$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa File: bdaa0aba-b515-360a-8168-d64f29315153.roa (raw, json) Hash identifier: R3v+ALA7kTMEBiCyepNDpRZ6o1OJZDioe2b+TKH4znc= Subject key identifier: 48:30:55:C5:91:28:00:BB:A3:17:76:67:25:40:99:82:A3:6E:C7:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BB45D19FE1781156CF8B42180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 19905 IP address blocks: 173.29.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:19:fe:17:81:15:6c:f8:b4:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=d5a85611-7f52-4538-a2c4-0a5d50e681bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:a1:6e:6c:92:d2:b6:58:8a:a3:b6:3c:72: 2f:2f:b7:1d:ea:cb:44:52:3d:d0:19:a8:a5:65:92: 36:64:14:2a:d3:eb:7c:1c:ac:cf:b8:2f:b5:a3:ae: f7:6f:06:fc:3b:9c:6e:60:e1:30:e1:5c:b9:95:0a: eb:a6:c8:37:ed:d5:cd:19:84:7c:1e:47:03:f8:6c: 56:b3:a3:6b:72:b5:1a:8b:df:32:cc:85:e2:57:0e: 6e:3d:94:a5:9a:41:4d:d3:62:e1:81:2f:f5:cc:5b: 04:8b:03:6f:dd:29:ad:fa:bf:a8:bb:62:48:6a:09: 46:42:f5:60:c9:91:cd:c6:11:fe:23:5c:78:60:14: 6f:80:68:a6:81:75:c5:41:d2:bf:22:45:e0:62:00: a3:95:6f:47:cf:e2:77:b0:cf:e8:6f:57:91:b7:6b: a9:d9:1c:f8:a3:ae:02:5a:80:ef:b6:5c:d0:2c:10: 07:f1:ee:60:94:e1:ce:1a:a7:a7:ce:fb:b1:77:64: f1:7b:56:e1:29:37:3e:e2:42:d2:9d:27:cb:28:e4: 32:4b:32:de:fd:46:04:a1:08:67:48:94:bc:e9:8b: 2c:7b:2b:98:88:3b:6e:a1:ba:f9:5b:89:0b:32:a5: 13:db:7c:38:47:a2:82:96:cb:40:5a:ee:a2:06:5c: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:30:55:C5:91:28:00:BB:A3:17:76:67:25:40:99:82:A3:6E:C7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:66:db:4d:41:65:3d:2d:8c:f3:90:0a:3c:d3:bb:8b:0a:c8: f1:27:17:de:fc:e6:cd:e8:8f:ea:86:90:27:ff:22:3e:2a:bf: ff:9b:e9:1a:f5:61:43:41:d3:31:22:fe:ff:68:bd:63:ae:27: d3:e0:e1:b9:28:f9:49:45:d2:c5:da:1f:f8:04:41:53:d4:0f: 34:da:1b:bc:a5:e0:f7:27:da:48:1d:19:21:0a:9b:62:59:26: d5:6b:51:d4:e4:75:b5:87:88:e3:5d:66:af:67:1f:f1:62:20: 9b:6a:7b:bc:e5:dc:be:94:d3:e9:62:06:ff:91:e0:b6:a8:a3: 65:51:8b:c2:77:1e:cd:a5:09:8e:a6:41:80:a5:71:22:e7:07: c1:37:41:ce:58:89:2c:b0:18:d0:ea:7a:54:a1:43:00:d0:c0: f2:85:c1:96:86:89:65:01:fe:ee:68:9d:29:5e:ef:28:85:92: 29:44:7d:59:91:e7:af:44:ec:86:71:4c:ed:b7:d8:f0:a9:e8: 86:8c:59:20:2f:43:f6:41:f7:69:4e:29:9f:12:37:5a:c9:90: 3f:40:5e:63:9d:39:62:55:32:a9:76:fc:aa:0d:17:99:fe:65: bd:a6:a8:34:65:ec:66:c0:69:df:67:97:06:d5:93:20:ea:36: 69:4d:d7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRn+F4EVbPi0IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZDVhODU2MTEtN2Y1Mi00NTM4LWEyYzQtMGE1ZDUwZTY4MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolyhbmyS0rZYiqO2PHIvL7cd6stEUj3QGail ZZI2ZBQq0+t8HKzPuC+1o673bwb8O5xuYOEw4Vy5lQrrpsg37dXNGYR8HkcD+GxW s6NrcrUai98yzIXiVw5uPZSlmkFN02LhgS/1zFsEiwNv3Smt+r+ou2JIaglGQvVg yZHNxhH+I1x4YBRvgGimgXXFQdK/IkXgYgCjlW9Hz+J3sM/ob1eRt2up2Rz4o64C WoDvtlzQLBAH8e5glOHOGqenzvuxd2Txe1bhKTc+4kLSnSfLKOQySzLe/UYEoQhn SJS86YsseyuYiDtuobr5W4kLMqUT23w4R6KClstAWu6iBly8/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgwVcWRKAC7oxd2ZyVAmYKjbseyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRhYTBhYmEtYjUxNS0z NjBhLTgxNjgtZDY0ZjI5MzE1MTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlm201BZT0tjPOQCjzTu4sKyPEnF9785s3oj+qGkCf/Ij4qv/+b6Rr1 YUNB0zEi/v9ovWOuJ9Pg4bko+UlF0sXaH/gEQVPUDzTaG7yl4Pcn2kgdGSEKm2JZ JtVrUdTkdbWHiONdZq9nH/FiIJtqe7zl3L6U0+liBv+R4Laoo2VRi8J3Hs2lCY6m QYClcSLnB8E3Qc5YiSywGNDqelShQwDQwPKFwZaGiWUB/u5onSle7yiFkilEfVmR 569E7IZxTO232PCp6IaMWSAvQ/ZB92lOKZ8SN1rJkD9AXmOdOWJVMql2/KoNF5n+ Zb2mqDRl7GbAad9nlwbVkyDqNmlN16Y= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:01 2025 by rpki-client