$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa File: b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa (raw, json) Hash identifier: TSRarWojwuO5s8DD5c/0eSTScq/rV/j4CEZDj0c2Lug= Subject key identifier: D1:C5:52:E9:9D:9E:14:D1:2D:B2:40:B1:EA:9C:52:AF:B1:17:FD:BF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D748843CB0552FB9595A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.23.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:48:84:3c:b0:55:2f:b9:59:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=45b95b94-65e8-4938-aa73-27d19fa967a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:f0:e4:b7:51:fc:7b:21:4e:7f:aa:31:7a: e7:ed:0e:95:45:f4:36:f8:b7:59:5f:40:e9:0d:f4: 9c:2e:93:d7:73:81:7e:ee:d0:4f:60:41:3f:02:e5: b5:12:b1:da:e9:36:68:8d:9f:6c:56:cb:7f:5b:ad: eb:26:64:51:ac:49:93:1d:67:3d:7f:cf:8a:d1:42: 8a:4f:82:0b:87:48:39:83:65:ab:1a:86:97:d7:c5: 4f:f1:1e:00:46:74:ff:f0:4e:10:0b:d1:7f:3e:a8: 70:91:e0:0e:20:19:44:ee:a6:f9:9d:a8:ef:78:b3: 6b:49:3a:c2:96:4f:0b:ec:3b:52:f6:ed:d7:f2:37: fa:e0:73:b3:19:ea:9c:ff:e9:80:a2:12:35:7b:40: 1a:56:15:13:eb:cf:f3:40:e9:97:b4:7a:a9:2a:57: ff:b6:34:cd:5a:2f:0d:64:0f:10:25:26:f1:45:a5: 30:ca:87:f7:c4:4b:13:c1:be:46:d6:e4:4a:73:ca: 1c:88:e1:ca:d5:4b:6c:78:88:42:c4:4c:b9:60:c5: 33:d7:6e:ae:3c:dc:d7:d3:50:ac:2b:48:f8:82:9d: b0:bc:da:b9:58:be:0e:36:97:20:8c:52:27:30:de: 21:bf:74:a5:6e:e8:78:c8:35:ac:e7:74:33:2c:ca: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C5:52:E9:9D:9E:14:D1:2D:B2:40:B1:EA:9C:52:AF:B1:17:FD:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b95fe5e2-9fee-38e9-a46a-64ded748e4bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:78:5a:9c:69:b0:7e:36:11:0e:71:df:51:30:38:44:98:d8: ad:35:cd:3e:76:1b:9a:0e:08:a9:de:48:81:94:62:89:fd:13: d2:3c:13:a5:6d:f2:bf:11:1d:60:e0:24:99:7b:00:4e:47:5c: e2:a1:84:c1:f2:1a:86:d3:2e:67:70:61:39:3e:e2:dd:c4:36: 46:87:f3:5e:16:80:b2:b5:86:5a:82:6a:69:88:4c:f4:c4:dd: 8a:37:a6:e2:29:3a:45:44:89:86:6f:83:f0:c1:91:a8:a1:46: 57:26:de:f9:37:04:58:bf:7c:1d:5e:9a:10:1e:0a:c1:9a:71: 18:c1:b8:34:3c:09:8f:65:a5:4a:eb:4a:fd:aa:14:88:94:e3: 9b:e9:9d:ff:8e:db:ee:d4:cd:4b:32:ba:e1:9b:6d:a4:79:00: af:3c:9d:ed:34:7c:4b:26:56:58:b3:f5:71:61:96:d0:34:a1: ab:88:aa:98:66:1d:d9:3f:6b:5b:93:55:7c:bf:04:06:cb:2e: b3:3b:8c:90:37:89:e8:1f:27:fc:d3:48:b5:8d:2f:68:b1:39: 5c:10:d3:d0:57:b8:46:6a:d1:bc:57:5a:34:65:bf:10:d7:26: 62:f2:d8:65:d0:1e:8d:9c:10:75:47:24:f9:dd:5e:b6:5b:e5: 91:98:0a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10iEPLBVL7lZWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NDViOTViOTQtNjVlOC00OTM4LWFhNzMtMjdkMTlmYTk2N2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Xw5LdR/HshTn+qMXrn7Q6VRfQ2+LdZX0Dp DfScLpPXc4F+7tBPYEE/AuW1ErHa6TZojZ9sVst/W63rJmRRrEmTHWc9f8+K0UKK T4ILh0g5g2WrGoaX18VP8R4ARnT/8E4QC9F/PqhwkeAOIBlE7qb5najveLNrSTrC lk8L7DtS9u3X8jf64HOzGeqc/+mAohI1e0AaVhUT68/zQOmXtHqpKlf/tjTNWi8N ZA8QJSbxRaUwyof3xEsTwb5G1uRKc8ociOHK1UtseIhCxEy5YMUz126uPNzX01Cs K0j4gp2wvNq5WL4ONpcgjFInMN4hv3Slbuh4yDWs53QzLMoFcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHFUumdnhTRLbJAseqcUq+xF/2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjk1ZmU1ZTItOWZlZS0z OGU5LWE0NmEtNjRkZWQ3NDhlNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH94WpxpsH42EQ5x31EwOESY2K01zT52G5oOCKneSIGUYon9E9I8E6Vt 8r8RHWDgJJl7AE5HXOKhhMHyGobTLmdwYTk+4t3ENkaH814WgLK1hlqCammITPTE 3Yo3puIpOkVEiYZvg/DBkaihRlcm3vk3BFi/fB1emhAeCsGacRjBuDQ8CY9lpUrr Sv2qFIiU45vpnf+O2+7UzUsyuuGbbaR5AK88ne00fEsmVliz9XFhltA0oauIqphm Hdk/a1uTVXy/BAbLLrM7jJA3iegfJ/zTSLWNL2ixOVwQ09BXuEZq0bxXWjRlvxDX JmLy2GXQHo2cEHVHJPndXrZb5ZGYCgI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:04 2025 by rpki-client