$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b117e964-ce49-31e4-b72d-974546605b90.roa File: b117e964-ce49-31e4-b72d-974546605b90.roa (raw, json) Hash identifier: JLWRx93K2ydkPgnkNSIv4VZ+V56WG16duiz7R4tdTsQ= Subject key identifier: EB:21:38:18:6B:54:57:A0:8A:98:B5:3F:A5:18:C7:C4:E3:32:39:08 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BBE4065183FEDDADC7A9627D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b117e964-ce49-31e4-b72d-974546605b90.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.23.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:65:18:3f:ed:da:dc:7a:96:27:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=835de48c-3f3e-401a-8420-acffae0336bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:83:bd:3f:15:e7:24:a4:bb:4f:13:4b:4e:fc: 77:86:49:74:69:04:64:2a:74:49:9b:58:73:4c:6c: 0b:31:44:f4:cc:57:14:47:ff:e6:e2:5d:2d:c5:17: b5:3b:70:e9:71:cd:e3:30:5d:cb:10:de:2b:f3:c6: ac:0c:ef:40:30:30:8a:d4:e5:a5:ff:3a:2c:61:e2: 21:16:5c:d5:7c:9c:de:86:6e:47:41:a6:ad:87:78: 85:d9:8c:b8:c8:7a:16:3e:bc:e0:ff:64:8e:22:56: d1:82:9b:e5:15:75:5e:a6:40:cc:f6:57:d9:21:a9: 12:68:72:fa:c1:c9:70:95:67:c4:14:fc:5c:e9:1c: 7b:7a:e4:54:a1:47:62:4c:62:3d:bb:dd:76:0e:6a: c0:ed:c6:0b:a0:da:06:50:c5:89:b4:96:72:eb:99: d0:7a:87:18:ba:8f:b7:1a:54:43:ac:41:ee:73:f8: 4d:40:4b:c7:b9:9c:2d:8c:c0:10:64:2c:c2:c7:6c: 6e:05:4a:a2:73:2c:b0:a2:75:f5:90:89:03:80:2d: 25:cf:58:b1:d6:1a:fa:fe:c7:21:f0:4e:af:58:a0: a0:c2:2f:b8:d5:51:e3:ca:39:bc:44:61:69:9a:38: ba:c4:ad:4b:f3:2f:5a:54:8d:f4:64:2e:ce:01:42: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:21:38:18:6B:54:57:A0:8A:98:B5:3F:A5:18:C7:C4:E3:32:39:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b117e964-ce49-31e4-b72d-974546605b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:62:48:40:17:8c:9c:64:59:7e:bd:7b:c4:f6:19:ea:f0:63: 64:f4:e0:74:81:39:ad:75:c9:76:8a:f9:3d:9a:88:af:18:34: 1d:c3:98:a7:90:09:13:89:34:7d:aa:bc:e4:ab:19:89:34:00: a8:0b:33:b0:f9:15:88:49:ed:dd:3a:af:86:31:02:ef:8e:58: fc:47:72:17:6f:50:cc:53:e9:f7:e2:b6:41:00:23:5e:d5:d1: 63:4c:c3:d1:f8:51:92:41:dd:2d:e7:4b:76:ee:87:e5:e7:b9: 3b:ef:3f:43:8e:74:99:0d:2a:94:dd:19:c9:28:95:b6:91:e1: ad:bf:96:0f:5e:89:8c:69:f0:be:83:c8:1f:55:a4:41:35:49: fa:95:9f:26:c4:a0:30:53:e0:f5:07:83:22:ed:24:c6:3c:f8: 1b:e5:f4:7a:e5:e9:6c:9e:8d:3f:43:45:2e:3d:1b:16:d7:d7: 7b:63:40:81:82:1c:15:3e:b9:fa:b7:c9:f5:0c:62:d5:ce:ae: f4:ba:d2:a7:a4:3b:f3:53:7f:f7:59:62:50:50:97:10:a2:b3: c6:16:a2:5b:ab:26:bd:f1:84:ff:f2:38:f6:41:b4:79:3e:7c: 9e:1b:24:e6:e7:52:24:86:4e:67:81:16:a8:51:b2:2d:90:e7: 4b:48:51:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGUYP+3a3HqWJ9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ODM1ZGU0OGMtM2YzZS00MDFhLTg0MjAtYWNmZmFlMDMzNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oO9PxXnJKS7TxNLTvx3hkl0aQRkKnRJm1hz TGwLMUT0zFcUR//m4l0txRe1O3Dpcc3jMF3LEN4r88asDO9AMDCK1OWl/zosYeIh FlzVfJzehm5HQaath3iF2Yy4yHoWPrzg/2SOIlbRgpvlFXVepkDM9lfZIakSaHL6 wclwlWfEFPxc6Rx7euRUoUdiTGI9u912DmrA7cYLoNoGUMWJtJZy65nQeocYuo+3 GlRDrEHuc/hNQEvHuZwtjMAQZCzCx2xuBUqicyywonX1kIkDgC0lz1ix1hr6/sch 8E6vWKCgwi+41VHjyjm8RGFpmji6xK1L8y9aVI30ZC7OAUJpTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOshOBhrVFegipi1P6UYx8TjMjkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjExN2U5NjQtY2U0OS0z MWU0LWI3MmQtOTc0NTQ2NjA1YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRd5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5iSEAXjJxkWX69e8T2GerwY2T04HSBOa11yXaK+T2aiK8YNB3DmKeQ CROJNH2qvOSrGYk0AKgLM7D5FYhJ7d06r4YxAu+OWPxHchdvUMxT6ffitkEAI17V 0WNMw9H4UZJB3S3nS3buh+XnuTvvP0OOdJkNKpTdGckolbaR4a2/lg9eiYxp8L6D yB9VpEE1SfqVnybEoDBT4PUHgyLtJMY8+Bvl9Hrl6WyejT9DRS49GxbX13tjQIGC HBU+ufq3yfUMYtXOrvS60qekO/NTf/dZYlBQlxCis8YWolurJr3xhP/yOPZBtHk+ fJ4bJObnUiSGTmeBFqhRsi2Q50tIUQA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:20:51 2025 by rpki-client