$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa File: 8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa (raw, json) Hash identifier: IlomvCWa+rarZ6eGlYV2uRTWHFRIyu7kJwblYcvXQD8= Subject key identifier: BB:43:DF:1D:A6:58:81:EC:5F:6C:38:AE:4B:30:B8:1F:44:CE:5D:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6632080CAE95967ADABDE580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 30036 IP address blocks: 173.17.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:08:0c:ae:95:96:7a:da:bd:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=425b72f2-e14d-48e5-a695-5618c05b50d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f9:c9:45:36:4e:8d:f3:0f:5f:71:d7:f3:7a: 0e:3f:3f:71:15:99:a5:fd:ab:d5:65:02:73:d2:92: 8c:83:79:d6:5e:66:b5:da:67:ed:0b:30:0e:f2:34: 5d:0a:12:05:53:7b:b4:d9:5a:7f:9f:22:40:62:7b: 66:90:59:e4:c8:d8:c8:e1:d6:b6:de:b6:70:90:70: fc:fc:f2:c5:df:2f:a8:85:8a:d9:65:f9:1a:80:40: 5e:f7:bd:23:cb:44:d9:f1:00:f2:bb:e1:72:e3:e3: 2e:4d:24:ec:76:8f:be:e8:87:b0:62:8e:da:bd:ef: 01:67:8f:c0:b9:bf:8d:57:11:ad:3a:59:f9:94:ca: ec:f8:48:86:bd:3f:33:7f:63:34:07:1c:20:49:2c: 21:10:05:16:d6:d1:b5:40:53:f9:c6:5c:e9:df:2f: 97:ac:a2:3c:1a:18:f5:c6:36:19:13:cf:c7:d9:7f: 5c:88:ec:7d:39:21:e6:8a:3b:83:71:93:b4:61:c4: 42:dd:2f:7b:32:e3:24:4c:aa:b3:f0:07:fc:5b:0f: b4:db:5b:5b:93:42:24:15:78:8e:f9:34:b4:6b:63: ef:1a:23:3b:c2:f1:67:94:b8:9d:1c:67:a8:b8:24: d9:e0:d5:2a:fd:26:4a:36:77:c4:16:80:6c:91:93: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:43:DF:1D:A6:58:81:EC:5F:6C:38:AE:4B:30:B8:1F:44:CE:5D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:71:e0:19:b4:67:aa:b5:2e:57:f9:82:06:14:82:8d:88:88: 3e:03:d9:e5:ec:fe:19:fe:b3:94:fb:e1:01:db:cd:8f:f1:41: 0b:27:2f:a7:de:a0:56:2c:89:2e:ab:3c:3a:b3:b3:f2:c5:f1: 56:23:88:33:1a:71:af:da:1a:69:75:3d:4f:ab:60:01:d6:dd: 1a:16:ca:71:b7:cb:4c:08:77:7c:e2:fc:df:5b:f1:00:ab:96: da:35:03:a7:bf:40:30:69:f1:6d:bf:e8:42:16:af:c8:3e:0e: 14:0d:42:80:cd:04:95:06:bf:fe:f5:82:dc:8a:9a:95:88:67: 5c:ab:0e:1e:55:05:b5:2a:ad:4f:a1:fe:67:11:71:f9:ea:88: aa:78:5a:4a:a5:29:fc:25:64:34:bb:70:47:2a:d3:f7:4b:a9: 00:40:d8:a0:7c:42:a0:4c:69:94:8e:73:34:25:a3:96:20:1a: 9d:87:a6:7d:0d:6d:dc:dd:6d:c7:0c:86:39:60:70:cf:37:bf: fa:9c:a6:4c:b4:e6:73:b9:92:4f:f1:17:90:c6:0c:6c:c2:fe: 8e:b0:81:e3:1e:c5:78:4b:24:eb:d9:c9:8d:fa:6e:b4:55:f6: 40:b5:63:c4:39:ce:41:2c:27:60:82:4f:61:bf:c9:a6:5e:21: cc:d1:83:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMggMrpWWetq95YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NDI1YjcyZjItZTE0ZC00OGU1LWE2OTUtNTYxOGMwNWI1MGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fnJRTZOjfMPX3HX83oOPz9xFZml/avVZQJz 0pKMg3nWXma12mftCzAO8jRdChIFU3u02Vp/nyJAYntmkFnkyNjI4da23rZwkHD8 /PLF3y+ohYrZZfkagEBe970jy0TZ8QDyu+Fy4+MuTSTsdo++6IewYo7ave8BZ4/A ub+NVxGtOln5lMrs+EiGvT8zf2M0BxwgSSwhEAUW1tG1QFP5xlzp3y+XrKI8Ghj1 xjYZE8/H2X9ciOx9OSHmijuDcZO0YcRC3S97MuMkTKqz8Af8Ww+021tbk0IkFXiO +TS0a2PvGiM7wvFnlLidHGeouCTZ4NUq/SZKNnfEFoBskZPXswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtD3x2mWIHsX2w4rkswuB9Ezl1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGUxMmNmYWItMzZhYy0z YjI4LThkZGEtOWYyMjMyYmVmYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1x4Bm0Z6q1Llf5ggYUgo2IiD4D2eXs/hn+s5T74QHbzY/xQQsnL6fe oFYsiS6rPDqzs/LF8VYjiDMaca/aGml1PU+rYAHW3RoWynG3y0wId3zi/N9b8QCr lto1A6e/QDBp8W2/6EIWr8g+DhQNQoDNBJUGv/71gtyKmpWIZ1yrDh5VBbUqrU+h /mcRcfnqiKp4WkqlKfwlZDS7cEcq0/dLqQBA2KB8QqBMaZSOczQlo5YgGp2Hpn0N bdzdbccMhjlgcM83v/qcpky05nO5kk/xF5DGDGzC/o6wgeMexXhLJOvZyY36brRV 9kC1Y8Q5zkEsJ2CCT2G/yaZeIczRgzA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:29 2025 by rpki-client