$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa File: 2aec3910-9740-320c-8366-632ec405b339.roa (raw, json) Hash identifier: kC9kGk45t8NZshHnf62CSr0t8GHYLQJ8ydxCD2/Z+fM= Subject key identifier: B3:6A:97:C7:87:82:D1:CA:05:0F:3A:9A:F5:D1:D5:B3:CF:FA:C0:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6202284CC34CE0EB8EDF6910 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.20.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:28:4c:c3:4c:e0:eb:8e:df:69:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b0a480eb-79d5-4566-b66c-9c71a2cdce65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:6b:11:68:c1:ce:1c:93:ef:4f:20:40:d9: ee:70:cd:56:a4:05:40:b1:bb:04:f6:71:e4:a1:69: ab:a6:85:a5:82:df:cf:0d:9e:8e:8c:93:24:c3:d3: bb:c7:94:dc:d3:a0:47:c0:52:14:5b:8a:05:dc:ff: 0e:fd:40:7a:9f:9b:b3:9d:f5:09:32:7b:db:13:20: 55:16:a7:79:57:d1:8e:75:82:29:04:fb:99:5a:80: 36:a2:eb:d1:39:b0:35:a4:89:ac:de:7c:e0:be:56: 05:94:1f:b8:25:7f:69:70:e5:15:3a:b9:b5:1a:63: b7:65:00:6f:45:fe:2b:a0:7b:f6:6f:7b:83:6a:9f: 58:69:ad:ba:08:74:36:5c:14:75:a5:c5:e8:b1:7c: 28:e4:ab:97:5e:99:f2:3e:b2:cf:7a:e1:6d:98:16: 7f:81:cc:d0:19:7e:71:6a:6b:d0:00:51:1c:c1:0b: 4a:c9:3d:f9:87:6a:2c:46:74:62:71:58:b9:11:87: b1:68:cc:8c:ec:7d:88:f8:0c:f4:da:5b:5d:0c:cf: 5b:e3:f1:af:f1:f5:cc:d9:83:96:2a:eb:a4:be:c3: 79:06:45:80:fe:26:75:25:62:9b:6f:dd:3b:66:d2: 8d:29:40:d0:70:77:64:3b:0f:4f:4b:60:10:bb:82: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6A:97:C7:87:82:D1:CA:05:0F:3A:9A:F5:D1:D5:B3:CF:FA:C0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9a:c6:9a:9f:ca:c0:07:6f:11:74:82:67:13:41:df:d9:56: 75:5e:3d:39:a2:af:2e:73:88:06:84:04:88:d8:49:60:11:74: 15:64:3d:f5:d1:f4:53:24:85:65:f7:dd:9a:17:44:2c:d6:33: f5:93:3e:ff:f6:a2:88:5b:87:d0:5d:8a:ed:62:06:a4:de:54: e5:7a:e5:19:e1:85:ec:58:bd:6b:4f:05:4f:b6:6c:59:b3:f0: 88:88:8b:0a:3d:b7:12:57:c8:50:13:87:2a:63:63:a2:2c:52: b1:b8:93:c9:70:81:8d:98:f4:34:65:8f:fe:a3:9f:9e:35:a6: 5f:28:46:ae:36:aa:73:c5:59:51:71:40:2a:b8:f3:5d:ca:6f: 37:26:3f:f6:53:fd:5b:d8:b9:be:af:a1:79:6b:9e:9c:ae:93: dd:e4:89:a8:0d:c6:73:6e:d5:44:aa:2b:7d:ad:cb:98:ce:73: b2:f3:65:e8:79:0e:37:08:f6:3a:57:46:0b:59:c7:76:80:86: 6c:66:5d:95:46:21:85:81:44:e1:9a:1e:a7:98:09:15:92:0a: 6c:2f:fe:43:cc:62:e9:2f:91:b8:59:31:1b:c6:3d:67:54:e7: 56:74:70:f4:29:28:72:49:20:1b:1b:65:eb:77:34:fe:d6:15: 8e:3c:17:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAihMw0zg647faRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjBhNDgwZWItNzlkNS00NTY2LWI2NmMtOWM3MWEyY2RjZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx65rEWjBzhyT708gQNnucM1WpAVAsbsE9nHk oWmrpoWlgt/PDZ6OjJMkw9O7x5Tc06BHwFIUW4oF3P8O/UB6n5uznfUJMnvbEyBV Fqd5V9GOdYIpBPuZWoA2ouvRObA1pIms3nzgvlYFlB+4JX9pcOUVOrm1GmO3ZQBv Rf4roHv2b3uDap9Yaa26CHQ2XBR1pcXosXwo5KuXXpnyPrLPeuFtmBZ/gczQGX5x amvQAFEcwQtKyT35h2osRnRicVi5EYexaMyM7H2I+Az02ltdDM9b4/Gv8fXM2YOW KuukvsN5BkWA/iZ1JWKbb907ZtKNKUDQcHdkOw9PS2AQu4JzWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNql8eHgtHKBQ86mvXR1bPP+sCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmFlYzM5MTAtOTc0MC0z MjBjLTgzNjYtNjMyZWM0MDViMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqaxpqfysAHbxF0gmcTQd/ZVnVePTmiry5ziAaEBIjYSWARdBVkPfXR 9FMkhWX33ZoXRCzWM/WTPv/2oohbh9Bdiu1iBqTeVOV65RnhhexYvWtPBU+2bFmz 8IiIiwo9txJXyFAThypjY6IsUrG4k8lwgY2Y9DRlj/6jn541pl8oRq42qnPFWVFx QCq4813KbzcmP/ZT/VvYub6voXlrnpyuk93kiagNxnNu1USqK32ty5jOc7LzZeh5 DjcI9jpXRgtZx3aAhmxmXZVGIYWBROGaHqeYCRWSCmwv/kPMYukvkbhZMRvGPWdU 51Z0cPQpKHJJIBsbZet3NP7WFY48F/w= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:17 2025 by rpki-client