$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa File: 5afbdf24-79e5-38e0-9da3-388a534fb999.roa (raw, json) Hash identifier: 4Kl8+Lfl7ttmKooDFz9IYaO0MnVF+3uDQJMh2AotKA4= Subject key identifier: 9F:39:79:00:5B:BF:59:43:C9:B7:89:E1:C7:BB:69:5E:60:57:DF:BD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B8EAD0C544D49BA5F44890350 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 30036 IP address blocks: 173.25.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0c:54:4d:49:ba:5f:44:89:03:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=b1ce29a8-30ff-4158-9c98-b8af6e39a4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:79:66:ef:50:dc:04:9b:69:12:da:dd:04: 8c:6e:f7:78:8f:a6:8e:78:b1:81:8a:a6:80:6a:01: db:0f:a6:5d:d1:98:da:e4:d2:32:81:a9:92:ce:94: e3:6c:e2:75:5a:84:07:2a:86:51:b0:c2:32:01:50: 02:09:c3:ea:e1:9b:19:d0:76:14:e9:37:15:f2:4f: 56:bb:14:ae:5f:60:74:9f:b5:e9:d6:76:89:da:a9: 9d:51:2b:d6:b1:df:2b:24:6e:4a:09:dd:77:aa:a3: b5:b4:7d:c1:9e:88:3d:34:99:e9:66:60:ee:98:8a: 2f:da:79:ee:d1:55:13:1f:e8:63:8b:f7:2e:91:e3: d3:0b:e8:c1:fe:b2:e2:9c:7e:2f:05:b3:e5:8b:fd: 37:a5:91:f3:e8:47:e1:d7:1c:f2:ad:72:85:bd:0b: 33:66:ed:15:29:a2:72:92:9e:7c:de:c3:66:75:4f: 4e:76:73:93:e0:33:a5:5e:dc:8d:0b:99:7a:e9:b1: c2:0a:9c:60:78:a6:f7:15:61:da:4c:e1:aa:39:0a: 97:c1:49:44:59:b3:50:d7:df:71:df:f4:57:d2:5a: 20:b1:cc:3a:ef:12:90:fa:40:78:e5:e1:53:dd:aa: ba:78:50:42:43:57:9c:21:7b:1d:c1:bd:35:47:e5: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:39:79:00:5B:BF:59:43:C9:B7:89:E1:C7:BB:69:5E:60:57:DF:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:31:07:60:18:f7:8d:63:5f:f3:ff:01:96:0c:45:40:1c:e9: b5:a8:56:bf:ca:5a:4d:af:58:71:90:9a:4c:1e:b1:2d:49:f7: a6:91:99:13:d3:dd:67:e8:96:eb:8b:6d:02:8c:15:58:b7:cc: 0d:17:2f:cc:19:e7:8d:4a:ce:8a:21:fd:a3:38:c1:5b:1a:3d: 2b:26:a9:74:66:65:69:c6:eb:0a:f5:c7:9f:26:07:c2:87:f9: ca:f2:e1:ec:7b:5d:bc:3e:9d:af:b5:3c:d2:e5:0e:80:8c:50: 85:9d:e1:04:d5:cb:fb:1e:55:f4:a1:2b:65:7d:1b:2b:58:04: d8:ca:69:2b:25:0e:e8:37:74:ad:7b:83:75:83:41:da:82:f6: 72:51:42:71:66:45:b5:08:55:3b:7c:22:dc:37:6b:32:e0:46: 6d:b0:59:36:5f:d2:cc:52:62:38:6f:1d:9c:8d:87:91:22:a5: 96:35:6a:de:af:bd:d1:9d:1c:1e:b0:de:96:11:9b:7c:14:f8: 5f:0b:89:ed:1f:82:c0:21:58:ef:88:79:4f:4d:fb:10:4d:49: ea:e9:fb:a7:bc:cd:ee:6f:77:06:fb:1b:fc:c6:43:4c:ba:05: bc:96:4f:12:ff:28:90:3b:2b:db:a3:86:cc:9c:2d:bc:24:50: 6b:c8:0a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQxUTUm6X0SJA1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YjFjZTI5YTgtMzBmZi00MTU4LTljOTgtYjhhZjZlMzlhNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy795Zu9Q3ASbaRLa3QSMbvd4j6aOeLGBiqaA agHbD6Zd0Zja5NIygamSzpTjbOJ1WoQHKoZRsMIyAVACCcPq4ZsZ0HYU6TcV8k9W uxSuX2B0n7Xp1naJ2qmdUSvWsd8rJG5KCd13qqO1tH3Bnog9NJnpZmDumIov2nnu 0VUTH+hji/cukePTC+jB/rLinH4vBbPli/03pZHz6Efh1xzyrXKFvQszZu0VKaJy kp583sNmdU9OdnOT4DOlXtyNC5l66bHCCpxgeKb3FWHaTOGqOQqXwUlEWbNQ199x 3/RX0logscw67xKQ+kB45eFT3aq6eFBCQ1ecIXsdwb01R+XL/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ85eQBbv1lDybeJ4ce7aV5gV9+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWFmYmRmMjQtNzllNS0z OGUwLTlkYTMtMzg4YTUzNGZiOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRl0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIExB2AY941jX/P/AZYMRUAc6bWoVr/KWk2vWHGQmkwesS1J96aRmRPT 3WfoluuLbQKMFVi3zA0XL8wZ541Kzooh/aM4wVsaPSsmqXRmZWnG6wr1x58mB8KH +cry4ex7Xbw+na+1PNLlDoCMUIWd4QTVy/seVfShK2V9GytYBNjKaSslDug3dK17 g3WDQdqC9nJRQnFmRbUIVTt8Itw3azLgRm2wWTZf0sxSYjhvHZyNh5EipZY1at6v vdGdHB6w3pYRm3wU+F8Lie0fgsAhWO+IeU9N+xBNSerp+6e8ze5vdwb7G/zGQ0y6 BbyWTxL/KJA7K9ujhsycLbwkUGvICrc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:18:55 2025 by rpki-client