$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7fa2c773-b4c4-3cad-a683-05ed38ba2a90.roa File: 7fa2c773-b4c4-3cad-a683-05ed38ba2a90.roa (raw, json) Hash identifier: 8GGm9G3cnXKA2kXsrEub5i+hdebA0PLEwU9i09Ft0eI= Subject key identifier: CA:46:DC:CE:57:CE:43:55:D6:B8:13:A2:1E:90:27:BC:5D:FC:C4:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCBC9EE714F79195EF6080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7fa2c773-b4c4-3cad-a683-05ed38ba2a90.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.17.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:bc:9e:e7:14:f7:91:95:ef:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=abbedae6-f9fd-42b4-a7bc-93ce57ba8e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:6a:59:41:01:d7:10:fb:3f:49:9c:c2:9d: cb:ec:be:52:8a:1d:7b:3d:18:4d:3b:e6:5c:b1:3f: 70:7d:ad:bd:19:30:26:7a:e3:f6:ff:54:fd:2d:87: 45:a2:b9:e9:57:f0:67:bf:5b:81:e2:4f:f5:96:c1: b3:4d:fc:65:5f:79:51:15:a1:d7:df:5c:14:c9:0a: d2:1f:f7:ef:b9:5f:6b:10:37:56:8d:5e:fc:89:ba: 29:d2:2f:fe:2a:1d:e0:c7:80:65:e8:55:ae:86:50: f1:7f:46:22:90:f8:cb:9e:65:77:c1:ab:55:07:0e: f5:93:69:99:39:44:c2:b2:ba:5f:f7:13:8f:2d:90: e7:7e:8b:c5:e0:65:ac:1a:4e:4d:79:89:7c:a9:54: 05:23:95:80:9c:52:ab:55:b5:ec:ac:48:55:68:d6: 1c:5e:e1:1d:0e:eb:8e:4d:4e:ef:93:f4:b9:e0:1e: 33:7b:3b:22:d6:61:5f:5d:c5:9e:31:2a:38:44:c4: 27:c9:e8:9c:1b:62:29:3e:18:2a:66:26:e8:e6:77: 2b:5f:fa:39:41:19:d5:63:e3:36:e5:34:db:bd:e2: e8:10:60:0a:e6:50:4c:0f:86:1e:66:75:44:99:d6: 04:f5:29:f9:3d:9d:e5:ea:70:3a:57:80:08:d7:3f: 94:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:46:DC:CE:57:CE:43:55:D6:B8:13:A2:1E:90:27:BC:5D:FC:C4:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7fa2c773-b4c4-3cad-a683-05ed38ba2a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:51:84:21:e1:03:72:04:c0:ca:5d:7e:3f:06:17:63:88:03: 75:a4:8c:da:27:58:4e:c8:7c:21:23:da:44:2d:9e:a1:87:ad: 56:68:e7:bd:33:95:b0:0c:c6:56:57:8b:11:be:67:7a:74:82: f3:03:e1:9f:56:8b:ef:67:6d:15:4b:54:c8:e7:3a:fd:b7:6d: 74:83:33:cd:6c:06:5f:4a:97:37:31:48:21:f6:f4:91:fe:2a: c7:35:e6:18:2d:3f:79:e0:00:f6:fb:80:90:d1:07:1e:c7:7b: 22:13:9d:8c:fb:00:a4:9f:8d:7d:45:56:f9:b1:63:de:b6:f7: 3f:9d:44:57:1d:2d:4f:16:7a:ba:07:5b:25:dd:92:3e:61:49: cc:08:c6:76:fe:33:36:93:64:ca:31:05:0c:9e:1a:27:e7:c3: 12:c1:f0:36:e5:69:72:8f:22:03:34:ed:3d:37:4e:76:9a:de: 74:6f:48:24:6e:42:4b:38:47:f1:c7:3e:4a:f5:53:12:1b:30: 62:55:f1:bb:81:6d:d9:ce:a9:b0:a2:67:6a:7d:50:8d:7a:96: 47:fb:b5:7f:02:7b:ca:ac:78:f5:b8:25:9b:49:36:e3:3f:29: fe:15:01:45:cb:c1:62:ed:2e:92:da:5e:a5:4b:32:31:9e:9a: 33:bf:d4:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLye5xT3kZXvYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWJiZWRhZTYtZjlmZC00MmI0LWE3YmMtOTNjZTU3YmE4ZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdZqWUEB1xD7P0mcwp3L7L5Sih17PRhNO+Zc sT9wfa29GTAmeuP2/1T9LYdFornpV/Bnv1uB4k/1lsGzTfxlX3lRFaHX31wUyQrS H/fvuV9rEDdWjV78ibop0i/+Kh3gx4Bl6FWuhlDxf0YikPjLnmV3watVBw71k2mZ OUTCsrpf9xOPLZDnfovF4GWsGk5NeYl8qVQFI5WAnFKrVbXsrEhVaNYcXuEdDuuO TU7vk/S54B4zezsi1mFfXcWeMSo4RMQnyeicG2IpPhgqZibo5ncrX/o5QRnVY+M2 5TTbveLoEGAK5lBMD4YeZnVEmdYE9Sn5PZ3l6nA6V4AI1z+UFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpG3M5XzkNV1rgToh6QJ7xd/MT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2ZhMmM3NzMtYjRjNC0z Y2FkLWE2ODMtMDVlZDM4YmEyYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRF5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdRhCHhA3IEwMpdfj8GF2OIA3WkjNonWE7IfCEj2kQtnqGHrVZo570z lbAMxlZXixG+Z3p0gvMD4Z9Wi+9nbRVLVMjnOv23bXSDM81sBl9KlzcxSCH29JH+ Ksc15hgtP3ngAPb7gJDRBx7HeyITnYz7AKSfjX1FVvmxY9629z+dRFcdLU8WeroH WyXdkj5hScwIxnb+MzaTZMoxBQyeGifnwxLB8DblaXKPIgM07T03Tnaa3nRvSCRu Qks4R/HHPkr1UxIbMGJV8buBbdnOqbCiZ2p9UI16lkf7tX8Ce8qsePW4JZtJNuM/ Kf4VAUXLwWLtLpLaXqVLMjGemjO/1IY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:04 2025 by rpki-client