$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d25917bf-2e9d-3649-b442-b44bf8ddc5aa.roa File: d25917bf-2e9d-3649-b442-b44bf8ddc5aa.roa (raw, json) Hash identifier: bT7oU/CoqkuI1TybFoTljDa3xkRf0ebAieiA4QqIYnc= Subject key identifier: 73:65:10:5A:7D:28:3F:4F:D0:5B:AD:D6:66:9E:29:B4:0C:EA:0C:21 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62023229E48AD771CD4C1B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d25917bf-2e9d-3649-b442-b44bf8ddc5aa.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.16.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:32:29:e4:8a:d7:71:cd:4c:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0e14eabf-1e35-48bb-bbeb-b272dba40a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:d9:0d:2c:44:8d:4a:d5:c6:96:0d:24:df: e3:47:5d:6d:a1:3c:ad:4b:82:11:1c:54:f1:f9:20: cf:f2:0a:a2:11:22:76:d0:da:1a:bd:0a:81:66:43: f3:19:7e:02:f6:51:ef:24:05:a9:49:14:d1:cc:d3: 2f:f2:ae:49:e6:d8:59:10:54:73:72:c8:c6:ba:23: ea:93:69:fb:4d:9e:11:32:ff:d8:8f:f0:8d:eb:10: 11:06:5f:43:c3:f7:20:bf:30:23:98:47:6b:4d:05: ea:18:14:b5:79:be:a6:d6:49:e0:8d:68:48:f2:b5: 4d:5b:a0:d1:60:18:4b:69:a4:4d:db:ff:89:9d:98: c8:7f:c7:fe:e3:39:56:b1:38:07:3d:bc:c7:48:44: c5:fe:25:8e:cd:3d:3a:d9:94:fe:30:79:2b:ad:30: 87:b6:5a:37:6d:45:2d:81:7c:6e:72:ec:d6:48:68: 10:3c:de:4c:4c:29:71:64:11:ef:e4:45:dd:7c:75: ee:47:a8:f3:b7:1f:a0:fa:45:d2:b6:6c:22:34:cf: 3e:6f:a9:3d:fe:78:46:aa:45:db:4d:5e:09:4d:25: e8:aa:d0:ee:71:aa:5c:e4:7f:22:92:c8:d9:de:d6: f1:13:ee:ec:eb:3b:13:10:33:8b:ef:75:eb:64:5f: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:10:5A:7D:28:3F:4F:D0:5B:AD:D6:66:9E:29:B4:0C:EA:0C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d25917bf-2e9d-3649-b442-b44bf8ddc5aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fe:77:a5:99:31:3e:6e:30:45:8a:91:4e:cd:83:15:e4:f3: 57:29:cf:94:74:72:f3:27:25:ac:53:9e:84:98:4b:d9:39:22: 53:e4:df:fd:b5:67:3c:25:cf:3e:65:1c:31:3b:54:42:36:da: 22:9c:9f:1f:0d:18:6e:0c:64:61:0f:e4:6e:fa:f9:2b:e5:42: 4f:f1:0a:6a:7e:91:20:fc:08:5f:db:32:d1:71:a0:69:71:0d: aa:e8:e1:66:02:f6:3c:81:ee:bb:b1:37:fe:73:16:05:f9:9f: d4:b6:bb:32:40:01:ef:d2:6f:20:c5:57:e5:83:d5:ca:3a:72: c8:45:c8:e0:78:11:13:f7:8b:d0:47:88:e1:eb:95:74:38:cd: 17:4d:5a:ce:cf:10:f5:6a:4c:d5:ee:86:de:de:68:42:c2:e9: 16:a2:68:ce:e5:e5:b6:c1:cf:82:fa:e8:29:56:83:07:c2:9d: d7:fb:d8:09:91:9e:21:a5:8d:e6:a3:b8:93:54:c2:91:85:c7: 42:b7:2b:79:9a:3b:0a:71:a2:24:a4:26:d0:07:05:67:d2:cf: 7b:e8:d4:d0:ca:38:1b:06:aa:92:d6:b9:7c:45:40:97:b2:af: 90:1f:96:f0:cf:f5:fe:1d:cc:67:e6:42:47:d5:a2:2d:02:de: 9f:5b:de:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjIp5IrXcc1MG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGUxNGVhYmYtMWUzNS00OGJiLWJiZWItYjI3MmRiYTQwYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPDZDSxEjUrVxpYNJN/jR11toTytS4IRHFTx +SDP8gqiESJ20NoavQqBZkPzGX4C9lHvJAWpSRTRzNMv8q5J5thZEFRzcsjGuiPq k2n7TZ4RMv/Yj/CN6xARBl9Dw/cgvzAjmEdrTQXqGBS1eb6m1kngjWhI8rVNW6DR YBhLaaRN2/+JnZjIf8f+4zlWsTgHPbzHSETF/iWOzT062ZT+MHkrrTCHtlo3bUUt gXxucuzWSGgQPN5MTClxZBHv5EXdfHXuR6jztx+g+kXStmwiNM8+b6k9/nhGqkXb TV4JTSXoqtDucapc5H8iksjZ3tbxE+7s6zsTEDOL73XrZF9WOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNlEFp9KD9P0Fut1maeKbQM6gwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDI1OTE3YmYtMmU5ZC0z NjQ5LWI0NDItYjQ0YmY4ZGRjNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT+d6WZMT5uMEWKkU7NgxXk81cpz5R0cvMnJaxTnoSYS9k5IlPk3/21 Zzwlzz5lHDE7VEI22iKcnx8NGG4MZGEP5G76+SvlQk/xCmp+kSD8CF/bMtFxoGlx Daro4WYC9jyB7ruxN/5zFgX5n9S2uzJAAe/SbyDFV+WD1co6cshFyOB4ERP3i9BH iOHrlXQ4zRdNWs7PEPVqTNXuht7eaELC6RaiaM7l5bbBz4L66ClWgwfCndf72AmR niGljeajuJNUwpGFx0K3K3maOwpxoiSkJtAHBWfSz3vo1NDKOBsGqpLWuXxFQJey r5AflvDP9f4dzGfmQkfVoi0C3p9b3oY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:58 2025 by rpki-client