$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa File: 088057c9-ae1d-339e-a8fd-ce606d190c40.roa (raw, json) Hash identifier: tdJeEFxF8+2wCp2PnrHwQDQUZaiRJAVlJWDMw1YLgUs= Subject key identifier: 92:CF:56:6D:52:E1:A9:76:BC:B0:7F:E3:13:51:DE:B2:20:CC:3A:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D740006CB097611EBE55C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:40:00:6c:b0:97:61:1e:be:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=4b1bb347-fb0c-4a0d-9ff1-d26be27fdb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:98:e5:bd:86:f1:ed:d3:db:98:12:c2:db: c5:a2:58:91:dd:c3:92:90:15:b8:d9:fb:c3:1e:cf: a5:dd:9c:39:c7:8c:77:fc:72:03:b0:56:72:9f:b0: ae:44:df:e0:ac:30:fd:81:09:b8:a0:79:02:26:b9: 93:8c:03:39:dd:a8:22:d6:94:02:4b:e4:fe:f8:e3: 2d:84:b1:05:43:23:54:a8:d3:e9:eb:46:d1:4a:a3: 2c:96:39:8f:01:77:4b:51:96:ac:4d:26:de:1e:81: 8d:21:dd:ce:c4:2b:8b:3d:30:ea:7a:ef:4d:5c:b6: e2:02:85:6a:bb:cb:a2:e9:bf:1a:93:a8:52:d4:fe: a9:28:64:f6:56:9c:88:9c:2e:04:08:60:14:eb:ac: c0:a4:6e:8a:56:54:51:d8:00:66:08:d2:fb:b9:28: ad:6e:d4:2d:ff:33:ca:82:fd:2f:3b:50:0d:df:29: 79:9e:e0:69:ae:59:99:56:fb:28:38:84:35:26:ef: 7d:bc:7d:b9:7d:7f:29:30:fc:c2:74:15:14:7d:90: 4f:db:81:42:cb:b0:ab:7b:71:59:6b:7a:a9:10:72: e6:30:93:a2:bb:0a:39:a3:4e:e5:db:ca:ea:a5:dc: 89:ad:b0:ea:02:63:c5:c4:f4:95:d0:1d:ed:7c:44: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CF:56:6D:52:E1:A9:76:BC:B0:7F:E3:13:51:DE:B2:20:CC:3A:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:39:9f:e1:0f:83:f4:91:37:44:12:24:12:16:42:dc:c9:33: 92:cf:65:20:6f:eb:f3:f1:48:f9:3e:34:86:4a:b5:3d:e1:e9: 81:4d:6c:d3:a1:7b:00:c7:dc:47:30:90:f3:c0:c7:7d:e1:23: 37:dd:b4:69:04:f5:d0:e0:07:0c:82:63:f7:4e:a5:22:a5:77: 6d:1e:de:e3:29:a2:b2:41:ea:83:a3:8d:82:99:9e:1a:0b:e2: a7:82:da:9c:ef:3a:63:f4:6c:4c:1d:aa:93:ba:d7:ce:10:f7: 3f:db:18:02:8c:35:4c:36:4b:e9:c7:19:2e:58:0f:0a:61:5e: 7a:41:08:45:97:fd:f2:23:3a:92:23:84:d8:0e:27:01:1a:f2: 5c:12:62:2a:cf:ef:41:b9:aa:4a:45:0e:a9:5f:69:09:77:de: 5e:c7:4a:40:10:60:1b:c0:70:34:5a:f8:5b:40:68:6b:73:10: a8:91:bb:9c:7f:f7:0b:96:f5:82:02:8e:95:f8:ae:e3:24:7f: 3d:a3:4f:15:ce:d6:7b:d4:74:f5:8d:43:80:61:c7:76:40:4c: fe:aa:78:a7:12:7c:04:7c:fd:98:16:fc:f8:c4:86:10:07:e9: f7:44:de:3b:c2:bd:25:c8:c6:b5:a7:7d:93:b7:2e:fb:1b:00: b0:68:9e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10AAbLCXYR6+VcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NGIxYmIzNDctZmIwYy00YTBkLTlmZjEtZDI2YmUyN2ZkYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsyY5b2G8e3T25gSwtvFoliR3cOSkBW42fvD Hs+l3Zw5x4x3/HIDsFZyn7CuRN/grDD9gQm4oHkCJrmTjAM53agi1pQCS+T++OMt hLEFQyNUqNPp60bRSqMsljmPAXdLUZasTSbeHoGNId3OxCuLPTDqeu9NXLbiAoVq u8ui6b8ak6hS1P6pKGT2VpyInC4ECGAU66zApG6KVlRR2ABmCNL7uSitbtQt/zPK gv0vO1AN3yl5nuBprlmZVvsoOIQ1Ju99vH25fX8pMPzCdBUUfZBP24FCy7Cre3FZ a3qpEHLmMJOiuwo5o07l28rqpdyJrbDqAmPFxPSV0B3tfERzHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLPVm1S4al2vLB/4xNR3rIgzDr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg4MDU3YzktYWUxZC0z MzllLWE4ZmQtY2U2MDZkMTkwYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrREIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF05n+EPg/SRN0QSJBIWQtzJM5LPZSBv6/PxSPk+NIZKtT3h6YFNbNOh ewDH3EcwkPPAx33hIzfdtGkE9dDgBwyCY/dOpSKld20e3uMporJB6oOjjYKZnhoL 4qeC2pzvOmP0bEwdqpO6184Q9z/bGAKMNUw2S+nHGS5YDwphXnpBCEWX/fIjOpIj hNgOJwEa8lwSYirP70G5qkpFDqlfaQl33l7HSkAQYBvAcDRa+FtAaGtzEKiRu5x/ 9wuW9YICjpX4ruMkfz2jTxXO1nvUdPWNQ4Bhx3ZATP6qeKcSfAR8/ZgW/PjEhhAH 6fdE3jvCvSXIxrWnfZO3LvsbALBonkQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:51:49 2025 by rpki-client