$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddb19322-257c-34bd-a870-3181a985ad17.roa File: ddb19322-257c-34bd-a870-3181a985ad17.roa (raw, json) Hash identifier: J7j6fcbZTP/GNDj2lbBq8m6+lfJFEngoUAf/sxpL9YE= Subject key identifier: C6:2D:15:70:D0:EE:94:64:A1:05:61:22:77:3B:D0:0B:8B:60:59:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73C40ECA3AB224C73B980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddb19322-257c-34bd-a870-3181a985ad17.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.19.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3c:40:ec:a3:ab:22:4c:73:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=c3fcd43c-1720-4bea-b4ae-ba1e11fc98d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:bb:81:31:48:c9:c5:dd:14:94:1b:59:f2: d2:f2:9a:56:de:2d:d6:61:f5:98:0c:bf:0d:3b:6c: 11:f9:25:ef:74:80:32:08:2f:8e:73:8b:c5:bf:2d: cc:8f:6f:5e:98:a4:eb:d4:92:c0:22:a6:e0:5c:7b: d6:97:40:05:b4:6b:23:7e:5e:cd:15:66:44:41:19: f7:5b:fd:b9:42:5a:6a:32:71:b5:d7:4a:b0:96:15: d9:6a:23:39:42:b5:13:a1:95:47:3c:1b:15:97:9f: 94:24:71:ee:70:c5:01:5b:85:d2:28:80:53:9a:c3: c3:91:00:a1:2e:4e:93:0c:cc:6d:70:8a:6e:57:45: 32:fb:a4:dc:32:47:7f:07:b2:12:df:72:8e:cb:ca: 7f:67:32:98:72:9e:13:5a:7c:00:04:04:3a:1c:f5: 46:0c:bb:84:0c:61:a6:79:c8:af:a0:9e:f5:8e:96: b2:79:4b:9a:9d:43:35:74:cd:53:88:63:ec:1a:2b: 10:5d:db:2e:eb:14:bf:d5:61:ad:ee:c9:4a:78:54: f0:0a:af:c8:6e:a5:6b:86:10:ec:16:f6:45:f3:98: aa:e6:8a:66:64:c3:c7:bb:8f:53:89:5e:33:a6:34: 09:8a:33:5f:a5:71:20:76:0f:01:14:a3:2f:01:ef: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2D:15:70:D0:EE:94:64:A1:05:61:22:77:3B:D0:0B:8B:60:59:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddb19322-257c-34bd-a870-3181a985ad17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:52:9a:5d:19:e8:68:8f:eb:3f:64:4c:d6:e4:71:84:a0:a4: 2b:30:03:69:2b:e0:b6:58:42:2e:4a:80:24:b4:27:6b:a3:db: 45:b9:14:05:9e:8b:92:fe:08:7e:5d:70:30:46:ae:22:6f:2f: c0:a4:12:fb:b6:72:8b:77:17:05:b7:63:1b:64:d5:d3:1f:80: 84:e1:35:39:ca:96:8a:f6:4c:4c:fa:3b:c3:4a:b5:b3:61:49: 5a:85:5d:b5:80:69:c3:b1:7b:8a:64:db:e2:82:bd:5a:b0:1a: 2f:3d:fe:6a:2b:a8:43:f8:b3:d5:f8:7e:f9:6a:ce:ba:db:94: 71:a7:e4:09:33:5e:23:67:7c:9a:45:38:3e:a4:39:a5:68:29: f7:c8:ca:6d:72:98:2a:8d:04:a9:26:fe:56:1a:7a:7b:83:87: 9e:64:68:03:37:26:7a:b0:12:64:40:2e:85:4c:f5:2a:75:53: b0:c9:58:75:d4:bb:93:4c:59:5c:4a:7b:bb:67:9c:2c:38:a3: 78:8e:0e:88:bd:60:f2:c0:38:81:7b:4e:4a:2a:28:c5:6b:45: d7:88:01:da:ab:34:91:17:c2:f2:ad:3f:2e:ac:6c:37:86:9d: 7f:62:17:4a:74:1a:1e:f6:fe:f7:87:75:a5:95:94:61:86:92: 60:5f:0e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zxA7KOrIkxzuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk YzNmY2Q0M2MtMTcyMC00YmVhLWI0YWUtYmExZTExZmM5OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU67gTFIycXdFJQbWfLS8ppW3i3WYfWYDL8N O2wR+SXvdIAyCC+Oc4vFvy3Mj29emKTr1JLAIqbgXHvWl0AFtGsjfl7NFWZEQRn3 W/25QlpqMnG110qwlhXZaiM5QrUToZVHPBsVl5+UJHHucMUBW4XSKIBTmsPDkQCh Lk6TDMxtcIpuV0Uy+6TcMkd/B7IS33KOy8p/ZzKYcp4TWnwABAQ6HPVGDLuEDGGm ecivoJ71jpayeUuanUM1dM1TiGPsGisQXdsu6xS/1WGt7slKeFTwCq/IbqVrhhDs FvZF85iq5opmZMPHu49TiV4zpjQJijNfpXEgdg8BFKMvAe9YewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYtFXDQ7pRkoQVhInc70AuLYFlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGRiMTkzMjItMjU3Yy0z NGJkLWE4NzAtMzE4MWE5ODVhZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrROkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Sml0Z6GiP6z9kTNbkcYSgpCswA2kr4LZYQi5KgCS0J2uj20W5FAWe i5L+CH5dcDBGriJvL8CkEvu2cot3FwW3Yxtk1dMfgIThNTnKlor2TEz6O8NKtbNh SVqFXbWAacOxe4pk2+KCvVqwGi89/morqEP4s9X4fvlqzrrblHGn5AkzXiNnfJpF OD6kOaVoKffIym1ymCqNBKkm/lYaenuDh55kaAM3JnqwEmRALoVM9Sp1U7DJWHXU u5NMWVxKe7tnnCw4o3iODoi9YPLAOIF7TkoqKMVrRdeIAdqrNJEXwvKtPy6sbDeG nX9iF0p0Gh72/veHdaWVlGGGkmBfDt8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:55:14 2025 by rpki-client