$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa File: 8e5790fe-671f-3fb2-acc2-af37819929ac.roa (raw, json) Hash identifier: GlylvIX1xvlvo7tEfJXeLL25YXg6gs3vDi0+kP79dyU= Subject key identifier: 9C:45:1D:77:D7:77:4B:28:AC:9E:46:29:C4:39:3A:CF:55:26:52:2B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62022566A0F648BDC5022460 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.17.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:25:66:a0:f6:48:bd:c5:02:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=67c58bd5-af24-4040-b459-5cc3a57af3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:d6:90:4c:f3:67:33:41:f7:51:22:8d:fc: 15:88:30:14:31:fd:b7:03:a3:60:5c:d0:69:a5:68: 1c:25:48:49:e5:b7:04:62:17:30:5c:18:dc:2d:38: eb:67:23:a0:e2:ca:96:aa:68:f7:5c:26:fc:3e:40: 0b:a6:49:e3:df:b7:eb:fd:6a:8c:19:ea:bd:7a:a2: 08:f5:15:1b:d0:d9:d9:44:a3:c2:47:66:69:cb:63: a2:e5:88:f0:e9:5e:22:40:69:e8:76:36:a0:f7:98: 56:9d:80:82:51:e3:8a:2f:b8:39:fc:ac:7f:a9:a5: 4b:7d:5e:4a:d6:00:c5:09:ac:37:33:66:b3:e1:49: 3b:6f:b9:e9:e4:90:e6:19:35:aa:7f:90:96:f1:fb: cc:8a:11:d8:56:0d:fb:a4:78:52:77:02:66:30:64: 66:80:a7:e1:79:7f:1e:93:23:e5:08:25:f7:60:42: fc:35:72:6a:9e:fe:48:ff:0b:d2:fd:2c:97:97:df: f2:71:db:f2:f8:e7:d8:db:17:88:28:ca:4a:76:b8: 27:34:20:47:fa:98:4f:61:f1:c5:5d:50:84:af:15: eb:28:56:c8:88:77:c9:e4:4f:19:7b:21:62:b7:bd: 91:89:ff:d3:6b:8d:d3:ee:b6:22:ef:0d:58:9a:7e: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:1D:77:D7:77:4B:28:AC:9E:46:29:C4:39:3A:CF:55:26:52:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:43:fa:09:52:f9:44:23:f5:81:f4:e0:a6:34:34:af:4c:ec: 62:4e:53:63:18:0d:3a:59:99:91:09:4d:79:bf:b5:b0:2d:18: 6d:46:f0:14:59:a8:44:07:e7:26:c5:87:08:b1:56:5a:66:9e: e7:99:0e:d6:f2:23:86:b4:fe:8f:09:c8:ee:21:09:bb:b6:eb: 9d:14:9e:d0:6a:3f:3a:f4:68:72:cf:71:89:0d:0b:81:8f:88: ac:70:c9:d3:c9:18:20:72:88:11:22:23:db:df:1c:ef:de:81: 7f:cd:c2:cd:65:4e:2d:f9:12:16:66:29:dc:83:05:02:65:e8: 1a:08:8a:6a:26:ba:24:ea:cf:39:82:e4:72:c1:4a:d0:60:e5: 28:d4:87:55:d7:ed:9a:9c:69:5a:a2:21:ac:9d:39:a2:9d:d7: f6:d3:63:19:b1:1c:d1:a4:c2:aa:f0:8b:ab:8b:ec:d7:ea:d2: 00:fc:12:36:e3:0c:b9:d1:d8:ad:4e:e5:89:56:62:ba:73:7e: 7f:a6:62:8d:99:2e:8c:b2:89:df:b7:84:a1:bd:a8:2b:8d:83: fb:c6:f9:09:aa:a5:24:79:25:76:53:d8:e8:8d:d1:3f:85:9e: d8:11:9a:8b:72:ae:e6:7d:b3:cd:e9:3d:a1:ec:f9:cf:19:09: c9:9c:1a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiVmoPZIvcUCJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjdjNThiZDUtYWYyNC00MDQwLWI0NTktNWNjM2E1N2FmM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo7WkEzzZzNB91EijfwViDAUMf23A6NgXNBp pWgcJUhJ5bcEYhcwXBjcLTjrZyOg4sqWqmj3XCb8PkALpknj37fr/WqMGeq9eqII 9RUb0NnZRKPCR2Zpy2Oi5Yjw6V4iQGnodjag95hWnYCCUeOKL7g5/Kx/qaVLfV5K 1gDFCaw3M2az4Uk7b7np5JDmGTWqf5CW8fvMihHYVg37pHhSdwJmMGRmgKfheX8e kyPlCCX3YEL8NXJqnv5I/wvS/SyXl9/ycdvy+OfY2xeIKMpKdrgnNCBH+phPYfHF XVCErxXrKFbIiHfJ5E8ZeyFit72Rif/Ta43T7rYi7w1Ymn7KaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxFHXfXd0sorJ5GKcQ5Os9VJlIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGU1NzkwZmUtNjcxZi0z ZmIyLWFjYzItYWYzNzgxOTkyOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZD+glS+UQj9YH04KY0NK9M7GJOU2MYDTpZmZEJTXm/tbAtGG1G8BRZ qEQH5ybFhwixVlpmnueZDtbyI4a0/o8JyO4hCbu2650UntBqPzr0aHLPcYkNC4GP iKxwydPJGCByiBEiI9vfHO/egX/Nws1lTi35EhZmKdyDBQJl6BoIimomuiTqzzmC 5HLBStBg5SjUh1XX7ZqcaVqiIaydOaKd1/bTYxmxHNGkwqrwi6uL7Nfq0gD8Ejbj DLnR2K1O5YlWYrpzfn+mYo2ZLoyyid+3hKG9qCuNg/vG+QmqpSR5JXZT2OiN0T+F ntgRmotyruZ9s83pPaHs+c8ZCcmcGt8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:50 2025 by rpki-client