$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa File: 3c3380ea-82d4-3054-9c73-9089c1d05edf.roa (raw, json) Hash identifier: lk1dpFJMCz5/CiK+cvkSKupHcbZJxptpXD2vyA10Ubs= Subject key identifier: B0:01:0E:31:F8:69:EC:8A:22:CB:9B:FC:83:7D:7D:30:13:72:26:45 Certificate issuer: /CN=3a743fdc-dd84-4ed2-9614-4d92d306fa60 Certificate serial: 010D0C9F4328584BA0D250E8B7A9629B6E1FAE80 Authority key identifier: 30:59:3D:CD:9B:0D:D9:3F:D9:F7:01:85:66:DF:AB:81:8D:C4:E1:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19116 IP address blocks: 104.245.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:50:e8:b7:a9:62:9b:6e:1f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a743fdc-dd84-4ed2-9614-4d92d306fa60 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=6225f803-f2a3-46da-ad12-a282c64d4a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:a0:af:8d:d9:1c:5b:7d:1f:62:b9:9f:89: 30:98:60:1e:3d:83:5e:35:5c:e4:f1:ee:e3:8f:86: fd:6e:f1:c7:59:7e:7f:c1:d4:00:d7:24:e5:03:9f: de:8d:6d:78:6b:5e:cd:97:f4:31:d3:50:36:fd:ff: d4:dd:af:3d:57:f3:15:6b:62:62:b5:70:f2:d6:93: 03:c9:4e:64:c2:ae:92:b7:8d:75:27:4a:1c:94:53: c1:e8:72:04:14:29:b6:77:5b:dd:e0:d2:05:18:56: 82:a3:22:57:56:c0:a4:0f:51:c4:94:f2:59:b1:81: d0:e0:84:3f:eb:45:f9:7a:e1:52:67:d6:65:68:7d: db:cb:cc:39:f6:30:e7:93:dd:51:99:e3:48:81:22: 3f:dc:43:51:3d:06:fa:9f:80:9f:88:25:f7:2f:c4: 79:49:18:68:93:40:a5:fd:5a:17:b4:ab:2c:f9:e0: e5:77:fe:c5:c4:de:ee:e1:10:a9:3d:58:8d:60:78: 36:19:96:97:e6:96:e0:68:91:e2:b8:51:14:97:b6: 38:52:c2:af:46:7a:03:f7:f2:aa:1c:9c:ac:b0:a7: cc:43:e7:18:f8:d5:66:cf:f8:89:5b:9c:97:26:43: d4:7c:0e:21:80:20:99:6f:03:c4:11:02:3b:2d:d5: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:0E:31:F8:69:EC:8A:22:CB:9B:FC:83:7D:7D:30:13:72:26:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.crl X509v3 Authority Key Identifier: keyid:30:59:3D:CD:9B:0D:D9:3F:D9:F7:01:85:66:DF:AB:81:8D:C4:E1:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer sbgp-ipAddrBlock: critical IPv4: 104.245.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:96:c9:b4:e9:91:53:16:f4:77:9e:b1:e6:f9:70:88:12:34: b0:0d:bb:52:4d:ad:6f:f0:63:7e:89:23:a9:a5:6f:98:90:89: 54:1b:26:e3:10:ff:1c:25:9d:d1:2f:17:c4:eb:c3:60:65:05: 3e:d5:ac:4a:97:65:c1:10:bc:7c:8a:90:fc:d8:30:27:2b:46: 8d:b4:7d:57:90:e3:5c:d7:9b:29:81:62:64:80:7c:8b:d6:a7: 3a:e8:90:64:73:50:4c:91:5f:db:cd:a3:62:67:69:b5:c2:26: c3:f8:76:53:17:96:f6:46:c1:e4:72:ee:c6:66:26:30:92:c9: e4:0e:27:10:1c:56:0f:54:29:68:f8:17:9a:6d:54:34:7d:72: f2:19:df:12:cc:be:17:c4:7b:69:36:da:1f:3e:fe:1a:17:ef: b5:84:a6:db:c2:b4:d6:27:40:72:f0:36:cd:aa:72:2f:32:36: 29:d4:ea:2b:f9:67:c1:d9:bb:ce:28:1c:bf:f1:7d:81:87:a6: a3:87:61:9e:54:84:f2:c4:c2:de:13:02:2f:42:39:f5:79:6e: c5:92:65:3c:69:56:f3:b3:87:29:95:aa:db:12:b7:ae:dc:29: e8:7c:50:d0:53:30:8e:3f:2e:15:f3:92:d5:2b:39:03:a0:3c: 30:5c:ef:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lDot6lim24froAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E3NDNmZGMtZGQ4NC00ZWQyLTk2MTQtNGQ5MmQzMDZm YTYwMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NjIyNWY4MDMtZjJhMy00NmRhLWFkMTItYTI4MmM2NGQ0YTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8egr43ZHFt9H2K5n4kwmGAePYNeNVzk8e7j j4b9bvHHWX5/wdQA1yTlA5/ejW14a17Nl/Qx01A2/f/U3a89V/MVa2JitXDy1pMD yU5kwq6St411J0oclFPB6HIEFCm2d1vd4NIFGFaCoyJXVsCkD1HElPJZsYHQ4IQ/ 60X5euFSZ9ZlaH3by8w59jDnk91RmeNIgSI/3ENRPQb6n4CfiCX3L8R5SRhok0Cl /VoXtKss+eDld/7FxN7u4RCpPViNYHg2GZaX5pbgaJHiuFEUl7Y4UsKvRnoD9/Kq HJyssKfMQ+cY+NVmz/iJW5yXJkPUfA4hgCCZbwPEEQI7LdUSPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLABDjH4aeyKIsub/IN9fTATciZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYTc0 M2ZkYy1kZDg0LTRlZDItOTYxNC00ZDkyZDMwNmZhNjAvM2MzMzgwZWEtODJkNC0z MDU0LTljNzMtOTA4OWMxZDA1ZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E3NDNmZGMtZGQ4NC00ZWQyLTk2 MTQtNGQ5MmQzMDZmYTYwLzNhNzQzZmRjLWRkODQtNGVkMi05NjE0LTRkOTJkMzA2 ZmE2MC5jcmwwHwYDVR0jBBgwFoAUMFk9zZsN2T/Z9wGFZt+rgY3E4eowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYTc0M2ZkYy1kZDg0LTRlZDItOTYxNC00ZDky ZDMwNmZhNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCWybTpkVMW9Heeseb5cIgSNLANu1JNrW/wY36JI6mlb5iQiVQbJuMQ /xwlndEvF8Trw2BlBT7VrEqXZcEQvHyKkPzYMCcrRo20fVeQ41zXmymBYmSAfIvW pzrokGRzUEyRX9vNo2JnabXCJsP4dlMXlvZGweRy7sZmJjCSyeQOJxAcVg9UKWj4 F5ptVDR9cvIZ3xLMvhfEe2k22h8+/hoX77WEptvCtNYnQHLwNs2qci8yNinU6iv5 Z8HZu84oHL/xfYGHpqOHYZ5UhPLEwt4TAi9COfV5bsWSZTxpVvOzhymVqtsSt67c Keh8UNBTMI4/LhXzktUrOQOgPDBc7yU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:59 2025 by rpki-client