$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5166e63f-4cf9-344f-8eb0-7310a0c381aa.roa File: 5166e63f-4cf9-344f-8eb0-7310a0c381aa.roa (raw, json) Hash identifier: BewLkximubemSpQZ+91+olPPSo3yK34Y7BYdWxIzhfU= Subject key identifier: F2:8E:41:C9:F1:F8:C1:57:75:5F:09:38:3E:10:E2:E1:14:8C:3F:A4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D740617B4E6DA78BFD9480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5166e63f-4cf9-344f-8eb0-7310a0c381aa.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:40:61:7b:4e:6d:a7:8b:fd:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=cec0117b-908f-44f3-9915-37d14d06860e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:b6:6c:54:1f:a2:7b:9f:aa:8c:d9:9a:33: ea:81:d9:c5:a9:63:01:16:23:e1:7d:08:40:35:f7: 4b:51:03:fd:a1:d9:72:a1:fa:70:2f:6a:a8:d0:dd: eb:13:d6:0a:fb:7e:29:c8:b9:30:f8:af:b2:e6:b1: fe:91:8a:ea:90:1b:48:7b:5a:56:38:da:c4:e0:81: 0f:e5:11:14:a6:9a:3d:4c:c8:9f:0e:e9:e3:ca:17: a6:26:b1:2f:14:55:03:10:c7:1f:70:24:25:27:6c: 7c:80:66:18:17:6b:04:c6:29:c6:04:dd:a1:6c:81: ee:4e:d5:d8:6a:08:f2:b5:9a:be:71:c5:69:b9:dd: 70:2e:a7:e6:3b:9e:0e:99:75:5b:36:3d:99:37:90: e5:1e:68:30:6d:8f:50:35:1f:e4:bc:0d:7e:ac:b0: 63:a8:46:7b:8e:9a:cb:bc:82:77:c4:a5:94:38:15: aa:21:02:c3:69:98:63:64:ac:3d:d3:7b:8f:31:98: b1:43:48:ba:19:1a:47:3a:d2:c3:1b:d0:86:3a:d3: 7a:d8:ec:a6:bc:e4:a2:5c:42:98:91:16:ad:18:10: 46:c8:99:cc:c3:41:83:93:88:2d:de:79:a7:f6:6c: 76:fe:7c:fc:a3:26:17:cf:e0:2d:a3:b0:ff:98:e8: 1c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8E:41:C9:F1:F8:C1:57:75:5F:09:38:3E:10:E2:E1:14:8C:3F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5166e63f-4cf9-344f-8eb0-7310a0c381aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:72:53:a8:e5:25:b5:2c:f5:a0:d3:50:aa:d9:02:6d:45:13: 03:43:a5:6a:80:e4:be:24:33:57:b5:dd:e5:d6:35:d2:7f:86: bb:53:bd:94:a8:17:e9:ad:54:39:21:73:ce:c1:51:37:d8:38: 65:5a:c5:fb:c0:df:db:32:e8:f1:86:e1:ae:29:ea:30:5a:fd: 6f:0b:db:17:11:fd:2d:06:bd:3f:c1:d5:0b:36:b6:b5:46:80: fd:3e:00:9e:95:4d:63:d1:fe:bb:b6:e7:75:c6:b9:a6:e1:56: 4f:92:02:e4:3d:d7:f2:b4:e1:5f:fc:1f:6e:a3:b6:31:5b:c3: cb:1c:1b:3d:fe:e8:2f:2b:c6:7d:30:7d:53:85:2b:f1:66:4c: 0d:27:25:00:e9:72:b6:f4:a3:03:95:50:9e:b0:4a:06:23:af: 86:e1:a3:fa:db:9c:04:3f:2b:92:2c:7a:97:ec:8f:ad:26:fa: 2d:1a:2c:0e:08:0a:43:a7:bd:7b:41:49:d2:e9:bf:10:ee:21: 8f:54:ce:72:4d:e2:dd:cd:66:de:3a:1f:32:ee:7e:3c:ff:38: ae:15:09:bf:cd:16:22:5a:8a:8f:5a:12:03:ad:b2:79:a4:2f: 84:d3:c3:3f:ec:11:57:d5:4b:5c:79:36:dd:9e:6a:12:5e:fa: a6:d9:cb:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10Bhe05tp4v9lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2VjMDExN2ItOTA4Zi00NGYzLTk5MTUtMzdkMTRkMDY4NjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPi2bFQfonufqozZmjPqgdnFqWMBFiPhfQhA NfdLUQP9odlyofpwL2qo0N3rE9YK+34pyLkw+K+y5rH+kYrqkBtIe1pWONrE4IEP 5REUppo9TMifDunjyhemJrEvFFUDEMcfcCQlJ2x8gGYYF2sExinGBN2hbIHuTtXY agjytZq+ccVpud1wLqfmO54OmXVbNj2ZN5DlHmgwbY9QNR/kvA1+rLBjqEZ7jprL vIJ3xKWUOBWqIQLDaZhjZKw903uPMZixQ0i6GRpHOtLDG9CGOtN62OymvOSiXEKY kRatGBBGyJnMw0GDk4gt3nmn9mx2/nz8oyYXz+Ato7D/mOgcRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKOQcnx+MFXdV8JOD4Q4uEUjD+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTE2NmU2M2YtNGNmOS0z NDRmLThlYjAtNzMxMGEwYzM4MWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5yU6jlJbUs9aDTUKrZAm1FEwNDpWqA5L4kM1e13eXWNdJ/hrtTvZSo F+mtVDkhc87BUTfYOGVaxfvA39sy6PGG4a4p6jBa/W8L2xcR/S0GvT/B1Qs2trVG gP0+AJ6VTWPR/ru253XGuabhVk+SAuQ91/K04V/8H26jtjFbw8scGz3+6C8rxn0w fVOFK/FmTA0nJQDpcrb0owOVUJ6wSgYjr4bho/rbnAQ/K5Isepfsj60m+i0aLA4I CkOnvXtBSdLpvxDuIY9UznJN4t3NZt46HzLufjz/OK4VCb/NFiJaio9aEgOtsnmk L4TTwz/sEVfVS1x5Nt2eahJe+qbZy2A= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:54 2025 by rpki-client