$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68900678-aaf3-3bea-be9f-c204a0425c30.roa File: 68900678-aaf3-3bea-be9f-c204a0425c30.roa (raw, json) Hash identifier: CIkOUvD2wADVWzeQo7coe9KfJ2e/SbWyTrykPzStSo4= Subject key identifier: 3D:95:36:3F:7A:7A:97:4C:51:E6:F4:F9:30:1C:99:2A:D9:B7:9A:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE5DA616BD622EC328E810 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68900678-aaf3-3bea-be9f-c204a0425c30.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.17.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:5d:a6:16:bd:62:2e:c3:28:e8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2ff8a239-387e-43b9-89f7-9d1c5ebef7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:0e:b2:f6:16:ce:18:21:b3:12:26:33:be: 1c:05:4c:1e:94:fa:b9:39:29:af:ce:79:8b:0e:82: eb:bb:c4:64:77:50:2d:e8:37:7a:f1:4f:89:81:ce: 63:3e:b0:8c:6f:57:3f:27:e1:d4:81:19:d1:c3:45: 49:c6:65:cd:ca:7d:fb:63:63:fb:4a:60:54:a1:aa: ed:8b:bb:f5:99:76:1d:d0:73:bf:e5:0d:08:62:8a: e4:05:c2:98:52:e7:d6:ba:31:ae:72:63:71:b4:f0: 81:33:e1:62:a2:be:dd:0b:3e:c2:db:fa:9b:af:ae: d3:16:1c:a3:00:8a:85:53:19:f4:63:aa:82:a2:68: 8e:28:1d:c1:b3:9e:df:1c:37:fb:8d:f7:7c:95:59: 73:18:54:4b:fb:d6:44:af:39:71:e8:ca:64:1a:b3: dd:d9:3a:4a:ee:5c:79:bc:fb:9c:ae:3c:24:ff:e0: af:2b:3f:0f:64:35:68:c2:07:d9:03:c7:7b:b0:43: 3e:93:a8:ed:cb:f9:78:95:64:0e:d4:90:c4:c8:ac: 5f:fe:ce:10:30:63:d6:70:ed:c3:ac:df:5f:99:61: 38:72:ad:17:fd:29:e8:87:08:00:40:32:b2:c8:d6: 26:20:58:4f:16:c8:d8:4e:76:d9:05:2a:22:74:ce: 2b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:95:36:3F:7A:7A:97:4C:51:E6:F4:F9:30:1C:99:2A:D9:B7:9A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68900678-aaf3-3bea-be9f-c204a0425c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:cc:96:3e:85:53:fd:99:7d:41:a2:22:06:ff:4d:8c:e6:b0: 7d:df:82:a8:58:d1:d4:74:87:1f:e0:1f:24:3f:31:a7:07:36: 4d:14:1b:3c:2b:b1:31:e6:3b:f7:a6:e6:d9:bf:ff:0f:09:f3: 51:fb:96:99:94:54:14:1c:54:a7:ee:b4:4f:96:ed:66:db:88: 09:ed:e7:a5:0f:63:cf:d4:25:c4:b8:42:53:45:fd:09:18:d3: 48:3b:c7:fc:7d:34:a0:fb:24:0b:c5:b9:b2:9f:3e:e2:47:b9: dc:95:73:b7:04:87:a7:54:86:dc:01:c2:3d:3d:36:16:c1:d6: 2e:89:68:5e:f3:40:f2:12:9c:5b:cb:18:6d:4f:f9:b2:06:62: 32:36:03:85:68:ef:19:8b:36:d8:a5:6d:ba:8a:cb:66:56:ad: 2d:bf:6f:89:8b:71:27:b4:00:f9:29:15:36:29:5a:6b:39:39: ad:8e:21:8c:4c:a0:59:5d:ce:d9:75:5c:c8:a6:56:61:5a:21: 3e:05:2a:9c:c7:90:9a:b4:06:ce:17:42:c1:a7:fd:e7:ed:d7: 47:f7:8f:4c:39:7d:89:97:73:6a:dc:4e:4e:ba:bb:1d:a1:60: b0:eb:20:4e:ac:9c:9b:6e:c0:c2:9a:d6:5a:04:61:90:55:51: 59:fe:68:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzl2mFr1iLsMo6BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmZmOGEyMzktMzg3ZS00M2I5LTg5ZjctOWQxYzVlYmVmN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZIOsvYWzhghsxImM74cBUwelPq5OSmvznmL DoLru8Rkd1At6Dd68U+Jgc5jPrCMb1c/J+HUgRnRw0VJxmXNyn37Y2P7SmBUoart i7v1mXYd0HO/5Q0IYorkBcKYUufWujGucmNxtPCBM+Fior7dCz7C2/qbr67TFhyj AIqFUxn0Y6qComiOKB3Bs57fHDf7jfd8lVlzGFRL+9ZErzlx6MpkGrPd2TpK7lx5 vPucrjwk/+CvKz8PZDVowgfZA8d7sEM+k6jty/l4lWQO1JDEyKxf/s4QMGPWcO3D rN9fmWE4cq0X/SnohwgAQDKyyNYmIFhPFsjYTnbZBSoidM4rEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2VNj96epdMUeb0+TAcmSrZt5qyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjg5MDA2NzgtYWFmMy0z YmVhLWJlOWYtYzIwNGEwNDI1YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDMlj6FU/2ZfUGiIgb/TYzmsH3fgqhY0dR0hx/gHyQ/MacHNk0UGzwr sTHmO/em5tm//w8J81H7lpmUVBQcVKfutE+W7WbbiAnt56UPY8/UJcS4QlNF/QkY 00g7x/x9NKD7JAvFubKfPuJHudyVc7cEh6dUhtwBwj09NhbB1i6JaF7zQPISnFvL GG1P+bIGYjI2A4Vo7xmLNtilbbqKy2ZWrS2/b4mLcSe0APkpFTYpWms5Oa2OIYxM oFldztl1XMimVmFaIT4FKpzHkJq0Bs4XQsGn/eft10f3j0w5fYmXc2rcTk66ux2h YLDrIE6snJtuwMKa1loEYZBVUVn+aN0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:31 2025 by rpki-client