$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418e312-81b0-30a2-b7ab-75e8d20be3e7.roa File: d418e312-81b0-30a2-b7ab-75e8d20be3e7.roa (raw, json) Hash identifier: kFa6YHqlYUUT50cZPDyaCdxPy4nZI/pEJwxkFi3O4+o= Subject key identifier: 3D:04:37:DC:27:5A:B5:76:E6:03:12:A7:E3:4E:1B:6A:FB:17:88:AC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA39CF34E1E8E42FFBE811F70 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418e312-81b0-30a2-b7ab-75e8d20be3e7.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 173.23.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f3:4e:1e:8e:42:ff:be:81:1f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=bb74ee2b-1c56-4561-b73e-e0c70e8904e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:b6:90:cd:6a:10:36:be:0e:87:ef:32:fb: ac:c1:88:e4:50:6d:51:d1:57:69:4b:d1:ed:92:8c: c3:72:ad:ff:9d:f8:28:e0:6c:b2:ad:db:b6:2a:d4: 9c:2e:31:c8:a4:ff:b2:26:84:41:00:0e:f8:79:fd: af:c4:36:4b:d4:d3:2a:9c:37:67:d2:43:8a:30:35: a6:a0:fa:fc:ee:0d:54:a1:91:4a:46:fa:eb:cc:51: c4:90:e0:54:a9:3d:5c:97:c8:23:b7:24:48:28:9d: 82:9d:dc:e9:61:b6:52:78:70:0f:45:a8:20:9b:9d: 6e:f3:ec:54:4f:f7:3a:f0:46:b4:5f:dc:f1:da:55: 74:2b:48:bf:1d:b1:a5:1c:a5:7b:99:be:3b:4c:b7: 18:0c:4d:b2:c1:f5:9a:d2:26:74:58:c5:7f:bc:de: b9:5a:d0:8f:34:72:a7:62:fe:3f:a9:bd:f6:2c:da: 2f:fc:3d:08:0e:1d:b6:13:65:7b:50:4d:91:8e:69: fd:f9:c6:04:0c:83:7a:38:e4:81:4f:59:f4:5b:02: f7:e8:5c:a4:a5:df:56:e4:e8:ce:97:c0:c3:73:ef: b7:9f:e6:32:7d:5d:f7:74:82:9d:0e:ce:0d:8f:f5: 1d:bd:cd:b6:83:df:1f:cc:54:89:04:01:52:8f:31: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:04:37:DC:27:5A:B5:76:E6:03:12:A7:E3:4E:1B:6A:FB:17:88:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418e312-81b0-30a2-b7ab-75e8d20be3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7c:88:79:5c:50:8c:fa:88:06:a1:42:eb:db:b9:ea:5b:b1: 4d:e2:90:21:83:b0:28:cd:2c:61:0c:68:e5:0a:92:f8:1c:46: f9:d3:8c:f3:ce:60:dc:3c:75:5a:8e:1a:f2:f8:5b:d7:ee:33: c4:3d:26:61:cc:87:f4:e6:90:5c:d9:57:52:85:57:30:d5:ba: 39:28:16:ca:7e:aa:87:e8:85:d0:05:f3:90:0f:6a:75:33:21: 2f:96:bb:19:0c:ce:50:80:b8:67:26:ab:9c:a0:16:45:34:18: 76:5b:8e:0d:49:de:35:01:7b:40:79:87:c4:1e:64:a6:a9:5c: ce:0e:d1:a6:a0:52:2f:20:2f:4b:7b:f0:b9:2b:d2:d2:48:f4: 6c:eb:da:0a:b4:25:bc:4d:b1:7f:6e:41:ae:2b:02:bc:f0:58: 9a:59:84:d4:b4:6e:09:ab:6e:9c:04:52:cb:ea:32:49:e3:d4: e6:51:d5:ef:15:4e:5f:43:0d:6a:be:f4:49:21:ad:6b:f5:6e: 38:fb:1f:f5:e4:e4:a2:53:a6:6a:2f:d2:3b:64:4f:a0:09:d2: a0:fc:47:02:e9:37:0e:07:fc:65:7a:ac:09:70:41:ca:fe:23: a3:39:ff:67:58:a8:ca:4c:0e:c3:3f:63:7d:d2:72:cb:ec:19: 06:75:b4:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPNOHo5C/76BH3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmI3NGVlMmItMWM1Ni00NTYxLWI3M2UtZTBjNzBlODkwNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHu2kM1qEDa+DofvMvuswYjkUG1R0VdpS9Ht kozDcq3/nfgo4Gyyrdu2KtScLjHIpP+yJoRBAA74ef2vxDZL1NMqnDdn0kOKMDWm oPr87g1UoZFKRvrrzFHEkOBUqT1cl8gjtyRIKJ2CndzpYbZSeHAPRaggm51u8+xU T/c68Ea0X9zx2lV0K0i/HbGlHKV7mb47TLcYDE2ywfWa0iZ0WMV/vN65WtCPNHKn Yv4/qb32LNov/D0IDh22E2V7UE2Rjmn9+cYEDIN6OOSBT1n0WwL36Fykpd9W5OjO l8DDc++3n+YyfV33dIKdDs4Nj/Udvc22g98fzFSJBAFSjzGxlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0EN9wnWrV25gMSp+NOG2r7F4isMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQxOGUzMTItODFiMC0z MGEyLWI3YWItNzVlOGQyMGJlM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl8iHlcUIz6iAahQuvbuepbsU3ikCGDsCjNLGEMaOUKkvgcRvnTjPPO YNw8dVqOGvL4W9fuM8Q9JmHMh/TmkFzZV1KFVzDVujkoFsp+qofohdAF85APanUz IS+WuxkMzlCAuGcmq5ygFkU0GHZbjg1J3jUBe0B5h8QeZKapXM4O0aagUi8gL0t7 8Lkr0tJI9Gzr2gq0JbxNsX9uQa4rArzwWJpZhNS0bgmrbpwEUsvqMknj1OZR1e8V Tl9DDWq+9EkhrWv1bjj7H/Xk5KJTpmov0jtkT6AJ0qD8RwLpNw4H/GV6rAlwQcr+ I6M5/2dYqMpMDsM/Y33ScsvsGQZ1tMI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:13:05 2025 by rpki-client