$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58dd313-a68f-30a6-bada-b86f38822814.roa File: d58dd313-a68f-30a6-bada-b86f38822814.roa (raw, json) Hash identifier: FSndLpnzHyXppA4Wji7lqAC5I/G6CmNKBM2GyE8y2lw= Subject key identifier: 22:3D:B4:92:A1:A5:4B:43:06:27:93:D0:5E:0B:45:28:26:8D:26:4E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CE5000366712CD733E160 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58dd313-a68f-30a6-bada-b86f38822814.roa Signing time: Mon 22 Sep 2025 11:57:16 +0000 ROA not before: Mon 22 Sep 2025 11:57:16 +0000 ROA not after: Sun 21 Dec 2025 12:57:16 +0000 asID: 19905 IP address blocks: 173.30.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:e5:00:03:66:71:2c:d7:33:e1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:57:16 2025 GMT Not After : Dec 21 12:57:16 2025 GMT Subject: CN=82b49e66-9d3d-4de9-a0fc-2bcf526cc5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:85:99:4b:93:29:52:19:a1:64:42:50:42: b9:5c:db:b7:fc:64:71:ab:30:df:05:3d:89:3a:1f: b0:36:4b:06:05:1a:6b:7c:41:c1:31:cd:d8:33:74: a6:5e:de:78:18:c6:27:ba:10:d3:e0:be:2a:27:48: ec:a8:dd:86:8e:87:37:e5:9d:f6:0f:b5:b9:7a:1d: 5c:72:5e:6f:6a:17:82:c8:cf:df:11:20:01:47:2b: 46:4f:d2:fe:e1:97:49:1b:89:bd:6e:aa:aa:48:6c: e4:3e:69:7a:1d:ee:01:d1:8a:82:07:24:6b:d0:86: f3:f0:b5:d7:bc:47:f3:7a:b8:8d:2c:02:9d:a3:8f: 23:77:6a:6f:8d:b4:20:3e:a1:e1:66:10:05:20:00: 01:50:41:b8:ae:92:bc:2f:eb:42:87:8d:82:ad:70: ec:99:18:ac:7a:49:0c:47:59:f8:16:5d:34:06:38: ef:bd:fe:34:a6:9f:1a:f7:1e:93:43:a7:b1:4a:8a: 52:41:c4:0e:42:88:81:5d:c7:88:d5:e0:09:a8:f7: 2f:67:b1:d6:92:27:3d:15:65:3e:d9:b1:ba:da:f9: f8:65:5e:c6:67:b3:6e:d2:fc:f0:91:38:16:84:ad: c3:93:9d:43:d4:fe:7b:96:2d:2f:9e:08:6e:19:96: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3D:B4:92:A1:A5:4B:43:06:27:93:D0:5E:0B:45:28:26:8D:26:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58dd313-a68f-30a6-bada-b86f38822814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:5b:fe:26:52:0e:8c:56:94:9f:a6:43:1e:40:dd:cb:ec:29: f4:ab:cd:e5:7d:8a:fb:53:01:f6:ea:b8:20:3d:fb:b6:23:cd: 58:1b:81:ce:32:c1:ac:07:84:53:18:36:9b:85:eb:28:5f:ad: 99:02:13:a7:96:ba:3c:c7:52:34:d3:98:ec:9f:9f:79:12:d0: 4a:dd:70:f4:0b:e4:e8:f6:7f:96:3a:6b:08:c1:05:21:8c:de: 20:c1:c2:c8:1c:4f:5b:5b:68:19:96:c2:77:21:c6:c8:ea:fe: f1:eb:e2:01:23:08:41:2d:bd:44:a5:c1:bf:2a:e1:e7:d3:9e: 37:1e:05:e4:b3:8c:4a:78:98:11:18:e6:68:a0:cc:21:80:e2: 31:47:2d:a7:58:c8:d2:1b:ff:de:9c:19:ea:00:36:fe:33:c9: 76:d4:65:71:11:11:12:1a:e9:31:1d:a5:07:4c:c3:d7:ac:80: 87:92:1c:76:33:57:89:96:8d:18:72:5e:d6:1e:58:ed:c0:db: 14:d9:50:3f:f6:70:48:bb:ea:cf:04:01:65:23:f6:f7:1b:a2: 18:aa:4d:08:d3:1a:8b:20:1d:58:1b:cc:b2:76:f3:5e:1f:47: 49:e3:c7:da:12:84:f0:c1:01:9c:5a:c7:a3:a8:d4:04:1d:78: 1f:31:45:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXOUAA2ZxLNcz4WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTcxNloXDTI1MTIyMTEyNTcxNlowLzEtMCsGA1UEAxMk ODJiNDllNjYtOWQzZC00ZGU5LWEwZmMtMmJjZjUyNmNjNWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lyFmUuTKVIZoWRCUEK5XNu3/GRxqzDfBT2J Oh+wNksGBRprfEHBMc3YM3SmXt54GMYnuhDT4L4qJ0jsqN2Gjoc35Z32D7W5eh1c cl5vaheCyM/fESABRytGT9L+4ZdJG4m9bqqqSGzkPml6He4B0YqCByRr0Ibz8LXX vEfzeriNLAKdo48jd2pvjbQgPqHhZhAFIAABUEG4rpK8L+tCh42CrXDsmRisekkM R1n4Fl00Bjjvvf40pp8a9x6TQ6exSopSQcQOQoiBXceI1eAJqPcvZ7HWkic9FWU+ 2bG62vn4ZV7GZ7Nu0vzwkTgWhK3Dk51D1P57li0vnghuGZbDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI9tJKhpUtDBieT0F4LRSgmjSZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDU4ZGQzMTMtYTY4Zi0z MGE2LWJhZGEtYjg2ZjM4ODIyODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR5vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJb/iZSDoxWlJ+mQx5A3cvsKfSrzeV9ivtTAfbquCA9+7YjzVgbgc4y wawHhFMYNpuF6yhfrZkCE6eWujzHUjTTmOyfn3kS0ErdcPQL5Oj2f5Y6awjBBSGM 3iDBwsgcT1tbaBmWwnchxsjq/vHr4gEjCEEtvUSlwb8q4efTnjceBeSzjEp4mBEY 5migzCGA4jFHLadYyNIb/96cGeoANv4zyXbUZXERERIa6TEdpQdMw9esgIeSHHYz V4mWjRhyXtYeWO3A2xTZUD/2cEi76s8EAWUj9vcbohiqTQjTGosgHVgbzLJ2814f R0njx9oShPDBAZxax6Oo1AQdeB8xRes= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:01 2025 by rpki-client