$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa File: 3882367a-4385-354c-b426-03b9c22717da.roa (raw, json) Hash identifier: 4Bhr2zUanqBZr8d4BWkpAm3CG9ZVhl0YzzFxLnaPROA= Subject key identifier: 57:2E:08:01:0A:87:3F:65:20:90:D7:22:C6:A3:D3:A9:2D:C6:02:97 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6C6F541475B9C8B5FBD200 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 173.232.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:6f:54:14:75:b9:c8:b5:fb:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=c87eddda-2a36-4e7e-b1fb-c3bd0a31d339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:88:9e:6f:45:5d:e8:a8:4e:07:e9:e8:81: d3:ca:2e:13:f9:08:75:a5:0d:39:be:fb:74:fd:6e: 7c:60:c3:68:32:24:6a:81:46:63:62:16:fe:e6:6e: 9b:4e:6d:72:21:d5:67:54:1a:59:61:ad:05:85:39: 64:8d:13:f7:2e:75:62:e4:3d:d6:49:c4:ec:c2:e7: af:ba:c3:e2:97:63:17:82:58:59:a6:a5:8a:54:9a: a6:34:1d:da:50:ed:6a:36:e4:df:be:3f:e5:d9:d5: 06:23:41:89:a7:6d:b3:db:8e:1e:66:b1:95:e7:b7: 8e:28:06:73:40:78:e6:3d:86:ba:ac:38:74:dc:84: 6d:d2:e5:e8:50:e0:71:ad:23:66:ef:82:bd:b1:62: b7:ab:3a:9b:36:06:5f:99:4a:93:0b:a4:18:97:19: 9c:5d:ea:3e:11:e2:fa:34:af:94:fb:dd:4e:c9:ea: ef:41:5b:df:74:38:d5:8c:94:ed:47:07:c8:26:52: 06:e7:71:f8:8b:03:6e:12:fe:5d:16:84:72:a6:dd: ee:c7:32:c9:74:e7:3b:6d:96:d7:0a:af:42:31:4f: 82:fe:ec:d4:df:14:a8:03:40:23:65:70:5c:89:b7: 52:ff:b1:a9:61:33:eb:b5:71:2d:a2:8d:a6:73:04: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2E:08:01:0A:87:3F:65:20:90:D7:22:C6:A3:D3:A9:2D:C6:02:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0a:28:50:65:59:cb:e9:e6:a1:c1:47:ef:d7:4e:79:c0:da: 8d:75:93:39:af:1c:b9:60:d2:8f:34:dd:85:05:be:21:69:ef: 69:07:ca:ae:37:66:18:24:e0:2d:a1:a8:e1:1d:9c:70:73:ed: 59:4f:89:ab:97:af:84:24:ee:bd:09:b5:36:dd:77:25:f9:ce: 98:9a:bc:d5:33:e7:e4:25:35:fa:6b:fb:0e:bf:e2:ec:9b:c1: bd:13:6a:13:2d:da:2d:ef:fe:29:b4:fc:91:1c:e3:00:2e:e7: 4b:1c:a9:ba:a7:58:95:fc:98:a0:b2:78:47:0a:47:58:da:1b: 21:ca:3a:29:8b:23:f3:a1:29:ce:d8:9b:a1:b1:d5:51:51:fb: e4:a9:c2:1a:98:83:b7:25:c9:fd:c9:c0:a1:cf:74:b2:bf:ea: af:43:2f:43:67:c8:b5:1b:2e:1a:da:f8:f5:0d:9e:fe:72:6e: 54:67:d5:53:92:ea:37:53:84:57:9d:03:30:29:54:ac:af:d7: 95:da:96:6f:31:3a:bb:bb:f0:70:a3:54:5c:e4:34:3b:ee:3b: 89:4d:08:b5:19:53:72:dd:f2:b9:70:21:d3:f2:13:40:00:b8: ea:19:87:28:76:2e:05:6b:8f:36:ad:db:47:ac:15:7f:bc:b4: ae:46:97:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbG9UFHW5yLX70gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk Yzg3ZWRkZGEtMmEzNi00ZTdlLWIxZmItYzNiZDBhMzFkMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1aInm9FXeioTgfp6IHTyi4T+Qh1pQ05vvt0 /W58YMNoMiRqgUZjYhb+5m6bTm1yIdVnVBpZYa0FhTlkjRP3LnVi5D3WScTswuev usPil2MXglhZpqWKVJqmNB3aUO1qNuTfvj/l2dUGI0GJp22z244eZrGV57eOKAZz QHjmPYa6rDh03IRt0uXoUOBxrSNm74K9sWK3qzqbNgZfmUqTC6QYlxmcXeo+EeL6 NK+U+91OyervQVvfdDjVjJTtRwfIJlIG53H4iwNuEv5dFoRypt3uxzLJdOc7bZbX Cq9CMU+C/uzU3xSoA0AjZXBcibdS/7GpYTPrtXEtoo2mcwTDXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcuCAEKhz9lIJDXIsaj06ktxgKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzg4MjM2N2EtNDM4NS0z NTRjLWI0MjYtMDNiOWMyMjcxN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAKKFBlWcvp5qHBR+/XTnnA2o11kzmvHLlg0o803YUFviFp72kHyq43 Zhgk4C2hqOEdnHBz7VlPiauXr4Qk7r0JtTbddyX5zpiavNUz5+QlNfpr+w6/4uyb wb0TahMt2i3v/im0/JEc4wAu50scqbqnWJX8mKCyeEcKR1jaGyHKOimLI/OhKc7Y m6Gx1VFR++SpwhqYg7clyf3JwKHPdLK/6q9DL0NnyLUbLhra+PUNnv5yblRn1VOS 6jdThFedAzApVKyv15Xalm8xOru78HCjVFzkNDvuO4lNCLUZU3Ld8rlwIdPyE0AA uOoZhyh2LgVrjzat20esFX+8tK5Gl5E= -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:23 2025 by rpki-client