$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/3fc89f3c-c80e-3fd5-8350-ba29e7831740.roa File: 3fc89f3c-c80e-3fd5-8350-ba29e7831740.roa (raw, json) Hash identifier: 1lfJ6nviyUmvyxKaQBS+ARHJZpASXZz1lYIGvyGag90= Subject key identifier: CB:A3:EC:EF:B6:A2:B0:61:5F:38:7B:9F:53:62:D7:5C:47:40:E7:C8 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584B196C28FE98E7EAD89C3A0B00 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/3fc89f3c-c80e-3fd5-8350-ba29e7831740.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 0 IP address blocks: 173.96.0.0/11 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:28:fe:98:e7:ea:d8:9c:3a:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=6b0e6b4d-2e7d-48d8-a08d-fa8ba719fb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:d0:88:bf:83:ee:05:16:5e:84:5d:8e:da: 42:91:f3:52:67:ae:62:20:31:3d:ca:fc:b3:2f:c8: cf:07:56:21:48:47:ed:d8:06:f3:24:94:ac:f8:6f: 61:12:e5:32:d3:5a:b3:e1:30:4a:36:63:bb:ee:5e: 2f:fb:26:49:41:b4:20:82:d2:13:ae:cb:ad:61:89: 1f:3e:8c:17:33:20:f4:30:6f:26:9c:cd:75:db:15: 43:9a:54:8a:e6:50:c9:0d:bb:75:96:e4:6f:c9:7a: e6:2e:71:2e:59:bf:20:e1:55:38:65:25:8d:7c:f0: fb:85:4e:bc:63:ef:df:24:f7:a9:99:ad:4b:f9:13: 77:3c:15:2f:c5:11:c4:68:10:09:0b:33:df:ea:3b: 90:df:06:b8:19:26:4a:93:d1:f2:83:72:12:26:e4: 1f:d2:1d:5b:58:4d:b4:ce:a2:de:66:86:08:8f:76: 72:e2:1a:9a:db:b4:78:01:4b:97:63:2f:bc:53:74: 53:9f:aa:68:10:ee:b9:b1:9e:b1:ce:d4:b3:c6:00: 73:d6:52:fd:c8:3d:4f:12:ea:0d:cb:1b:3c:8d:f6: f5:1e:6d:1c:ec:e1:3b:1f:df:42:5e:65:98:e4:b8: 99:92:8c:b8:5b:f4:62:53:78:83:71:3e:95:ec:68: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:EC:EF:B6:A2:B0:61:5F:38:7B:9F:53:62:D7:5C:47:40:E7:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/3fc89f3c-c80e-3fd5-8350-ba29e7831740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 173.96.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1b:0c:5e:ac:2c:12:1b:a9:71:d8:34:92:f3:0f:78:ce:8a: 32:cc:2b:9e:bf:db:68:50:86:ea:5f:57:14:ef:af:23:7c:8a: fb:37:6b:f7:c1:4d:5f:6a:a4:f7:c9:1a:ba:56:b5:90:4b:80: 57:4e:68:4b:9f:e8:27:b1:f4:62:41:03:1c:1e:06:7f:85:0c: d5:32:e9:d7:42:2e:b6:19:0a:7a:ea:fe:71:64:9b:ef:a2:c6: 72:40:2b:43:f8:30:0c:b4:8e:0e:e2:4f:36:6c:0c:2f:30:83: 48:fe:b6:01:38:cf:df:3f:dd:b4:2c:7e:2c:c3:5a:24:16:ab: 11:dd:6a:85:32:25:89:0c:cd:cb:cc:de:d9:87:e7:9c:ac:3a: 63:fd:82:61:6f:c0:a6:c2:15:9c:00:13:2b:c9:bd:45:7d:98: 4e:11:aa:03:58:a6:ee:12:5d:a0:13:6a:3a:bd:f3:41:e1:75: 98:99:7d:77:2a:ed:e6:ed:44:a8:07:44:62:ee:c1:61:96:4e: 60:ba:74:55:33:15:1f:ca:af:b9:ff:52:04:1c:0a:c2:93:2a: 71:8d:97:37:c6:67:03:55:10:f8:43:f3:bc:75:42:63:c6:95: da:93:ef:4c:3d:86:c3:b9:fa:e7:0e:4c:c8:92:36:da:98:2a: 23:a1:3d:ee -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsZbCj+mOfq2Jw6CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NmIwZTZiNGQtMmU3ZC00OGQ4LWEwOGQtZmE4YmE3MTlmYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYLQiL+D7gUWXoRdjtpCkfNSZ65iIDE9yvyz L8jPB1YhSEft2AbzJJSs+G9hEuUy01qz4TBKNmO77l4v+yZJQbQggtITrsutYYkf PowXMyD0MG8mnM112xVDmlSK5lDJDbt1luRvyXrmLnEuWb8g4VU4ZSWNfPD7hU68 Y+/fJPepma1L+RN3PBUvxRHEaBAJCzPf6juQ3wa4GSZKk9Hyg3ISJuQf0h1bWE20 zqLeZoYIj3Zy4hqa27R4AUuXYy+8U3RTn6poEO65sZ6xztSzxgBz1lL9yD1PEuoN yxs8jfb1Hm0c7OE7H99CXmWY5LiZkoy4W/RiU3iDcT6V7GiI5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMuj7O+2orBhXzh7n1Ni11xHQOfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvM2ZjODlmM2MtYzgwZS0z ZmQ1LTgzNTAtYmEyOWU3ODMxNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFrWAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkRsMXqwsEhupcdg0kvMPeM6KMswrnr/baFCG6l9XFO+vI3yK+zdr98FN X2qk98kaula1kEuAV05oS5/oJ7H0YkEDHB4Gf4UM1TLp10IuthkKeur+cWSb76LG ckArQ/gwDLSODuJPNmwMLzCDSP62ATjP3z/dtCx+LMNaJBarEd1qhTIliQzNy8ze 2YfnnKw6Y/2CYW/ApsIVnAATK8m9RX2YThGqA1im7hJdoBNqOr3zQeF1mJl9dyrt 5u1EqAdEYu7BYZZOYLp0VTMVH8qvuf9SBBwKwpMqcY2XN8ZnA1UQ+EPzvHVCY8aV 2pPvTD2Gw7n65w5MyJI22pgqI6E97g== -----END CERTIFICATE-----Generated at Mon Oct 20 04:59:54 2025 by rpki-client