$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa File: a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa (raw, json) Hash identifier: DwTRHGe4HWPWXIFE/8Ir1f28Xe25uJBR56TLObbpj5U= Subject key identifier: 70:40:10:8C:8C:84:90:38:DF:2A:51:F4:B2:81:E2:81:5E:C2:6F:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67972FCF494FBF947019AB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:2f:cf:49:4f:bf:94:70:19:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3bbbe8c3-9ccf-4e2b-b716-f4898be00600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:60:d8:e5:35:9a:92:d7:98:5c:3b:0b:8d: f3:0d:27:63:7b:78:20:a6:32:b8:43:7d:64:b0:ad: 84:05:f8:11:6e:98:09:79:27:fc:b3:a1:47:59:c1: 73:71:0b:f7:03:bf:4d:b1:55:99:f9:8a:c5:b6:93: 73:72:d8:24:4a:24:96:9d:5a:0f:a3:2b:7e:c4:92: 87:b1:d8:fa:7d:43:f2:36:94:c5:69:16:c6:70:44: bd:61:ce:6c:fe:ac:fa:dc:b0:71:f4:88:68:c7:be: 5a:64:7b:b5:1f:49:cf:d8:5b:f3:1f:55:66:a4:0e: be:f2:a5:aa:9d:74:58:2f:8e:88:a6:80:29:ba:4c: 74:1e:c1:21:b9:a3:63:0b:21:14:72:09:5e:8c:dd: da:85:4b:36:c3:06:58:1a:8c:9c:b1:2f:a4:2a:85: f6:2b:2d:8b:0a:8c:90:dd:2a:dd:ba:09:b6:6a:a0: 74:76:ca:96:f8:ac:e9:e3:fe:5b:0c:d7:d0:2f:7b: 1d:3a:31:a2:7c:21:76:9d:b6:fb:c2:b8:2c:8e:ed: 89:25:b8:aa:62:56:56:de:50:f1:b4:0f:1b:c2:47: fd:b1:d4:0d:1d:e2:10:53:7b:09:cb:6c:13:98:58: 02:52:e9:fa:97:e5:da:10:75:c9:ea:62:64:1e:df: 15:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:40:10:8C:8C:84:90:38:DF:2A:51:F4:B2:81:E2:81:5E:C2:6F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c1:96:b6:d2:ac:67:41:03:c4:63:84:e5:d7:a1:ad:05:af: cc:1b:00:30:88:a3:48:b3:ae:67:fd:0a:ff:74:75:36:fa:86: 2e:6d:3c:63:59:e4:cf:c9:7e:c0:50:61:78:25:e9:9e:2a:d2: 6b:10:c2:4b:b1:6c:8f:da:01:cb:f8:ad:04:67:ae:72:db:39: 05:f1:ba:df:de:6c:c1:6d:d3:54:31:87:fb:2d:45:83:31:56: 34:d0:3b:5c:75:76:52:20:68:44:c8:c2:7c:d4:81:88:95:b0: 51:8e:20:c4:11:e9:68:0e:bf:f6:47:e7:2d:b6:cf:eb:e1:2e: 24:a1:6c:b3:43:80:99:e0:0b:0f:d2:6d:ba:9f:f3:e7:d6:9d: 98:4d:b5:df:7b:e8:81:7b:65:b3:39:50:7e:76:69:ac:7e:12: 9a:f8:e6:33:1a:c7:64:fa:a2:18:e3:19:78:4d:ef:87:b8:f8: 28:d9:0a:ee:93:93:d7:90:6e:0c:52:29:60:0c:f2:1e:bd:a2: bc:99:f9:d4:00:95:8d:18:5e:9b:6d:88:c9:24:5a:10:93:a0: 80:ac:d6:73:24:85:0a:17:35:17:8d:49:8a:11:e4:9a:33:60: 40:84:32:d8:df:2a:56:ac:06:72:38:ff:1c:25:dd:d1:20:a5: 2f:a5:70:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnly/PSU+/lHAZqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2JiYmU4YzMtOWNjZi00ZTJiLWI3MTYtZjQ4OThiZTAwNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk5g2OU1mpLXmFw7C43zDSdje3ggpjK4Q31k sK2EBfgRbpgJeSf8s6FHWcFzcQv3A79NsVWZ+YrFtpNzctgkSiSWnVoPoyt+xJKH sdj6fUPyNpTFaRbGcES9Yc5s/qz63LBx9Ihox75aZHu1H0nP2FvzH1VmpA6+8qWq nXRYL46IpoApukx0HsEhuaNjCyEUcglejN3ahUs2wwZYGoycsS+kKoX2Ky2LCoyQ 3Srdugm2aqB0dsqW+Kzp4/5bDNfQL3sdOjGifCF2nbb7wrgsju2JJbiqYlZW3lDx tA8bwkf9sdQNHeIQU3sJy2wTmFgCUun6l+XaEHXJ6mJkHt8VewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBAEIyMhJA43ypR9LKB4oFewm+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTJkZGIxYTEtODAxNC0z ZjkxLWJjYjQtMjcyOTRlMWQyMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzBlrbSrGdBA8RjhOXXoa0Fr8wbADCIo0izrmf9Cv90dTb6hi5tPGNZ 5M/JfsBQYXgl6Z4q0msQwkuxbI/aAcv4rQRnrnLbOQXxut/ebMFt01Qxh/stRYMx VjTQO1x1dlIgaETIwnzUgYiVsFGOIMQR6WgOv/ZH5y22z+vhLiShbLNDgJngCw/S bbqf8+fWnZhNtd976IF7ZbM5UH52aax+Epr45jMax2T6ohjjGXhN74e4+CjZCu6T k9eQbgxSKWAM8h69oryZ+dQAlY0YXpttiMkkWhCToICs1nMkhQoXNReNSYoR5Joz YECEMtjfKlasBnI4/xwl3dEgpS+lcOM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:32 2025 by rpki-client