$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9088aa9a-e549-38d5-bb55-2e6668acd797.roa File: 9088aa9a-e549-38d5-bb55-2e6668acd797.roa (raw, json) Hash identifier: Qx/NWGIn2yOejC/NSMnBFwu9Fm8XYVndzLH1e5fdc6Q= Subject key identifier: 3D:06:D4:3D:CE:9A:BD:23:5C:A8:FB:D2:3F:5E:29:9D:C6:DA:0D:08 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B88A60774650DC2985C8B9880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9088aa9a-e549-38d5-bb55-2e6668acd797.roa Signing time: Wed 15 Oct 2025 21:12:10 +0000 ROA not before: Wed 15 Oct 2025 21:12:10 +0000 ROA not after: Tue 13 Jan 2026 22:12:10 +0000 asID: 19905 IP address blocks: 173.29.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:a6:07:74:65:0d:c2:98:5c:8b:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 15 21:12:10 2025 GMT Not After : Jan 13 22:12:10 2026 GMT Subject: CN=d9946e42-48af-453b-a8e8-90ef7c46d726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:5b:ce:a0:0c:e2:d1:d6:c3:fc:b9:bb:69: b4:33:97:06:4c:3b:f1:80:e9:18:fb:d1:d1:a6:20: f9:e3:f9:e5:ca:ea:71:98:9e:b7:c7:6e:40:c5:b3: c3:0f:a6:fc:8c:d5:c5:1a:8c:d4:60:3d:e0:44:94: d4:f8:f2:41:ca:17:60:ae:09:22:07:b0:0c:28:13: 03:ad:85:1d:1e:8a:08:4e:40:40:c6:a0:e0:ef:5d: 3e:40:e4:13:47:94:d2:2e:bb:7c:6b:70:41:6c:cd: cc:c5:b0:21:16:e9:a3:97:21:e3:5d:9c:5c:1e:93: ca:31:f1:56:25:f2:d3:c9:d8:39:0f:ba:b6:d7:ed: cf:86:8d:e1:3a:8e:61:da:7d:4d:96:2c:95:63:8c: cd:0a:2b:1e:33:8d:d2:64:27:22:d7:7b:23:e0:1b: 9e:79:d0:79:a9:09:81:71:92:fe:72:65:7e:cf:60: 30:06:c6:ce:51:70:b7:a3:db:a5:3e:f4:ed:7a:08: fd:20:41:0a:d0:f3:93:fa:05:99:03:4a:e5:bf:28: 27:79:e3:e8:00:90:5a:84:4c:91:70:2a:2b:b3:ef: 84:64:6c:68:2a:e8:d0:53:8d:fe:35:c6:25:26:e5: 39:59:5a:e0:88:8f:ac:4e:73:f0:dd:5a:ec:26:0b: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:06:D4:3D:CE:9A:BD:23:5C:A8:FB:D2:3F:5E:29:9D:C6:DA:0D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9088aa9a-e549-38d5-bb55-2e6668acd797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b8:4a:9a:4f:a3:83:01:3d:21:96:78:58:73:ac:f1:49:9a: 28:68:6c:61:3c:48:fb:a9:e0:32:a8:78:d5:e8:bb:17:e2:ff: 88:44:b5:b6:cd:2c:bb:9d:b6:c4:38:d9:13:88:2d:95:25:88: 6e:ea:09:3e:03:40:89:81:71:00:42:50:9c:13:49:98:ea:2f: e4:b7:46:d6:99:3f:48:fd:93:ab:bb:f7:aa:b4:be:02:cf:ed: 33:74:cc:93:f5:b7:fb:84:1b:e2:84:e1:36:76:f2:b6:c3:d6: 12:97:3b:7b:2e:24:32:9c:34:d3:f1:de:2a:0a:06:02:42:19: 05:e7:97:61:48:28:d2:77:26:19:34:f6:ca:2c:97:b6:0e:66: c6:bf:27:7a:4d:5b:c3:d8:be:36:c9:b2:7b:47:33:06:67:99: 47:71:fa:10:6b:dc:3e:10:3c:08:0d:69:2a:0b:86:5f:49:15: aa:8f:c5:fe:66:c0:9b:43:d9:36:ed:29:eb:df:ea:ba:46:47: 54:79:80:7e:e5:f4:eb:1c:78:a9:d7:9d:33:62:05:6f:2c:71: e5:44:61:b8:c2:8b:01:0e:e6:df:26:70:b6:7d:b3:75:67:f5: 2e:a5:6e:00:e2:51:d2:d4:9b:96:82:c0:a0:83:23:5c:93:14: 6a:5f:cb:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIpgd0ZQ3CmFyLmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxNTIxMTIxMFoXDTI2MDExMzIyMTIxMFowLzEtMCsGA1UEAxMk ZDk5NDZlNDItNDhhZi00NTNiLWE4ZTgtOTBlZjdjNDZkNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneVbzqAM4tHWw/y5u2m0M5cGTDvxgOkY+9HR piD54/nlyupxmJ63x25AxbPDD6b8jNXFGozUYD3gRJTU+PJByhdgrgkiB7AMKBMD rYUdHooITkBAxqDg710+QOQTR5TSLrt8a3BBbM3MxbAhFumjlyHjXZxcHpPKMfFW JfLTydg5D7q21+3Pho3hOo5h2n1NliyVY4zNCiseM43SZCci13sj4BueedB5qQmB cZL+cmV+z2AwBsbOUXC3o9ulPvTtegj9IEEK0POT+gWZA0rlvygneePoAJBahEyR cCors++EZGxoKujQU43+NcYlJuU5WVrgiI+sTnPw3VrsJgtk6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0G1D3Omr0jXKj70j9eKZ3G2g0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTA4OGFhOWEtZTU0OS0z OGQ1LWJiNTUtMmU2NjY4YWNkNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC4SppPo4MBPSGWeFhzrPFJmihobGE8SPup4DKoeNXouxfi/4hEtbbN LLudtsQ42ROILZUliG7qCT4DQImBcQBCUJwTSZjqL+S3RtaZP0j9k6u796q0vgLP 7TN0zJP1t/uEG+KE4TZ28rbD1hKXO3suJDKcNNPx3ioKBgJCGQXnl2FIKNJ3Jhk0 9sosl7YOZsa/J3pNW8PYvjbJsntHMwZnmUdx+hBr3D4QPAgNaSoLhl9JFaqPxf5m wJtD2TbtKevf6rpGR1R5gH7l9OsceKnXnTNiBW8sceVEYbjCiwEO5t8mcLZ9s3Vn 9S6lbgDiUdLUm5aCwKCDI1yTFGpfy3M= -----END CERTIFICATE-----Generated at Sun Oct 19 21:09:55 2025 by rpki-client