$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b03cf3ee-c054-377b-88ce-d7293bde103a.roa File: b03cf3ee-c054-377b-88ce-d7293bde103a.roa (raw, json) Hash identifier: hVv202/fjlm7GcYgX9k/T0aHZKK5q21ldU5xHWIgB/8= Subject key identifier: 45:DC:2F:F4:23:25:B1:68:51:AD:EC:70:22:A9:CE:0D:F8:D7:1A:D0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFC1C21B6E72753822307B700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b03cf3ee-c054-377b-88ce-d7293bde103a.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 30036 IP address blocks: 173.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:21:b6:e7:27:53:82:23:07:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6af02dc8-b7e5-4ec8-9a1f-f6f6df67d25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:f6:3d:93:78:1a:f9:9e:15:69:56:7e:ed: b3:70:28:12:04:78:23:41:7b:05:f8:37:d2:fd:f0: f1:9b:6f:b0:67:d0:07:66:a0:d9:3c:6a:35:3d:1d: 22:45:80:56:0e:b6:3c:87:f8:1c:bc:7a:a4:8b:b6: 13:8e:a2:e6:30:a2:4a:e2:92:86:83:84:8a:14:c1: da:a3:4d:4d:23:92:f0:99:3f:78:6a:c8:2c:fa:39: 0e:7c:a1:75:6a:ad:74:11:37:e3:4d:ce:bd:03:f7: 00:e5:b1:96:4c:26:d6:3c:31:c2:9d:5a:ab:d9:18: 6c:2b:c4:08:c3:4f:9c:25:74:d3:33:9e:ff:aa:d9: 71:66:aa:de:f0:07:c5:17:32:88:c4:ee:52:91:7d: 28:e5:e0:80:51:65:ad:87:4c:83:ed:c0:57:64:d5: e4:76:17:fd:de:ff:ba:23:59:c4:80:12:2b:bb:e7: 75:b3:13:11:ad:e6:22:5b:6f:36:92:c1:f1:fa:0f: 3e:64:e9:f3:73:76:c3:e5:5c:7b:1d:02:8e:b6:a5: 9e:8e:85:c7:d7:e5:47:3a:65:86:11:21:c7:72:4f: 7d:23:b6:55:7f:51:ab:8b:23:e4:8d:74:20:7b:77: cf:97:50:98:e4:70:e1:c1:65:c4:14:61:f3:c7:e0: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DC:2F:F4:23:25:B1:68:51:AD:EC:70:22:A9:CE:0D:F8:D7:1A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b03cf3ee-c054-377b-88ce-d7293bde103a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5c:76:f0:34:3c:b9:49:a5:0c:6a:46:66:13:0f:93:2a:d5: 25:d5:72:be:92:5b:87:ae:e1:ef:fb:6e:c0:c0:f9:cb:5b:c3: 1c:a1:9f:b8:e4:56:ee:66:58:61:6d:51:b9:81:d6:33:e8:a7: 8f:67:9d:39:88:d3:84:c8:4b:6e:1a:d3:4e:38:41:cf:a6:d1: ec:fe:52:3f:33:49:c4:29:99:30:af:dd:5f:32:61:ed:85:5d: c0:5b:d9:46:08:45:8a:72:9b:7a:e7:4a:97:3a:5c:60:70:36: 90:1f:97:93:d1:5d:1b:a7:cf:81:08:cd:d2:78:8a:20:2e:a3: 28:5c:de:4e:d7:8d:ac:64:fa:f1:bd:22:27:da:ac:81:97:c2: a4:b6:d1:c3:3e:82:b7:fa:c8:85:34:46:de:03:fc:ed:ce:f4: 97:b4:83:11:06:51:64:8c:ad:c4:99:5b:94:cb:33:5e:f6:5c: 3f:4d:6d:15:75:11:fb:35:3f:41:c4:7c:43:da:a4:83:49:aa: c5:7f:84:ee:bf:0e:55:99:e1:32:be:2c:25:bc:49:86:24:03: 5e:9b:23:ae:b8:04:bb:a9:27:93:d1:49:26:ff:46:1a:6a:97: c1:8e:24:b7:65:4c:34:2d:41:19:56:67:c8:dd:e0:17:51:ec: c9:ab:68:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HCG25ydTgiMHtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmFmMDJkYzgtYjdlNS00ZWM4LTlhMWYtZjZmNmRmNjdkMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxr2PZN4GvmeFWlWfu2zcCgSBHgjQXsF+DfS /fDxm2+wZ9AHZqDZPGo1PR0iRYBWDrY8h/gcvHqki7YTjqLmMKJK4pKGg4SKFMHa o01NI5LwmT94asgs+jkOfKF1aq10ETfjTc69A/cA5bGWTCbWPDHCnVqr2RhsK8QI w0+cJXTTM57/qtlxZqre8AfFFzKIxO5SkX0o5eCAUWWth0yD7cBXZNXkdhf93v+6 I1nEgBIru+d1sxMRreYiW282ksHx+g8+ZOnzc3bD5Vx7HQKOtqWejoXH1+VHOmWG ESHHck99I7ZVf1GriyPkjXQge3fPl1CY5HDhwWXEFGHzx+C6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXcL/QjJbFoUa3scCKpzg341xrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjAzY2YzZWUtYzA1NC0z NzdiLTg4Y2UtZDcyOTNiZGUxMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1cdvA0PLlJpQxqRmYTD5Mq1SXVcr6SW4eu4e/7bsDA+ctbwxyhn7jk Vu5mWGFtUbmB1jPop49nnTmI04TIS24a0044Qc+m0ez+Uj8zScQpmTCv3V8yYe2F XcBb2UYIRYpym3rnSpc6XGBwNpAfl5PRXRunz4EIzdJ4iiAuoyhc3k7Xjaxk+vG9 IifarIGXwqS20cM+grf6yIU0Rt4D/O3O9Je0gxEGUWSMrcSZW5TLM172XD9NbRV1 Efs1P0HEfEPapINJqsV/hO6/DlWZ4TK+LCW8SYYkA16bI664BLupJ5PRSSb/Rhpq l8GOJLdlTDQtQRlWZ8jd4BdR7MmraC8= -----END CERTIFICATE-----Generated at Wed Nov 5 04:19:38 2025 by rpki-client