$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc164cd8-0fb9-3927-b16c-c5362237f2d5.roa File: bc164cd8-0fb9-3927-b16c-c5362237f2d5.roa (raw, json) Hash identifier: 5yUOq30+mBTc88fMzjCghjyWjzxrEKAVmV++vjYMDcc= Subject key identifier: 4E:02:B5:2B:0B:CA:7C:54:43:41:47:6F:87:F0:07:E3:36:4D:BB:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB58A16DF37533CC15E40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc164cd8-0fb9-3927-b16c-c5362237f2d5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.29.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b5:8a:16:df:37:53:3c:c1:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4322f55a-e05e-4e67-a57a-17eecbe74b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:16:eb:e8:c9:dd:86:f5:73:f6:6e:20:97:f5: 5e:21:65:60:76:2a:18:7d:bf:9d:9d:de:90:7c:63: 6c:64:13:17:dc:8d:8f:4f:9b:69:34:1c:6d:e8:07: e3:ab:44:77:5c:61:fc:3b:20:b1:ce:81:cc:50:d6: 14:17:01:15:95:ef:64:4c:b0:8d:9d:bf:55:00:f6: 42:31:05:d6:4d:de:59:89:16:a8:62:f9:f6:f0:56: fb:22:9a:e1:21:76:e9:93:08:58:f7:76:10:9d:04: 97:64:f2:30:74:b8:a8:ba:bf:c4:8a:52:68:10:d5: f8:87:40:d3:e8:50:15:39:97:a4:db:c2:2d:61:d5: ab:c0:72:81:26:12:af:c7:a3:c7:fc:c3:07:9e:6e: a5:bd:7e:cb:a1:c7:c5:18:ea:25:c8:72:7d:a7:c3: bb:f4:78:74:05:8c:67:1f:a4:47:98:88:9d:6a:1e: 53:68:e9:55:b1:f3:51:df:6d:d8:20:15:48:8f:a6: 48:06:06:91:50:75:4a:dd:3d:a2:0a:58:fb:0a:0b: 9e:0a:f4:d7:09:f1:ef:cc:72:4a:18:57:21:86:5a: 9f:63:fc:98:6c:60:f8:55:8d:d7:fa:17:ab:64:08: 4c:1a:bf:a3:bd:48:7e:b1:f1:6a:e9:0b:80:dd:37: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:02:B5:2B:0B:CA:7C:54:43:41:47:6F:87:F0:07:E3:36:4D:BB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc164cd8-0fb9-3927-b16c-c5362237f2d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:fd:a4:e5:72:11:d1:f2:c1:c7:16:d1:84:6f:de:9b:1a:76: 81:81:d1:44:1b:6f:fe:e9:52:68:19:35:75:80:bd:1a:f4:e3: ce:dc:50:7e:11:f9:4a:1b:59:cc:8d:4c:b7:3d:0f:8b:d7:4d: 88:ac:02:44:03:79:df:1f:59:be:fa:70:79:b7:88:52:e7:23: 30:58:f9:79:02:91:61:02:30:fe:6e:ff:78:f0:e2:fe:c7:a7: b1:6e:55:7f:d3:4e:f6:67:ca:d5:0c:b8:0d:f1:94:ae:ba:87: 5c:76:93:a4:82:b4:97:16:32:d8:46:88:16:6c:e2:89:4b:b8: d7:4d:49:85:09:64:fe:64:85:42:18:4c:2e:21:33:c1:ee:b8: 35:90:ca:29:04:a3:02:90:be:ac:31:a1:52:47:a0:e7:a1:93: 8f:02:96:e9:03:0c:59:90:95:47:75:e4:5a:f5:39:d1:02:13: f5:0b:36:e7:20:66:86:b7:1b:93:c8:8d:e4:5c:9b:23:19:e8: 0f:1b:18:fe:01:10:6a:92:06:e1:1b:3d:1f:5d:9e:c3:e2:2a: 77:69:ed:56:47:37:62:c0:8b:7a:9a:19:02:58:53:80:d2:90: 06:00:3b:c9:2c:5c:2b:b7:fb:e8:f4:b2:db:3d:25:a2:b1:e2: 8b:71:ef:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLWKFt83UzzBXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDMyMmY1NWEtZTA1ZS00ZTY3LWE1N2EtMTdlZWNiZTc0YjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xbr6MndhvVz9m4gl/VeIWVgdioYfb+dnd6Q fGNsZBMX3I2PT5tpNBxt6Afjq0R3XGH8OyCxzoHMUNYUFwEVle9kTLCNnb9VAPZC MQXWTd5ZiRaoYvn28Fb7IprhIXbpkwhY93YQnQSXZPIwdLiour/EilJoENX4h0DT 6FAVOZek28ItYdWrwHKBJhKvx6PH/MMHnm6lvX7LocfFGOolyHJ9p8O79Hh0BYxn H6RHmIidah5TaOlVsfNR323YIBVIj6ZIBgaRUHVK3T2iClj7CgueCvTXCfHvzHJK GFchhlqfY/yYbGD4VY3X+herZAhMGr+jvUh+sfFq6QuA3TeT+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4CtSsLynxUQ0FHb4fwB+M2Tbs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmMxNjRjZDgtMGZiOS0z OTI3LWIxNmMtYzUzNjIyMzdmMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC79pOVyEdHywccW0YRv3psadoGB0UQbb/7pUmgZNXWAvRr0487cUH4R +UobWcyNTLc9D4vXTYisAkQDed8fWb76cHm3iFLnIzBY+XkCkWECMP5u/3jw4v7H p7FuVX/TTvZnytUMuA3xlK66h1x2k6SCtJcWMthGiBZs4olLuNdNSYUJZP5khUIY TC4hM8HuuDWQyikEowKQvqwxoVJHoOehk48ClukDDFmQlUd15Fr1OdECE/ULNucg Zoa3G5PIjeRcmyMZ6A8bGP4BEGqSBuEbPR9dnsPiKndp7VZHN2LAi3qaGQJYU4DS kAYAO8ksXCu3++j0sts9JaKx4otx72w= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:11 2025 by rpki-client