$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae6bad2b-0227-3cdb-a5a1-0e10e76f1fce.roa File: ae6bad2b-0227-3cdb-a5a1-0e10e76f1fce.roa (raw, json) Hash identifier: /MnlrZ/daE3+02u2Jv9RwxGObwbMxgQ4BCT5uH80S9k= Subject key identifier: 8D:7D:F5:88:4C:25:72:34:73:5E:F8:2E:2E:EA:B0:DA:F7:75:AD:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D72BF1AC30727AFE14F400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae6bad2b-0227-3cdb-a5a1-0e10e76f1fce.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:2b:f1:ac:30:72:7a:fe:14:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=1ab9e2f6-f4df-46f3-96a7-fb3d70668ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:37:02:93:49:2d:eb:27:82:af:2e:23:5e: 32:89:8f:85:62:91:5b:1d:24:ea:fa:a6:b5:9d:f3: e0:d5:f8:69:fd:9a:d8:da:75:4c:6a:1b:f2:c0:86: 70:23:bb:a5:6a:aa:18:26:41:ec:59:2b:f7:fc:2d: d1:31:d8:08:68:47:f2:b9:e1:ed:4d:8d:ea:cc:73: af:c0:97:0c:b6:81:73:94:12:84:ad:e8:dd:bb:d5: 04:61:c7:ee:4a:42:dc:51:fa:7b:c8:28:c2:52:2f: d7:46:1c:15:1c:56:72:f7:79:60:06:fe:4f:3c:e3: c1:c7:44:a8:f0:ab:83:31:91:aa:60:e2:96:5d:24: ea:5c:07:dd:65:f9:da:82:45:d7:7f:55:99:1a:40: c3:77:6a:09:99:a3:f3:be:9b:29:0f:c1:45:7d:30: 16:45:7c:f8:ae:7e:2a:1c:1a:bc:75:7f:b3:a2:b6: d4:3f:e6:26:6c:fb:a4:3e:23:94:5b:13:af:35:fe: b1:b9:c4:c7:28:16:29:4e:8e:16:c5:81:ed:46:29: ec:80:f2:86:6c:2c:e8:18:26:70:42:07:fd:3a:ba: d0:30:5b:c9:1a:6a:2b:fa:3e:16:35:6b:18:9b:49: f9:63:d6:5c:4d:f0:75:03:b6:99:b0:4d:b2:af:69: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7D:F5:88:4C:25:72:34:73:5E:F8:2E:2E:EA:B0:DA:F7:75:AD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae6bad2b-0227-3cdb-a5a1-0e10e76f1fce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:44:b3:b1:30:1b:45:a4:39:f1:ee:2e:90:65:6a:8c:31:85: 3a:79:12:91:53:5f:e7:ef:dd:0d:7f:1e:72:5b:9b:5a:55:1a: 54:98:a8:ac:24:a7:1f:24:fe:bf:7d:ba:b3:b0:3f:6d:99:ab: 8e:53:0d:e5:fd:0e:ea:fe:df:32:67:35:f6:3e:b6:81:fb:fe: d1:66:22:fc:7e:e8:68:75:18:66:c8:23:0d:77:97:07:a6:2f: b4:08:49:ee:62:f7:68:46:e5:63:d9:47:98:90:af:98:eb:1e: 03:35:58:a2:53:ba:18:d8:40:27:de:b4:61:51:b7:87:6c:61: 70:ad:2d:f3:13:69:43:a9:b9:a5:e1:72:2d:81:f0:bf:03:85: 56:06:bb:5d:6d:26:b1:ff:a5:86:2c:81:f7:01:0e:8e:98:1e: 5c:3f:c6:8f:c4:63:ee:b8:5b:5a:50:4d:47:70:a3:0e:28:11: 1e:d3:a0:5a:6c:ab:27:67:4e:c0:55:95:99:6c:48:e4:de:9d: 3c:0f:2e:ce:23:fd:f7:ec:a4:8e:66:90:32:2c:1e:71:57:51: 83:9b:ea:2c:3e:8f:bf:1e:89:f9:ab:8d:8b:56:2f:8f:df:58: fb:98:20:06:c3:92:47:6a:e3:75:f1:5d:4b:b9:09:9b:c8:e3: 2f:6c:a2:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1yvxrDByev4U9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MWFiOWUyZjYtZjRkZi00NmYzLTk2YTctZmIzZDcwNjY4YWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOU3ApNJLesngq8uI14yiY+FYpFbHSTq+qa1 nfPg1fhp/ZrY2nVMahvywIZwI7ulaqoYJkHsWSv3/C3RMdgIaEfyueHtTY3qzHOv wJcMtoFzlBKErejdu9UEYcfuSkLcUfp7yCjCUi/XRhwVHFZy93lgBv5PPOPBx0So 8KuDMZGqYOKWXSTqXAfdZfnagkXXf1WZGkDDd2oJmaPzvpspD8FFfTAWRXz4rn4q HBq8dX+zorbUP+YmbPukPiOUWxOvNf6xucTHKBYpTo4WxYHtRinsgPKGbCzoGCZw Qgf9OrrQMFvJGmor+j4WNWsYm0n5Y9ZcTfB1A7aZsE2yr2mjMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI199YhMJXI0c174Li7qsNr3da1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWU2YmFkMmItMDIyNy0z Y2RiLWE1YTEtMGUxMGU3NmYxZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBEs7EwG0WkOfHuLpBlaowxhTp5EpFTX+fv3Q1/HnJbm1pVGlSYqKwk px8k/r99urOwP22Zq45TDeX9Dur+3zJnNfY+toH7/tFmIvx+6Gh1GGbIIw13lwem L7QISe5i92hG5WPZR5iQr5jrHgM1WKJTuhjYQCfetGFRt4dsYXCtLfMTaUOpuaXh ci2B8L8DhVYGu11tJrH/pYYsgfcBDo6YHlw/xo/EY+64W1pQTUdwow4oER7ToFps qydnTsBVlZlsSOTenTwPLs4j/ffspI5mkDIsHnFXUYOb6iw+j78eifmrjYtWL4/f WPuYIAbDkkdq43XxXUu5CZvI4y9soiA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:46:01 2025 by rpki-client