$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa File: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (raw, json) Hash identifier: NRpR6geFCHR+7fALoEntSewh6MfUBWUeanuDia0/Ocs= Subject key identifier: D9:74:74:52:B2:07:25:77:AF:F7:B2:6F:71:10:DA:9C:FA:D0:FA:70 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584B583C8B13AA3155CDB1A85340 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 32854 IP address blocks: 169.197.172.0/24 maxlen: 24 169.197.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8b:13:aa:31:55:cd:b1:a8:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=345ff25c-49b4-4bb2-a90b-3056c3be57a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:f2:7e:47:26:bc:8a:6e:7b:5f:da:01:d7: 57:39:a3:2b:47:b7:28:98:b1:52:09:b9:34:09:fa: 15:80:20:77:b1:7b:15:a6:e7:b3:b8:5f:17:81:7b: a0:96:94:64:2b:8c:d1:ed:00:72:db:39:35:4f:74: 58:d5:83:d5:31:fd:ab:fe:b1:3e:1b:58:f0:af:40: d6:e5:85:ea:f2:e8:f3:df:e5:df:16:99:f0:67:06: 2d:73:eb:6e:09:79:ad:56:25:5d:e1:1b:24:6c:59: 99:0a:cb:ec:c3:71:57:0e:9c:0a:f3:ff:fe:b1:39: 28:10:00:f7:45:37:78:c3:b4:0b:37:c6:38:76:85: 56:bf:bd:e5:61:ba:b8:15:11:8c:58:b1:a5:92:26: 97:fb:3c:da:99:5d:25:1e:6a:41:68:62:27:c5:81: 23:76:4d:80:d1:97:47:4c:9b:19:72:e3:6e:92:71: de:eb:6e:3b:5f:85:c3:86:e7:bc:7e:af:6a:18:04: 9d:7b:85:94:51:13:93:39:56:5b:28:3a:3d:2a:ef: db:8b:15:21:d8:a2:e7:5f:b9:e8:99:0b:69:71:0b: 5c:03:93:71:d1:05:3e:dc:88:8e:12:e2:d7:5b:9a: 61:3e:fe:8a:31:d3:54:a4:d8:6b:69:a6:9b:c5:c1: 11:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:74:74:52:B2:07:25:77:AF:F7:B2:6F:71:10:DA:9C:FA:D0:FA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: 169.197.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6b:91:23:36:38:85:34:d4:52:9a:65:05:56:aa:e3:8b:46: b1:d7:15:14:8e:3e:ef:d8:f5:97:47:ae:b4:d5:11:6b:ca:34: 80:26:e1:95:ee:24:81:2e:f1:00:15:db:6a:0e:18:b0:dc:4a: 61:c9:2d:4b:e4:ab:3b:2b:b2:f2:5b:6b:05:73:f9:3f:c4:d3: de:79:38:05:23:e0:39:13:1c:60:51:b6:f8:6e:be:75:13:f7: 3b:30:9e:b2:64:99:46:28:f6:c8:a4:35:69:ee:56:b6:84:6f: eb:c1:4e:c8:f0:0b:9b:41:b8:3e:65:a4:f2:89:58:8c:8d:8d: c6:c8:5f:2b:6c:3e:bb:80:e4:5c:f4:cb:f6:35:ef:d1:a4:15: 05:63:fa:b5:0f:4b:fd:37:0e:c6:51:34:8a:5e:bc:2e:99:b9: 8f:82:e6:c3:51:08:45:5d:bd:c0:27:dc:5b:0d:1d:6b:48:c2: 41:5e:13:d6:c1:92:48:de:3f:a6:b8:c3:62:2c:db:c9:c2:b8: 16:6a:77:91:dc:83:ba:04:5a:1b:83:70:82:85:8e:51:74:11: 05:56:90:67:c8:4a:47:7b:11:0a:e6:f6:37:59:e4:33:e6:4f: 19:54:c3:20:61:4d:7e:96:35:db:8c:35:07:fd:dc:89:24:51: 23:7a:ee:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIsTqjFVzbGoU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzQ1ZmYyNWMtNDliNC00YmIyLWE5MGItMzA1NmMzYmU1N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotbyfkcmvIpue1/aAddXOaMrR7comLFSCbk0 CfoVgCB3sXsVpuezuF8XgXuglpRkK4zR7QBy2zk1T3RY1YPVMf2r/rE+G1jwr0DW 5YXq8ujz3+XfFpnwZwYtc+tuCXmtViVd4RskbFmZCsvsw3FXDpwK8//+sTkoEAD3 RTd4w7QLN8Y4doVWv73lYbq4FRGMWLGlkiaX+zzamV0lHmpBaGInxYEjdk2A0ZdH TJsZcuNuknHe6247X4XDhue8fq9qGASde4WUUROTOVZbKDo9Ku/bixUh2KLnX7no mQtpcQtcA5Nx0QU+3IiOEuLXW5phPv6KMdNUpNhraaabxcERPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNl0dFKyByV3r/eyb3EQ2pz60PpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvYTMyNzhmZDgtOTY5Yi0z ZDdhLWI3YzEtZTVmNGFhYmEwNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqcWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBrkSM2OIU01FKaZQVWquOLRrHXFRSOPu/Y9ZdHrrTVEWvKNIAm4ZXu JIEu8QAV22oOGLDcSmHJLUvkqzsrsvJbawVz+T/E0955OAUj4DkTHGBRtvhuvnUT 9zswnrJkmUYo9sikNWnuVraEb+vBTsjwC5tBuD5lpPKJWIyNjcbIXytsPruA5Fz0 y/Y179GkFQVj+rUPS/03DsZRNIpevC6ZuY+C5sNRCEVdvcAn3FsNHWtIwkFeE9bB kkjeP6a4w2Is28nCuBZqd5Hcg7oEWhuDcIKFjlF0EQVWkGfISkd7EQrm9jdZ5DPm TxlUwyBhTX6WNduMNQf93IkkUSN67sc= -----END CERTIFICATE-----Generated at Wed Nov 5 19:44:47 2025 by rpki-client