$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2517f729-e44f-3008-a0fd-a276fa63b898.roa File: 2517f729-e44f-3008-a0fd-a276fa63b898.roa (raw, json) Hash identifier: bQTtL8F1egdbM9FZ2nP3p01ucCqFgl6T/3GiRj73Bic= Subject key identifier: FB:DE:B8:41:B1:59:E3:A7:DD:F4:BD:8C:03:96:FE:30:1F:31:E7:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201E72AD5A334D352F79B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2517f729-e44f-3008-a0fd-a276fa63b898.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.18.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e7:2a:d5:a3:34:d3:52:f7:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=11c790d4-1fd1-471b-a60e-e31630457a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:60:84:4d:2c:97:50:b5:6b:c8:f9:8f:96: 11:a8:e7:98:7d:8b:aa:49:20:b5:58:3f:aa:bf:0a: 83:bc:35:40:33:6d:72:b7:4f:b9:f9:28:49:42:69: 08:f0:87:52:67:ae:31:6a:10:e7:19:c4:13:60:22: 25:0d:98:cd:b4:68:2d:c2:b8:b6:37:1d:42:60:36: 5f:77:f4:f9:c2:e1:b0:88:13:16:49:ba:e7:d7:de: 01:84:40:ae:72:8c:fe:c5:c4:18:fc:4f:a4:1d:43: ab:bc:5d:70:66:54:99:b9:bb:92:53:09:c0:dd:8e: 1d:cc:bd:ff:39:be:26:aa:54:f8:33:4e:9e:32:06: cf:47:dc:d5:fc:3f:d5:7c:e8:5d:56:ac:82:97:48: 05:6c:27:4d:0f:12:3e:7f:d1:39:6e:b9:a2:f1:61: 20:f7:e1:71:76:80:26:6f:2e:f6:de:a2:fa:d2:57: b0:b2:75:8f:f8:19:bf:85:6e:16:7e:8c:81:47:f3: 37:81:ec:ac:1e:b1:56:81:32:50:1b:d1:02:24:51: e3:fa:3d:78:29:3c:e6:57:12:48:50:24:a8:32:8a: e4:47:d8:17:58:14:4b:ff:29:2f:bb:b6:df:c0:1e: 44:6e:0b:65:fa:3c:04:5d:e7:5b:d8:58:d5:99:7e: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DE:B8:41:B1:59:E3:A7:DD:F4:BD:8C:03:96:FE:30:1F:31:E7:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2517f729-e44f-3008-a0fd-a276fa63b898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:29:0c:84:03:69:69:c8:87:33:b5:00:13:21:c2:47:23:e3: a1:4a:94:6a:c9:39:78:1c:92:bf:75:b4:d0:31:5c:97:2a:1f: 01:f1:dd:4b:e7:53:1c:3a:4d:81:3f:2f:3d:16:34:68:aa:db: 6b:01:ed:64:e8:f8:44:94:31:2c:e1:09:70:f9:76:dd:22:7b: 2a:8d:77:66:f1:c4:c3:44:f7:3f:17:63:fd:36:39:25:3e:54: 1c:0c:97:24:83:bd:52:4f:b0:ae:9c:c9:6c:19:e0:7d:2c:ee: ec:9b:0c:cb:8b:55:a6:65:3d:fd:58:ae:c8:a0:24:18:3d:21: 51:c2:a1:6c:d1:f2:2e:1b:9a:37:a3:57:16:5f:8b:17:bb:4e: 7e:83:e7:86:57:a8:50:61:2e:9a:9f:8a:15:a8:8e:da:bf:45: 57:c9:a9:53:bd:1e:ce:e8:83:e7:e7:2b:c3:3d:e9:f6:40:a2: 68:f8:b2:51:ae:da:70:fa:73:42:b1:5d:f6:f0:88:94:93:98: e6:0b:6c:8e:e3:bb:2a:98:40:e2:41:8b:31:d8:ca:b3:e8:5e: a8:e1:9a:69:dc:ba:4a:86:05:84:68:3b:77:58:1d:9d:e8:f0: 01:1e:42:da:b2:ef:88:09:ab:56:76:d1:5f:71:af:5a:a6:7b: 4e:60:08:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAecq1aM001L3mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTFjNzkwZDQtMWZkMS00NzFiLWE2MGUtZTMxNjMwNDU3YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoslghE0sl1C1a8j5j5YRqOeYfYuqSSC1WD+q vwqDvDVAM21yt0+5+ShJQmkI8IdSZ64xahDnGcQTYCIlDZjNtGgtwri2Nx1CYDZf d/T5wuGwiBMWSbrn194BhECucoz+xcQY/E+kHUOrvF1wZlSZubuSUwnA3Y4dzL3/ Ob4mqlT4M06eMgbPR9zV/D/VfOhdVqyCl0gFbCdNDxI+f9E5brmi8WEg9+FxdoAm by723qL60lewsnWP+Bm/hW4WfoyBR/M3geysHrFWgTJQG9ECJFHj+j14KTzmVxJI UCSoMorkR9gXWBRL/ykvu7bfwB5Ebgtl+jwEXedb2FjVmX69dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPveuEGxWeOn3fS9jAOW/jAfMefNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjUxN2Y3MjktZTQ0Zi0z MDA4LWEwZmQtYTI3NmZhNjNiODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8pDIQDaWnIhzO1ABMhwkcj46FKlGrJOXgckr91tNAxXJcqHwHx3Uvn Uxw6TYE/Lz0WNGiq22sB7WTo+ESUMSzhCXD5dt0ieyqNd2bxxMNE9z8XY/02OSU+ VBwMlySDvVJPsK6cyWwZ4H0s7uybDMuLVaZlPf1YrsigJBg9IVHCoWzR8i4bmjej VxZfixe7Tn6D54ZXqFBhLpqfihWojtq/RVfJqVO9Hs7og+fnK8M96fZAomj4slGu 2nD6c0KxXfbwiJSTmOYLbI7juyqYQOJBizHYyrPoXqjhmmncukqGBYRoO3dYHZ3o 8AEeQtqy74gJq1Z20V9xr1qme05gCHM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:21 2025 by rpki-client