$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0dfafd4-e9fd-3626-a62c-28e3a647765e.roa File: c0dfafd4-e9fd-3626-a62c-28e3a647765e.roa (raw, json) Hash identifier: xugEfuRoaTk7CuVn3R7/wQMxCmEGn/jOD78fxQsrO3Q= Subject key identifier: 5C:DA:CD:08:A4:22:4C:96:D7:C1:F4:8F:42:42:C5:9B:F4:25:3B:08 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201CDD040AAF92B4C1FF880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0dfafd4-e9fd-3626-a62c-28e3a647765e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.29.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:cd:d0:40:aa:f9:2b:4c:1f:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d83352d7-9c7f-4683-9946-9707078aac9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:7d:30:19:a2:e4:78:60:ba:06:15:c5:3e: 43:4c:9d:9c:7a:c5:8f:45:87:53:58:06:56:c0:a1: 9e:39:f6:a5:b0:b3:1b:35:06:06:53:a9:65:6f:8e: 9f:ab:9a:78:fa:53:48:1c:c2:69:36:e6:41:b6:97: 1d:dd:a8:71:d3:a8:f4:45:5e:dc:a8:b7:6d:c9:e5: 76:76:06:88:06:9a:e8:98:7e:91:19:36:51:97:28: 2e:a5:ad:39:2e:d9:4d:4a:50:46:cf:d3:a6:1d:91: 98:cc:05:fc:fb:02:17:6d:d7:21:3b:ff:4e:7d:65: be:40:d3:1b:46:e4:71:4f:c1:90:d1:bd:a3:53:b0: 85:42:2f:68:85:34:3e:88:ab:2e:55:62:5a:b9:b3: 56:b7:44:85:44:c0:a9:c4:2b:f7:b3:e6:4d:bc:d1: 39:89:1a:06:48:e2:2e:cf:e5:97:78:26:37:cf:84: 72:32:3f:05:65:d3:ef:15:83:59:a1:44:9c:d4:54: e6:b1:2b:6d:19:fb:e6:9a:6f:5c:f2:95:05:cc:99: 89:a8:ec:3a:04:15:f7:7d:48:03:f2:df:1c:84:ab: d6:1a:7f:7d:28:ed:f0:02:92:53:b1:5f:d6:a9:14: 39:b7:e3:2c:65:8c:0c:6d:55:b2:af:8c:7d:16:bc: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DA:CD:08:A4:22:4C:96:D7:C1:F4:8F:42:42:C5:9B:F4:25:3B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0dfafd4-e9fd-3626-a62c-28e3a647765e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:db:bc:f4:e0:03:55:b9:13:e0:44:96:76:82:2f:d0:50:75: e7:f6:a8:08:a4:34:5b:37:7b:9b:73:19:37:67:56:b9:2c:ba: 4a:27:f6:91:65:89:58:f9:5d:49:92:66:67:9a:f2:59:8c:88: 54:01:af:d7:11:b2:59:0b:61:d7:9a:d2:9d:3a:3c:14:a0:82: eb:4b:b5:c3:19:40:86:df:85:da:5c:97:16:76:c7:99:71:ba: ea:b2:9b:1f:0d:20:cd:f9:2d:8b:a8:8a:0e:c8:8a:d8:e6:a7: 67:ac:a5:87:f2:56:f4:d9:c5:bb:92:25:bd:6c:ab:ef:fc:46: 91:47:3b:24:cc:b5:64:f0:48:ab:9f:8e:57:9e:05:f8:e8:d4: eb:41:67:b4:f6:4f:55:53:70:79:b1:33:80:1b:de:e0:d4:fa: ef:d4:77:fc:75:3f:9e:b5:cd:82:1b:c9:5d:f4:4e:d5:29:1f: 02:0d:b5:7b:cc:6b:75:97:ef:3d:7b:10:b2:36:e7:37:c8:64: 36:6a:82:08:ef:55:d3:47:9b:05:c0:92:63:a4:1b:59:ba:73: 4d:af:7e:b8:32:17:4a:79:e9:11:c9:46:4f:7b:ed:c6:63:3e: e8:08:e6:90:75:78:57:1d:66:67:0c:58:b0:02:ca:02:f4:00: 38:aa:c6:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAc3QQKr5K0wf+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDgzMzUyZDctOWM3Zi00NjgzLTk5NDYtOTcwNzA3OGFhYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0N9MBmi5HhgugYVxT5DTJ2cesWPRYdTWAZW wKGeOfalsLMbNQYGU6llb46fq5p4+lNIHMJpNuZBtpcd3ahx06j0RV7cqLdtyeV2 dgaIBpromH6RGTZRlygupa05LtlNSlBGz9OmHZGYzAX8+wIXbdchO/9OfWW+QNMb RuRxT8GQ0b2jU7CFQi9ohTQ+iKsuVWJaubNWt0SFRMCpxCv3s+ZNvNE5iRoGSOIu z+WXeCY3z4RyMj8FZdPvFYNZoUSc1FTmsSttGfvmmm9c8pUFzJmJqOw6BBX3fUgD 8t8chKvWGn99KO3wApJTsV/WqRQ5t+MsZYwMbVWyr4x9FryS3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzazQikIkyW18H0j0JCxZv0JTsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzBkZmFmZDQtZTlmZC0z NjI2LWE2MmMtMjhlM2E2NDc3NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXbvPTgA1W5E+BElnaCL9BQdef2qAikNFs3e5tzGTdnVrksukon9pFl iVj5XUmSZmea8lmMiFQBr9cRslkLYdea0p06PBSggutLtcMZQIbfhdpclxZ2x5lx uuqymx8NIM35LYuoig7Iitjmp2espYfyVvTZxbuSJb1sq+/8RpFHOyTMtWTwSKuf jleeBfjo1OtBZ7T2T1VTcHmxM4Ab3uDU+u/Ud/x1P561zYIbyV30TtUpHwINtXvM a3WX7z17ELI25zfIZDZqggjvVdNHmwXAkmOkG1m6c02vfrgyF0p56RHJRk977cZj PugI5pB1eFcdZmcMWLACygL0ADiqxqI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:43 2025 by rpki-client