$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e063c8b-cd4a-358f-93a7-7e6749e994a1.roa File: 0e063c8b-cd4a-358f-93a7-7e6749e994a1.roa (raw, json) Hash identifier: gCy9q2lGbOqGOuE42mC5Uu8D7/VG+VBcH8GATYak9Ks= Subject key identifier: A8:EC:0B:3F:B1:23:DD:7C:F5:D3:09:8E:61:E4:8B:E2:C4:7F:51:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB48109AD151214BD5680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e063c8b-cd4a-358f-93a7-7e6749e994a1.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.17.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b4:81:09:ad:15:12:14:bd:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=588988b4-828a-4675-b9fa-3d26ed88aa7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:fb:97:cd:ac:8f:62:f8:3e:6a:fa:b0:09: 88:08:14:c3:ab:02:ae:48:1a:38:42:d9:01:41:f5: 05:29:80:d5:cb:fa:d9:30:2c:46:39:30:60:5c:c8: 2c:70:e4:2b:70:af:1b:e2:ba:17:df:09:b6:94:af: c1:fb:58:37:d4:80:cd:b5:81:32:85:3b:ca:3b:38: 5c:9f:6f:45:2f:98:7d:e7:99:0e:00:1e:e7:bb:f8: 16:0b:8d:b4:b4:15:9a:06:a0:1f:e8:f7:4b:41:01: 4c:fd:c2:8a:52:6c:1b:ac:7c:70:91:af:e3:39:85: cf:8c:b4:af:da:97:c7:e6:ba:b3:69:76:6e:52:1a: 63:be:c4:a8:75:c0:84:d9:fd:32:28:09:ed:38:8d: b6:7c:53:e6:83:27:d3:a2:04:72:64:db:d8:87:e6: 6d:8b:b0:46:68:aa:93:4f:2a:89:ed:a6:8b:0b:87: 90:9b:ac:27:5e:2b:3e:98:95:a5:54:bc:cb:a7:08: ec:b0:6d:05:f5:17:70:01:4c:77:bb:31:1d:c1:d6: 1f:12:b9:d1:d9:b1:2d:49:43:ed:ca:90:2a:3e:48: 73:8e:69:ce:86:05:aa:bd:c0:9f:bc:0f:5e:aa:26: a9:38:52:b2:7d:60:38:e7:c6:81:99:23:06:d9:9c: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EC:0B:3F:B1:23:DD:7C:F5:D3:09:8E:61:E4:8B:E2:C4:7F:51:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e063c8b-cd4a-358f-93a7-7e6749e994a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:33:49:35:2d:c6:9e:89:6f:13:86:3f:a3:31:1f:6a:46:71: a7:af:8c:9a:fd:eb:e7:38:c5:82:37:6e:d3:4c:89:ec:79:3a: ff:58:b0:a3:ed:e2:fe:55:76:96:49:96:1c:79:b6:85:b8:2b: 28:be:03:7c:41:7c:9d:f0:54:23:b2:f6:c9:32:c7:b2:ac:9b: 88:0c:c8:f5:19:bd:4d:5e:f1:2a:5f:f2:63:28:8d:8f:ae:b5: 22:e4:ad:e8:cc:a9:97:48:80:80:13:e0:c3:8c:45:c4:a1:55: 40:fa:fa:f8:bd:d7:f6:d0:d4:7d:37:7c:29:dc:f3:73:77:03: 75:f8:72:70:c7:29:8c:2e:6f:8a:47:c5:c6:9d:3a:53:13:64: 58:88:8f:a3:47:03:df:64:45:5b:90:0c:fd:b2:87:62:f5:c0: ca:77:ea:91:a6:92:c6:c0:8d:65:be:0c:a9:93:85:50:ac:44: a9:05:45:1a:28:d6:16:45:f8:64:bd:6f:eb:52:6a:82:b4:13: 4c:71:81:c0:7e:e7:82:28:fa:38:7f:cc:1b:a5:0d:b9:97:f2: 54:03:1c:62:68:29:76:b2:b5:e4:90:33:9a:7a:9a:da:d7:1c: 8a:bd:0c:30:05:3d:6a:d0:a4:59:ec:20:c5:ac:01:94:92:14: 11:1f:a3:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLSBCa0VEhS9VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTg4OTg4YjQtODI4YS00Njc1LWI5ZmEtM2QyNmVkODhhYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaL7l82sj2L4Pmr6sAmICBTDqwKuSBo4QtkB QfUFKYDVy/rZMCxGOTBgXMgscOQrcK8b4roX3wm2lK/B+1g31IDNtYEyhTvKOzhc n29FL5h955kOAB7nu/gWC420tBWaBqAf6PdLQQFM/cKKUmwbrHxwka/jOYXPjLSv 2pfH5rqzaXZuUhpjvsSodcCE2f0yKAntOI22fFPmgyfTogRyZNvYh+Zti7BGaKqT TyqJ7aaLC4eQm6wnXis+mJWlVLzLpwjssG0F9RdwAUx3uzEdwdYfErnR2bEtSUPt ypAqPkhzjmnOhgWqvcCfvA9eqiapOFKyfWA458aBmSMG2ZwHeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjsCz+xI9189dMJjmHki+LEf1G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGUwNjNjOGItY2Q0YS0z NThmLTkzYTctN2U2NzQ5ZTk5NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUzSTUtxp6JbxOGP6MxH2pGcaevjJr96+c4xYI3btNMiex5Ov9YsKPt 4v5VdpZJlhx5toW4Kyi+A3xBfJ3wVCOy9skyx7Ksm4gMyPUZvU1e8Spf8mMojY+u tSLkrejMqZdIgIAT4MOMRcShVUD6+vi91/bQ1H03fCnc83N3A3X4cnDHKYwub4pH xcadOlMTZFiIj6NHA99kRVuQDP2yh2L1wMp36pGmksbAjWW+DKmThVCsRKkFRRoo 1hZF+GS9b+tSaoK0E0xxgcB+54Io+jh/zBulDbmX8lQDHGJoKXayteSQM5p6mtrX HIq9DDAFPWrQpFnsIMWsAZSSFBEfo5E= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:42 2025 by rpki-client