$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d883a0da-302b-34e3-b6f3-927b6ce8b469.roa File: d883a0da-302b-34e3-b6f3-927b6ce8b469.roa (raw, json) Hash identifier: HOpEzUJ7mz7VkZ2nMOrqShMG7JNuCx0Hj+2ggtLLo6w= Subject key identifier: 3A:6D:CB:E5:33:B6:5B:CA:F7:93:75:B5:66:22:92:30:28:3B:C7:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67972F7A32335302A4327E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d883a0da-302b-34e3-b6f3-927b6ce8b469.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.18.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:2f:7a:32:33:53:02:a4:32:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8fa201e5-c0fb-47b9-81aa-c0ce7d6761c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:ba:2c:4d:eb:9f:fd:6f:02:ac:06:a2:95: 5a:9b:a1:f4:50:07:db:af:b3:bd:41:32:c9:5e:ad: 6d:22:14:ac:83:28:4e:76:45:1a:72:ca:0c:70:49: 7c:50:17:7f:83:b7:49:5d:e2:62:68:b8:b3:a3:2b: ca:37:3c:e8:2d:b2:1e:a1:af:8a:75:fc:32:9d:01: d4:16:9f:5c:28:be:dc:eb:da:9b:c9:54:72:3f:d0: 85:2a:d8:a1:19:52:82:3e:19:a2:fa:65:ab:71:4f: bb:91:17:37:1c:b3:19:9c:00:60:35:7b:40:e3:62: de:37:8f:29:65:75:c4:4c:b2:78:af:c9:f8:ef:32: f5:73:69:7f:7f:6b:a1:68:bf:8c:fa:52:2a:65:62: 43:22:2c:b0:a2:cf:34:ba:f0:28:97:8b:33:35:c3: 43:51:0e:fc:0e:4b:f7:79:f6:85:df:d1:3e:f1:d0: 4e:e6:7e:d4:bc:7d:a6:e9:50:3f:55:6c:a6:5b:8c: 60:12:38:64:83:eb:6f:41:cb:ba:de:b3:ca:45:86: eb:95:46:90:40:45:f6:85:ba:bb:39:52:39:84:eb: b9:49:b4:6a:2d:1c:cd:17:c2:4a:9e:fb:40:0f:9c: 8e:4f:9d:60:b9:83:02:12:41:3d:18:a9:38:95:91: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6D:CB:E5:33:B6:5B:CA:F7:93:75:B5:66:22:92:30:28:3B:C7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d883a0da-302b-34e3-b6f3-927b6ce8b469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:34:12:9a:ee:60:d9:e3:3c:3a:90:e5:8e:0b:69:f5:39:4e: 9b:d8:9a:c8:b2:a8:f3:3f:d8:28:77:c6:d2:a5:40:60:a9:18: aa:82:32:bf:48:1e:02:aa:db:fc:fa:6d:9c:13:74:68:a6:59: 4a:38:32:d2:fc:14:c8:92:84:6c:5a:21:32:1f:23:4a:3d:86: d8:7a:49:91:cc:9c:f4:83:58:de:98:85:c3:52:35:b2:f8:f7: 6a:98:89:77:01:6f:4e:47:3b:c4:8f:87:e5:9d:be:21:d2:2d: 9a:6b:da:d1:09:a7:ef:68:de:31:84:77:5f:0e:a1:3d:be:d6: 1a:7f:e3:49:ac:19:b2:92:24:06:b5:a4:31:45:40:37:66:a0: c4:e5:e2:7f:cf:8a:89:eb:a3:4e:62:9e:78:91:8c:d3:2e:62: 6b:e8:c9:08:d3:b2:5a:18:dc:0d:88:ef:97:3c:ef:40:8a:4f: 6c:c7:ce:44:20:96:12:24:5c:16:37:26:cc:3e:c3:c8:38:81: d6:1e:41:f2:c8:59:62:3e:4a:a3:11:f8:73:e9:13:08:92:0f: 33:d3:92:4e:8c:23:8b:e0:17:30:ca:c9:24:97:e5:50:02:30: d3:16:8c:eb:6e:c4:6e:db:6d:68:79:4d:06:09:cb:7c:1e:28: 08:79:8f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnly96MjNTAqQyfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGZhMjAxZTUtYzBmYi00N2I5LTgxYWEtYzBjZTdkNjc2MWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoC6LE3rn/1vAqwGopVam6H0UAfbr7O9QTLJ Xq1tIhSsgyhOdkUacsoMcEl8UBd/g7dJXeJiaLizoyvKNzzoLbIeoa+KdfwynQHU Fp9cKL7c69qbyVRyP9CFKtihGVKCPhmi+mWrcU+7kRc3HLMZnABgNXtA42LeN48p ZXXETLJ4r8n47zL1c2l/f2uhaL+M+lIqZWJDIiywos80uvAol4szNcNDUQ78Dkv3 efaF39E+8dBO5n7UvH2m6VA/VWymW4xgEjhkg+tvQcu63rPKRYbrlUaQQEX2hbq7 OVI5hOu5SbRqLRzNF8JKnvtAD5yOT51guYMCEkE9GKk4lZHuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpty+UztlvK95N1tWYikjAoO8cAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDg4M2EwZGEtMzAyYi0z NGUzLWI2ZjMtOTI3YjZjZThiNDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD00EpruYNnjPDqQ5Y4LafU5TpvYmsiyqPM/2Ch3xtKlQGCpGKqCMr9I HgKq2/z6bZwTdGimWUo4MtL8FMiShGxaITIfI0o9hth6SZHMnPSDWN6YhcNSNbL4 92qYiXcBb05HO8SPh+WdviHSLZpr2tEJp+9o3jGEd18OoT2+1hp/40msGbKSJAa1 pDFFQDdmoMTl4n/Pionro05inniRjNMuYmvoyQjTsloY3A2I75c870CKT2zHzkQg lhIkXBY3Jsw+w8g4gdYeQfLIWWI+SqMR+HPpEwiSDzPTkk6MI4vgFzDKySSX5VAC MNMWjOtuxG7bbWh5TQYJy3weKAh5j38= -----END CERTIFICATE-----Generated at Mon Oct 20 20:57:11 2025 by rpki-client