$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa File: c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa (raw, json) Hash identifier: slh9Z0cYgHW8Z1vKMPos6JEhhXOn6VXMU4pHvy1RHfs= Subject key identifier: ED:ED:C8:11:9B:93:99:CC:43:C2:0C:1A:BB:12:2C:7F:FA:35:83:4B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797EF7CA5D508D05C41B740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.29.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ef:7c:a5:d5:08:d0:5c:41:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=65eab367-629f-43e3-8693-5cd9a520474d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4c:96:73:e9:4a:5f:79:98:32:d5:a9:4c:78: 55:ce:76:b6:d9:c1:b8:5d:33:26:8e:d6:73:8d:ca: a2:88:e6:7c:70:9a:49:2a:e1:a3:34:ce:f6:e8:db: 70:b9:c9:3f:4b:0b:6c:f8:dc:f9:c2:d5:2a:b5:be: 23:4b:61:f4:65:c9:5a:15:77:cf:f9:81:6d:e2:4d: 26:f2:fd:e1:be:ed:70:91:f0:d4:66:d0:9c:c7:fc: 8f:86:c2:22:29:7d:e1:86:20:a5:d8:12:e7:da:f6: cc:58:90:51:a1:13:ab:c4:32:37:d5:3f:11:df:db: 7d:4f:f4:6a:cc:5d:31:e2:20:c2:e8:99:47:6a:b3: 6c:d6:1c:7a:1b:95:21:e1:90:f0:77:2c:f0:ab:ff: 1e:79:54:3e:08:45:1c:ed:cf:95:0b:14:d3:91:a6: ce:c1:d4:13:2c:11:2f:5b:74:04:0a:30:41:cd:4e: be:4a:96:ba:42:1d:d8:84:55:a6:78:a0:3f:87:e4: 4e:34:1e:98:d6:92:9e:c3:06:0f:32:9f:a3:52:1b: 85:cc:0a:1d:fe:6b:2e:1f:43:02:97:85:32:1c:67: 37:b8:bd:04:3f:15:35:27:a4:9a:84:ec:91:67:89: ef:23:05:7b:48:bf:a0:d7:65:3d:f0:5b:2a:95:ea: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:ED:C8:11:9B:93:99:CC:43:C2:0C:1A:BB:12:2C:7F:FA:35:83:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:89:0f:42:34:29:f6:e2:bd:f8:9d:41:ad:a3:89:64:87:6c: 1f:ab:8a:aa:ec:f6:60:85:d2:f7:71:3d:98:7f:ec:45:eb:9a: 91:95:e4:3e:67:1a:cf:18:c3:07:a8:6e:3a:a6:80:9b:c0:01: 84:8b:df:42:28:4f:59:6c:81:41:52:24:04:8d:35:b8:7b:74: 82:86:55:a1:dc:cf:ce:f8:f7:6a:b7:14:a0:1a:7f:1c:ef:7d: 5d:af:30:60:01:4d:39:84:09:61:3d:fb:18:fa:be:d4:31:7b: 6b:8a:35:5b:3f:23:c9:bc:12:c5:40:7d:dc:e6:ca:5d:74:d8: 3f:56:fb:71:e0:e8:0b:a4:63:4a:0d:ba:e8:1d:62:ac:90:2c: ae:30:db:50:ca:4f:64:7d:97:4d:28:33:15:a2:d4:2d:f4:63: 62:5c:9b:96:90:1f:30:9f:72:ea:6e:01:f4:ad:6b:8d:9a:2c: 06:65:4e:c1:7d:da:7e:a8:5b:91:68:8d:17:a0:49:a4:49:88: 4f:85:04:ea:5f:44:bc:94:71:3d:8e:9c:78:0e:38:13:bd:be: f3:61:e9:56:52:95:87:af:76:55:b1:fb:d5:75:9e:30:3d:67: a5:7e:54:88:8b:74:df:7d:98:5a:e5:2a:e4:39:34:51:27:79: 78:0b:13:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+98pdUI0FxBt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjVlYWIzNjctNjI5Zi00M2UzLTg2OTMtNWNkOWE1MjA0NzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0yWc+lKX3mYMtWpTHhVzna22cG4XTMmjtZz jcqiiOZ8cJpJKuGjNM726Ntwuck/Swts+Nz5wtUqtb4jS2H0ZclaFXfP+YFt4k0m 8v3hvu1wkfDUZtCcx/yPhsIiKX3hhiCl2BLn2vbMWJBRoROrxDI31T8R39t9T/Rq zF0x4iDC6JlHarNs1hx6G5Uh4ZDwdyzwq/8eeVQ+CEUc7c+VCxTTkabOwdQTLBEv W3QECjBBzU6+Spa6Qh3YhFWmeKA/h+RONB6Y1pKewwYPMp+jUhuFzAod/msuH0MC l4UyHGc3uL0EPxU1J6SahOyRZ4nvIwV7SL+g12U98Fsqleo8bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3tyBGbk5nMQ8IMGrsSLH/6NYNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzFjNzhhMTktZDlkNS0z ZmEyLWJjMGMtNTJlYWMxNTQwYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKJD0I0KfbivfidQa2jiWSHbB+riqrs9mCF0vdxPZh/7EXrmpGV5D5n Gs8YwweobjqmgJvAAYSL30IoT1lsgUFSJASNNbh7dIKGVaHcz87492q3FKAafxzv fV2vMGABTTmECWE9+xj6vtQxe2uKNVs/I8m8EsVAfdzmyl102D9W+3Hg6AukY0oN uugdYqyQLK4w21DKT2R9l00oMxWi1C30Y2Jcm5aQHzCfcupuAfSta42aLAZlTsF9 2n6oW5FojRegSaRJiE+FBOpfRLyUcT2OnHgOOBO9vvNh6VZSlYevdlWx+9V1njA9 Z6V+VIiLdN99mFrlKuQ5NFEneXgLE3k= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:41 2025 by rpki-client