$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa File: c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa (raw, json) Hash identifier: df+bng+GnAkTejhyvkqPwmuP767S4ZAiAKEicnmlstU= Subject key identifier: 91:D8:5A:B7:CF:E8:C9:08:C0:86:08:57:69:1C:7C:72:B1:C2:A1:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B679740FB2B950F378AE80380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.31.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:40:fb:2b:95:0f:37:8a:e8:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=54ecbc2d-1a57-4be5-8e69-6c2ea6d99d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:9e:67:2b:24:a9:44:2a:c1:55:f0:5a:44: 4b:bb:22:5f:be:ec:67:ac:b8:ab:00:46:06:a1:41: 45:65:41:b8:4c:73:19:f6:c6:17:df:94:a3:32:e5: 05:38:42:cb:32:2e:f7:da:23:53:ca:ec:4b:a6:ca: 97:0d:02:78:75:84:4c:2b:4e:8d:c0:3d:35:6e:0d: be:24:c8:65:88:50:db:11:36:c8:ec:a1:70:f9:0a: 84:a4:55:b7:7c:f6:24:31:9c:f2:2c:18:4b:e0:5a: 76:71:45:23:55:7a:fd:c8:29:9e:d5:ce:12:0f:c7: 3a:45:98:f0:d7:65:98:3a:62:6b:57:fd:da:1f:00: 6f:f0:24:31:4f:42:3f:09:eb:f7:31:66:4e:81:04: 39:f0:12:d7:bc:5a:2d:13:dc:b0:9f:73:f4:98:fe: e8:12:d6:ef:fe:c9:c4:ad:11:46:0b:0d:5d:cf:a6: 0a:58:58:07:9a:5f:3a:3f:8b:82:9a:56:f3:09:8a: c1:53:64:43:b3:08:a8:21:53:05:7e:84:12:2f:20: 9a:08:ef:aa:aa:23:7a:c0:10:69:7d:37:12:b2:40: ce:51:47:dc:69:1b:13:b3:02:9c:0b:7a:c4:63:fa: ca:49:05:7a:3f:fd:2e:e2:6a:e8:c7:29:e7:88:ab: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D8:5A:B7:CF:E8:C9:08:C0:86:08:57:69:1C:7C:72:B1:C2:A1:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:0e:30:38:da:02:4a:df:f0:3d:5f:f8:dc:74:87:0c:11:13: 10:1f:e3:4c:d6:17:1c:b1:d4:52:82:1d:99:21:e9:29:3f:2e: 59:ea:4e:99:eb:1b:c0:ef:2a:c2:17:f0:75:4d:4a:9a:1a:eb: 31:ca:53:3d:27:f5:a4:02:aa:55:30:a3:b7:48:c4:33:26:3b: c7:46:0f:f7:10:03:f6:ad:44:43:c1:1f:4a:b1:8c:fc:f5:eb: 17:81:74:cb:86:5a:6e:61:b4:a7:49:9b:16:e0:32:22:eb:94: 18:cc:23:fc:95:3c:6d:11:c9:35:87:1d:37:30:3b:be:0a:20: f0:47:a2:dc:b8:d5:36:c8:b1:67:55:34:3b:92:38:a8:21:53: a0:da:32:5c:a1:60:93:cc:84:bd:79:67:c1:80:5a:6d:8a:c6: ef:a1:83:37:84:db:22:ec:06:48:eb:42:e7:4c:f5:0e:06:15: 34:29:a9:a4:43:ee:92:df:31:9a:f6:d8:2d:54:bf:ef:49:6c: 5e:de:4a:a3:f0:92:d0:c0:df:93:89:2b:a5:c2:7d:46:1b:92: 2a:81:b7:4c:76:94:ab:52:ac:33:b8:6b:87:61:0d:68:4e:53: e6:4d:e6:d8:51:5a:f5:df:2b:b7:d2:85:96:32:14:16:89:49: 5b:69:68:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0D7K5UPN4roA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTRlY2JjMmQtMWE1Ny00YmU1LThlNjktNmMyZWE2ZDk5ZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHyeZyskqUQqwVXwWkRLuyJfvuxnrLirAEYG oUFFZUG4THMZ9sYX35SjMuUFOELLMi732iNTyuxLpsqXDQJ4dYRMK06NwD01bg2+ JMhliFDbETbI7KFw+QqEpFW3fPYkMZzyLBhL4Fp2cUUjVXr9yCme1c4SD8c6RZjw 12WYOmJrV/3aHwBv8CQxT0I/Cev3MWZOgQQ58BLXvFotE9ywn3P0mP7oEtbv/snE rRFGCw1dz6YKWFgHml86P4uCmlbzCYrBU2RDswioIVMFfoQSLyCaCO+qqiN6wBBp fTcSskDOUUfcaRsTswKcC3rEY/rKSQV6P/0u4mroxynniKvKMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHYWrfP6MkIwIYIV2kcfHKxwqHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzVhOWQzZjItODYwZi0z MGRiLWFlYzUtYzlkNWRkYjU5MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUOMDjaAkrf8D1f+Nx0hwwRExAf40zWFxyx1FKCHZkh6Sk/LlnqTpnr G8DvKsIX8HVNSpoa6zHKUz0n9aQCqlUwo7dIxDMmO8dGD/cQA/atREPBH0qxjPz1 6xeBdMuGWm5htKdJmxbgMiLrlBjMI/yVPG0RyTWHHTcwO74KIPBHoty41TbIsWdV NDuSOKghU6DaMlyhYJPMhL15Z8GAWm2Kxu+hgzeE2yLsBkjrQudM9Q4GFTQpqaRD 7pLfMZr22C1Uv+9JbF7eSqPwktDA35OJK6XCfUYbkiqBt0x2lKtSrDO4a4dhDWhO U+ZN5thRWvXfK7fShZYyFBaJSVtpaHs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:15 2025 by rpki-client