE2ZDQ2ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8wYG5psd96nuv2dn9CYpdgn+rvlI0PERn2K56t5Gy84ZnEYqP1ath5 l1Skq6QEiR1TIhcne2H9bWqzRVY3vi1unOJWAu8IltmQ+bEssMIaRcZm/M7EJ0tJ LehD3FsgQVl/57NPHSwt2Z4u3DHAlx8ovDiWw4lkQo9XvInDYPvXbDVJUh50kvn5 8EhboFRdoKNHHEY4Pvg8qe8VnlTIlwrm71cQKp5ZfzPSDoF+3MCzAPSAsc37fKvy t/D7mdv3ur8lW6S+X+x8X0Ot8lPDEOYQ6espe/VrDvlDg8quIJ8ePZYjXtqWMs6j oOoteLeX2nzSBXcwFN8kf2+9lU0JPzE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:53 2025 by rpki-client