$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3b531fc-d998-35a0-abb0-042465ab0c66.roa File: c3b531fc-d998-35a0-abb0-042465ab0c66.roa (raw, json) Hash identifier: uPUiXbwI/yX8ooTfOkalDVHVPjJ2bFw2ptMTsarloe8= Subject key identifier: ED:C5:F9:B3:A6:FF:75:44:A5:77:25:6E:00:8F:CF:79:0B:89:98:2A Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B59A1E0B437963BE4E2AB8600 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3b531fc-d998-35a0-abb0-042465ab0c66.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 25198 IP address blocks: 173.232.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:e0:b4:37:96:3b:e4:e2:ab:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=077e2d6c-b3ef-48a1-8b43-60f97139d07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:4a:db:86:16:37:d9:50:eb:e8:12:61:f2: 1d:44:90:bd:bb:f8:a9:8f:c5:89:f0:d0:3d:d2:2e: 5d:4c:47:30:22:b6:f5:f5:d7:b1:e5:fd:89:a5:05: ee:73:76:cb:88:af:88:b6:29:35:17:9e:0c:67:8e: 80:1a:67:ae:a3:b8:99:21:5e:76:9c:d8:46:84:bd: 06:75:ca:79:d9:83:ba:10:3e:a8:fa:45:dd:b3:36: 10:e9:49:1d:1f:c4:79:9d:3b:65:72:aa:e3:6e:3e: a7:bb:c6:c0:49:b7:e1:15:b2:78:57:f7:5e:c9:7b: 16:f1:fa:da:0f:26:d9:a1:22:dd:77:fe:4f:12:bf: 8a:15:45:2a:2e:4d:3e:f6:77:dc:67:66:6a:3d:e9: 76:ca:e7:dc:4d:71:79:6a:ea:2d:3e:2b:bf:c0:16: fc:5e:5f:b6:e0:ce:71:53:0f:3f:83:d8:ae:36:50: 58:25:95:8e:53:f1:15:5b:4f:db:e0:33:6c:96:be: c6:ab:98:e8:2f:43:6b:8c:92:4e:67:e2:c9:62:77: ad:be:2b:71:ff:68:23:f3:a6:9c:0a:80:d2:ec:09: 34:e2:0f:7c:35:9f:d8:b9:eb:13:e1:22:af:70:7e: bb:42:fb:12:1c:58:b3:80:25:8f:1e:45:a5:4f:5f: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:F9:B3:A6:FF:75:44:A5:77:25:6E:00:8F:CF:79:0B:89:98:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3b531fc-d998-35a0-abb0-042465ab0c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:da:69:c3:22:72:c9:1b:61:45:35:0e:43:3d:12:77:bb:19: ce:e3:8b:73:68:de:26:91:77:0c:7a:8f:42:15:41:c0:39:a7: 57:a7:b1:df:67:a7:c4:1e:7b:38:86:00:7b:9d:a6:26:11:88: b7:66:04:84:0c:46:3c:3c:0f:19:6a:43:da:d7:a7:c8:fc:d6: 1d:aa:87:28:64:bc:67:03:c5:4e:a1:04:9e:3d:57:e2:70:cc: be:c0:7f:48:e8:8f:ae:10:01:bb:78:7c:9d:97:cb:58:42:f9: 90:14:aa:49:a0:a2:ea:d6:72:d1:53:3e:bd:05:45:74:6d:f6: f1:08:84:f8:7b:b1:f2:41:c9:a5:bc:f2:7f:19:5d:90:80:76: ff:66:5c:19:60:d3:02:45:e5:fc:d1:4d:dd:bb:06:44:6f:02: a4:a6:f4:14:06:94:ea:1c:e3:a3:f6:0a:c7:33:53:c7:24:77: 95:8b:94:db:7a:cb:af:c8:a1:78:44:38:88:d1:72:32:fb:84: bc:d9:eb:fe:f7:ff:c2:ac:ff:9b:ae:6e:85:f0:a9:20:68:26: c9:b4:de:ef:15:02:34:26:97:5c:12:2a:06:c6:61:f9:63:8d: c4:64:0c:1f:38:0b:58:76:69:a4:1c:5e:b7:ae:82:ce:93:fd: d9:eb:21:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoeC0N5Y75OKrhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk MDc3ZTJkNmMtYjNlZi00OGExLThiNDMtNjBmOTcxMzlkMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf9K24YWN9lQ6+gSYfIdRJC9u/ipj8WJ8NA9 0i5dTEcwIrb19dex5f2JpQXuc3bLiK+Itik1F54MZ46AGmeuo7iZIV52nNhGhL0G dcp52YO6ED6o+kXdszYQ6UkdH8R5nTtlcqrjbj6nu8bASbfhFbJ4V/deyXsW8fra DybZoSLdd/5PEr+KFUUqLk0+9nfcZ2ZqPel2yufcTXF5auotPiu/wBb8Xl+24M5x Uw8/g9iuNlBYJZWOU/EVW0/b4DNslr7Gq5joL0NrjJJOZ+LJYnetvitx/2gj86ac CoDS7Ak04g98NZ/YuesT4SKvcH67QvsSHFizgCWPHkWlT18ilwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3F+bOm/3VEpXclbgCPz3kLiZgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzNiNTMxZmMtZDk5OC0z NWEwLWFiYjAtMDQyNDY1YWIwYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArehHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETaacMicskbYUU1DkM9Ene7Gc7ji3No3iaRdwx6j0IVQcA5p1ensd9n p8QeeziGAHudpiYRiLdmBIQMRjw8DxlqQ9rXp8j81h2qhyhkvGcDxU6hBJ49V+Jw zL7Af0joj64QAbt4fJ2Xy1hC+ZAUqkmgourWctFTPr0FRXRt9vEIhPh7sfJByaW8 8n8ZXZCAdv9mXBlg0wJF5fzRTd27BkRvAqSm9BQGlOoc46P2CsczU8ckd5WLlNt6 y6/IoXhEOIjRcjL7hLzZ6/73/8Ks/5uuboXwqSBoJsm03u8VAjQml1wSKgbGYflj jcRkDB84C1h2aaQcXreugs6T/dnrIQE= -----END CERTIFICATE-----Generated at Tue Nov 4 18:54:38 2025 by rpki-client