$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d0b092a-18c8-31b1-8323-b93d692e541c.roa File: 5d0b092a-18c8-31b1-8323-b93d692e541c.roa (raw, json) Hash identifier: RKWiOv9gA5qWgwuYjLz4TAW0oyTD/5yH+jeo9SCs2g4= Subject key identifier: 36:B8:5E:13:EE:38:C4:57:15:AB:8A:41:A2:55:69:F5:06:60:86:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B679731A42F429813CAB689C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d0b092a-18c8-31b1-8323-b93d692e541c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:31:a4:2f:42:98:13:ca:b6:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1dcd9617-830f-4959-bc26-28503a3eebf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:33:bb:23:af:75:c6:27:f4:13:5b:c1:80:a5: be:5d:f3:af:f5:cb:c6:93:fa:a5:d2:4c:b1:74:ed: e3:7b:e6:ac:49:1d:71:04:3b:a5:55:dd:68:e0:1e: 90:5f:14:20:52:3c:c5:80:05:9e:76:f0:f2:2b:7e: 89:72:6b:b4:c2:82:87:14:29:be:98:98:46:6c:8f: 45:c2:d0:22:8a:ae:1c:08:a9:10:83:b7:c9:8a:d1: 7b:25:c5:b2:75:dc:16:de:e6:3b:8c:dc:50:48:1d: 77:ee:60:a9:53:73:5b:c1:a6:d2:10:18:95:0b:93: 99:47:35:a6:f9:f3:28:b6:09:6b:e3:29:5f:41:d2: 0a:8e:9e:d4:15:9a:8e:dc:ce:57:34:10:ef:52:d0: 31:10:e6:cf:e8:b4:4d:d0:6d:a1:bb:f6:92:aa:ef: fb:51:fa:5b:29:f1:3f:6f:4f:c2:b2:dd:72:60:5a: 42:25:94:7d:38:e5:db:f2:4b:67:a3:de:00:44:bd: e5:2d:9a:44:25:88:df:2a:99:c8:99:4e:08:aa:8f: 6f:05:d5:38:62:27:cc:ae:95:0e:3a:5d:d6:21:18: 1f:8a:c9:cc:c9:3e:cb:87:1b:ef:3b:81:d2:0b:2a: 00:2b:5b:04:45:f7:e4:4e:e6:03:7c:35:7f:56:e1: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B8:5E:13:EE:38:C4:57:15:AB:8A:41:A2:55:69:F5:06:60:86:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d0b092a-18c8-31b1-8323-b93d692e541c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:93:77:20:67:04:10:34:5a:5b:68:09:59:b6:a9:a6:86:87: 2b:44:22:30:34:38:f7:35:ec:59:b0:f2:f3:e1:cc:ad:9d:69: 1b:b7:16:59:c5:94:1c:bf:62:54:b0:b2:e6:eb:72:ee:81:b7: 04:bb:38:2b:fa:d7:71:b2:7c:99:f6:b3:6c:3d:85:60:21:ca: 7b:a7:b7:b3:12:51:09:69:b5:db:ec:56:32:41:e1:2a:6b:03: 99:96:eb:52:33:88:bf:6a:13:78:1f:9f:64:82:43:d9:65:36: 4d:1b:6a:d8:75:0b:d9:6a:64:c2:66:23:22:ae:3b:06:8e:91: 69:d3:d5:3e:e2:92:97:1d:b4:46:04:0c:cc:35:a0:d1:c8:3e: 1f:62:75:7c:97:59:68:40:7e:aa:c0:60:0b:dc:50:ed:a2:38: f7:78:99:f1:85:62:4c:a4:b1:86:92:fb:89:cf:d3:dd:1f:e2: 5b:0c:d0:f1:1f:09:32:9f:c2:25:28:31:4e:93:c7:13:75:3c: 56:43:50:d3:08:2c:ee:4a:19:af:75:a9:64:87:23:3a:40:2e: 5e:19:cc:ad:0c:dc:b5:c0:37:70:b4:a0:3e:d2:c0:ae:34:cf: b0:6f:56:07:ef:65:c8:40:3d:40:dd:96:8d:51:79:a7:e0:1a: 1b:9a:bf:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzGkL0KYE8q2icAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWRjZDk2MTctODMwZi00OTU5LWJjMjYtMjg1MDNhM2VlYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzO7I691xif0E1vBgKW+XfOv9cvGk/ql0kyx dO3je+asSR1xBDulVd1o4B6QXxQgUjzFgAWedvDyK36Jcmu0woKHFCm+mJhGbI9F wtAiiq4cCKkQg7fJitF7JcWyddwW3uY7jNxQSB137mCpU3NbwabSEBiVC5OZRzWm +fMotglr4ylfQdIKjp7UFZqO3M5XNBDvUtAxEObP6LRN0G2hu/aSqu/7UfpbKfE/ b0/Cst1yYFpCJZR9OOXb8ktno94ARL3lLZpEJYjfKpnImU4Iqo9vBdU4YifMrpUO Ol3WIRgfisnMyT7LhxvvO4HSCyoAK1sERffkTuYDfDV/VuFsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa4XhPuOMRXFauKQaJVafUGYIaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQwYjA5MmEtMThjOC0z MWIxLTgzMjMtYjkzZDY5MmU1NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKTdyBnBBA0WltoCVm2qaaGhytEIjA0OPc17Fmw8vPhzK2daRu3FlnF lBy/YlSwsubrcu6BtwS7OCv613GyfJn2s2w9hWAhynunt7MSUQlptdvsVjJB4Spr A5mW61IziL9qE3gfn2SCQ9llNk0bath1C9lqZMJmIyKuOwaOkWnT1T7ikpcdtEYE DMw1oNHIPh9idXyXWWhAfqrAYAvcUO2iOPd4mfGFYkyksYaS+4nP090f4lsM0PEf CTKfwiUoMU6TxxN1PFZDUNMILO5KGa91qWSHIzpALl4ZzK0M3LXAN3C0oD7SwK40 z7BvVgfvZchAPUDdlo1ReafgGhuav0k= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:45 2025 by rpki-client