$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1972a54-b3d0-3a99-9592-99693f401f5c.roa File: d1972a54-b3d0-3a99-9592-99693f401f5c.roa (raw, json) Hash identifier: JP7LxqYsCeAMFXN/0qmasrBQOWJpSgkzehzF3vPB0mQ= Subject key identifier: DC:FA:D8:3C:E2:46:0E:D7:42:7F:F6:89:0A:80:DD:AD:BE:45:44:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475C966399B1F8878BBADD60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1972a54-b3d0-3a99-9592-99693f401f5c.roa Signing time: Mon 22 Sep 2025 11:56:39 +0000 ROA not before: Mon 22 Sep 2025 11:56:39 +0000 ROA not after: Sun 21 Dec 2025 12:56:39 +0000 asID: 19905 IP address blocks: 173.31.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:96:63:99:b1:f8:87:8b:ba:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:39 2025 GMT Not After : Dec 21 12:56:39 2025 GMT Subject: CN=5e043378-f2d6-43c1-85a1-91baca25aa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:34:22:12:35:79:27:83:f4:7b:a6:8a:4a: 23:8e:5f:a9:f9:ad:64:d0:b1:40:56:b0:8a:3c:89: cd:ed:95:4b:76:77:b2:a8:72:3e:6f:ec:7a:c0:4a: 88:01:c0:54:8d:07:36:9b:49:49:eb:98:2b:31:a3: 84:2a:5a:d5:76:c8:22:ba:83:e9:63:bd:98:03:13: eb:3e:d9:46:a9:3b:cd:14:06:b3:d4:9b:8e:90:7d: c2:9d:19:d6:94:20:cb:44:58:73:b2:10:67:08:b6: 95:33:8d:82:ff:fd:7e:0f:12:73:3b:3b:85:ca:3d: fa:89:2e:16:c5:39:0c:a0:c7:fb:ad:be:d5:a1:10: 21:31:36:67:1d:ab:fb:43:98:d2:b3:62:91:22:4a: 68:bf:99:0a:16:a7:f3:40:e6:7a:ce:c9:cc:4b:17: 64:e8:41:27:33:41:bb:fb:fc:f9:3f:e5:cd:a4:3b: f8:61:bf:65:3f:50:31:a1:c8:c5:5d:99:46:50:8a: 32:18:d9:d0:88:78:fa:cf:32:c0:b3:3d:1f:05:ce: 1f:1b:73:92:81:2b:4d:d1:3d:da:f2:4e:1a:be:3a: 24:0a:92:ad:84:e4:e6:41:bb:d1:ce:61:6c:8b:d4: 4a:d1:92:df:19:8f:ec:4a:ca:11:9c:2d:70:34:fd: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FA:D8:3C:E2:46:0E:D7:42:7F:F6:89:0A:80:DD:AD:BE:45:44:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1972a54-b3d0-3a99-9592-99693f401f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e3:9c:95:0f:34:9f:17:7a:eb:7d:dd:76:6f:ab:ba:f8:06: 44:d0:e1:a8:03:6a:ee:36:54:ae:7a:bd:a5:f0:10:28:8e:9f: fe:10:65:3d:8d:d9:f7:5c:8c:76:59:41:de:92:57:2f:1f:eb: a4:15:b3:23:86:37:ab:34:fe:10:53:a6:6c:50:2b:e7:3f:7e: d2:97:19:af:f7:6e:b2:19:06:b7:cd:f3:0a:ed:02:9d:a9:ae: 83:25:4a:24:dd:95:67:5c:7b:2d:e6:5a:04:eb:9c:b6:93:b8: e0:97:70:18:49:70:6c:85:58:c8:a1:47:d1:f6:0b:e8:d3:8e: 8a:ea:b8:c8:52:c4:1c:a3:5a:59:4e:81:db:59:b2:1b:2e:5f: 4e:a9:7c:a7:c5:17:7d:a1:62:78:58:41:19:05:0b:68:3d:39: 13:0b:ae:87:35:96:9f:54:57:88:1b:a5:04:25:c2:97:97:f5: 1e:c5:b8:ea:d3:0c:e9:a3:f8:b2:6d:78:1d:2b:07:ca:97:d1: 6c:93:83:ba:c2:1f:53:5a:cb:c0:43:a5:7e:dc:01:a2:0c:05: 38:f0:7a:fd:11:43:9b:6f:70:f0:36:67:1c:ca:ad:81:8f:b2: ed:ba:46:dd:76:db:93:15:e7:93:4c:6b:99:ea:50:9f:ab:57: 43:d2:fe:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXJZjmbH4h4u63WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTYzOVoXDTI1MTIyMTEyNTYzOVowLzEtMCsGA1UEAxMk NWUwNDMzNzgtZjJkNi00M2MxLTg1YTEtOTFiYWNhMjVhYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyY0IhI1eSeD9Humikojjl+p+a1k0LFAVrCK PInN7ZVLdneyqHI+b+x6wEqIAcBUjQc2m0lJ65grMaOEKlrVdsgiuoPpY72YAxPr PtlGqTvNFAaz1JuOkH3CnRnWlCDLRFhzshBnCLaVM42C//1+DxJzOzuFyj36iS4W xTkMoMf7rb7VoRAhMTZnHav7Q5jSs2KRIkpov5kKFqfzQOZ6zsnMSxdk6EEnM0G7 +/z5P+XNpDv4Yb9lP1AxocjFXZlGUIoyGNnQiHj6zzLAsz0fBc4fG3OSgStN0T3a 8k4avjokCpKthOTmQbvRzmFsi9RK0ZLfGY/sSsoRnC1wNP0AiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz62DziRg7XQn/2iQqA3a2+RUQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDE5NzJhNTQtYjNkMC0z YTk5LTk1OTItOTk2OTNmNDAxZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTjnJUPNJ8Xeut93XZvq7r4BkTQ4agDau42VK56vaXwECiOn/4QZT2N 2fdcjHZZQd6SVy8f66QVsyOGN6s0/hBTpmxQK+c/ftKXGa/3brIZBrfN8wrtAp2p roMlSiTdlWdcey3mWgTrnLaTuOCXcBhJcGyFWMihR9H2C+jTjorquMhSxByjWllO gdtZshsuX06pfKfFF32hYnhYQRkFC2g9ORMLroc1lp9UV4gbpQQlwpeX9R7FuOrT DOmj+LJteB0rB8qX0WyTg7rCH1Nay8BDpX7cAaIMBTjwev0RQ5tvcPA2ZxzKrYGP su26Rt1225MV55NMa5nqUJ+rV0PS/oM= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:59 2025 by rpki-client