$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa File: c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa (raw, json) Hash identifier: 8QRpc6NcluqDJqi1MGRAShj8T+LBsOUl2V6Et6jIiZA= Subject key identifier: B8:F3:D3:47:4E:0E:D4:E9:B7:35:5C:E9:5A:BD:C0:1E:63:DF:9E:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201FCD1D1CA489833A45EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.29.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fc:d1:d1:ca:48:98:33:a4:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e4e0f97d-6d48-4cf0-926f-c6a8ed2b72cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:10:3c:dd:5f:09:87:e7:4c:4b:7b:a4:c8: 99:71:73:b4:19:36:72:1b:36:e1:d7:26:93:c1:08: 32:b6:9c:1d:47:95:bb:66:fa:97:9d:83:15:6d:3a: 6b:71:37:4c:21:f8:28:36:98:da:76:c1:24:ec:dd: 2b:9d:45:21:f4:9e:0c:29:dc:41:e6:9f:3e:81:3c: a4:12:eb:bb:f6:f8:35:6e:6d:36:d2:57:71:d1:8b: 6e:5a:fd:ac:d3:0f:80:f8:f3:88:49:ee:f1:e7:cd: 77:e1:c9:0e:9f:d6:91:da:53:8a:7e:2f:20:15:cb: 36:b3:9a:50:13:db:f6:9a:5b:b4:4c:de:d1:2b:ff: e0:05:a8:97:f4:b1:16:31:2b:12:3d:87:25:a4:29: 5e:84:dc:b6:c9:08:48:73:a4:35:e1:ac:16:5f:5c: 44:6a:a8:ae:49:bc:26:12:8e:72:14:5c:f1:54:45: 5b:a0:85:19:1c:4e:04:12:ce:55:fa:33:a8:5b:e5: 46:a0:62:88:eb:5a:aa:d5:03:d0:95:6d:86:aa:4c: db:b0:11:31:a4:48:82:fa:bd:38:a4:53:20:0a:ad: 38:9c:4b:48:7d:ae:d4:6f:00:2e:16:a1:28:a5:b1: a2:a2:7f:f9:af:28:f2:16:3b:48:a3:d8:47:ca:20: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F3:D3:47:4E:0E:D4:E9:B7:35:5C:E9:5A:BD:C0:1E:63:DF:9E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9d:f8:d8:9a:35:e8:db:da:ff:a9:c4:e4:39:46:a3:b4:45: 62:58:d5:51:93:06:3b:72:88:44:28:d8:dd:60:10:3f:df:e3: 11:6b:ee:ec:89:df:bb:75:ff:79:8d:3c:ab:0f:1b:86:0f:b2: c5:4a:b3:c4:ec:b2:1d:62:74:3b:c5:fc:d1:f0:23:1d:31:61: 36:5b:14:6e:86:3b:61:c9:5e:e3:5a:48:ed:b6:80:4c:69:61: 2d:c2:18:88:f8:a8:21:54:9b:08:aa:a0:30:61:2b:1e:a3:78: 65:04:03:80:1a:93:64:6d:03:02:46:5c:bb:23:e2:c3:11:b1: 52:92:a5:53:29:0c:e8:d2:b2:78:58:b6:67:a9:e0:dd:be:c2: b8:52:ee:c1:f4:f2:6f:70:e9:55:4f:59:c6:ec:62:2d:f1:15: 54:c1:43:d9:b0:40:4f:e9:ed:7a:27:22:cc:bc:f0:a4:18:48: 16:a9:bc:7d:51:9a:b8:99:a3:11:b1:2e:11:49:2a:1b:3e:cf: a5:71:f2:f2:45:2a:18:0d:78:34:f6:a1:4f:ba:8a:dd:2b:c1: 1f:80:50:cc:9c:38:33:90:13:ec:dd:66:54:b4:89:a7:d2:10: 39:83:57:8d:0a:48:d2:63:27:aa:cb:4f:54:c0:cf:9d:0b:40: 48:82:1f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfzR0cpImDOkXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTRlMGY5N2QtNmQ0OC00Y2YwLTkyNmYtYzZhOGVkMmI3MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/kQPN1fCYfnTEt7pMiZcXO0GTZyGzbh1yaT wQgytpwdR5W7ZvqXnYMVbTprcTdMIfgoNpjadsEk7N0rnUUh9J4MKdxB5p8+gTyk Euu79vg1bm020ldx0YtuWv2s0w+A+POISe7x58134ckOn9aR2lOKfi8gFcs2s5pQ E9v2mlu0TN7RK//gBaiX9LEWMSsSPYclpClehNy2yQhIc6Q14awWX1xEaqiuSbwm Eo5yFFzxVEVboIUZHE4EEs5V+jOoW+VGoGKI61qq1QPQlW2GqkzbsBExpEiC+r04 pFMgCq04nEtIfa7UbwAuFqEopbGion/5ryjyFjtIo9hHyiDtsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjz00dODtTptzVc6Vq9wB5j3550MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMxYWM5MDEtMmQ4Ny0z YWNiLThhYTQtMmFmMWViNGU2NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACad+NiaNejb2v+pxOQ5RqO0RWJY1VGTBjtyiEQo2N1gED/f4xFr7uyJ 37t1/3mNPKsPG4YPssVKs8Tssh1idDvF/NHwIx0xYTZbFG6GO2HJXuNaSO22gExp YS3CGIj4qCFUmwiqoDBhKx6jeGUEA4Aak2RtAwJGXLsj4sMRsVKSpVMpDOjSsnhY tmep4N2+wrhS7sH08m9w6VVPWcbsYi3xFVTBQ9mwQE/p7XonIsy88KQYSBapvH1R mriZoxGxLhFJKhs+z6Vx8vJFKhgNeDT2oU+6it0rwR+AUMycODOQE+zdZlS0iafS EDmDV40KSNJjJ6rLT1TAz50LQEiCH+4= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:18 2025 by rpki-client