$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa File: ae69f72c-1a33-3636-8017-ad9957fe4afa.roa (raw, json) Hash identifier: Zte+siHYQrihT7xi4NNdBJ3SF7UjBp59/pGQddCSbdU= Subject key identifier: 48:9F:72:D8:56:CA:7C:F7:A8:E5:46:4B:F4:B0:B8:48:8F:CF:C6:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC8BB096C5F62EC9800600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.23.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:8b:b0:96:c5:f6:2e:c9:80:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e55995d3-b96c-42f7-a605-20897468a089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:8b:ae:c9:5e:93:72:62:9e:81:a2:5e:3c: 31:e0:1d:4a:35:0c:9b:1a:10:f4:9d:cf:22:ac:c9: f1:a1:db:62:56:2a:1b:d3:35:b1:83:ae:31:e3:4c: e2:62:cc:fb:9e:75:f6:33:ef:f4:eb:5a:4b:2c:c7: bb:19:50:ea:42:1f:14:3b:d6:b3:14:b2:53:c4:1a: 08:9e:86:72:57:27:de:6a:35:dd:e1:f4:dc:27:6d: c5:c0:a6:f2:ba:e2:ad:c6:93:98:93:e4:12:a6:ba: 19:1d:e0:fd:84:69:c5:8d:16:e7:2a:80:14:4f:71: bc:98:b9:54:17:09:ac:c0:ef:fc:56:d5:b6:c7:fc: d3:1f:44:1c:38:1f:25:32:a0:bf:a2:f1:9d:ad:24: 46:a9:91:a6:9c:46:1d:db:a7:2c:a5:fa:a9:ea:4e: 4a:c7:4a:3f:5c:f6:3e:27:4b:93:e9:55:70:ec:1a: 07:76:1a:6d:4d:43:48:91:fc:ca:80:72:07:f7:15: 56:16:74:1d:81:ca:96:28:6b:1e:f0:65:a6:e5:da: 91:5f:5c:05:71:82:62:e7:58:a9:88:d0:b6:2a:d4: a5:31:9e:52:89:f6:bd:77:be:b1:b2:a7:62:4d:4e: 12:57:83:a4:47:c0:e7:62:14:16:52:b9:5e:1d:55: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9F:72:D8:56:CA:7C:F7:A8:E5:46:4B:F4:B0:B8:48:8F:CF:C6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:68:0b:8d:93:49:0f:5d:ab:0e:3f:a5:60:81:a4:60:f9:fb: 0a:bb:39:23:31:32:bc:9e:1b:c9:ee:bc:c1:73:b7:37:39:bb: 2d:24:69:fd:4e:ed:da:c8:04:2e:41:77:6b:44:0e:c1:98:0e: 26:74:06:72:33:b6:77:8a:01:3d:ed:62:89:55:41:a6:29:cc: aa:4a:f0:6b:fe:da:64:76:e9:66:05:65:65:70:f7:6c:d5:66: 7e:67:00:a6:66:7d:1e:d5:9b:33:34:2c:02:d6:8c:b0:77:ff: 6a:cd:8f:46:3f:d4:e1:0f:f9:10:f7:c4:cd:57:5b:32:12:7e: c6:c0:35:5e:72:aa:1e:5a:db:6f:1c:c2:20:b8:36:e7:26:c0: 06:83:b4:05:bd:2b:df:77:40:19:16:2f:00:85:16:fb:27:34: ac:43:de:7d:3a:e9:8b:16:4d:ef:dc:d2:58:f7:b9:7e:50:dd: 15:6f:bb:04:6d:2e:9b:84:25:7b:d6:ac:79:c7:e1:f9:6f:6c: 34:4a:26:c2:cd:06:c5:e8:c3:09:0a:c8:e9:ac:20:41:b1:0b: 1d:e6:0f:de:4c:e8:31:2a:44:dc:40:09:9b:cd:68:78:6e:87: 54:cc:03:ed:6b:23:dd:74:75:77:8b:93:5b:85:b0:4d:c7:03: a2:1b:b1:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIuwlsX2LsmABgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTU1OTk1ZDMtYjk2Yy00MmY3LWE2MDUtMjA4OTc0NjhhMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM2Lrslek3JinoGiXjwx4B1KNQybGhD0nc8i rMnxodtiViob0zWxg64x40ziYsz7nnX2M+/061pLLMe7GVDqQh8UO9azFLJTxBoI noZyVyfeajXd4fTcJ23FwKbyuuKtxpOYk+QSproZHeD9hGnFjRbnKoAUT3G8mLlU FwmswO/8VtW2x/zTH0QcOB8lMqC/ovGdrSRGqZGmnEYd26cspfqp6k5Kx0o/XPY+ J0uT6VVw7BoHdhptTUNIkfzKgHIH9xVWFnQdgcqWKGse8GWm5dqRX1wFcYJi51ip iNC2KtSlMZ5Sifa9d76xsqdiTU4SV4OkR8DnYhQWUrleHVWfLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEifcthWynz3qOVGS/SwuEiPz8a4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWU2OWY3MmMtMWEzMy0z NjM2LTgwMTctYWQ5OTU3ZmU0YWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhoC42TSQ9dqw4/pWCBpGD5+wq7OSMxMryeG8nuvMFztzc5uy0kaf1O 7drIBC5Bd2tEDsGYDiZ0BnIztneKAT3tYolVQaYpzKpK8Gv+2mR26WYFZWVw92zV Zn5nAKZmfR7VmzM0LALWjLB3/2rNj0Y/1OEP+RD3xM1XWzISfsbANV5yqh5a228c wiC4NucmwAaDtAW9K993QBkWLwCFFvsnNKxD3n066YsWTe/c0lj3uX5Q3RVvuwRt LpuEJXvWrHnH4flvbDRKJsLNBsXowwkKyOmsIEGxCx3mD95M6DEqRNxACZvNaHhu h1TMA+1rI910dXeLk1uFsE3HA6Ibseg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:13:00 2025 by rpki-client