$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa File: afabeb14-ea97-3105-9a55-818daa5a9fe4.roa (raw, json) Hash identifier: PTLEASK7RLAJYRJYtPgv/4CK4G6VvkUm18c5EELZQWM= Subject key identifier: E4:33:70:45:F2:AF:2F:8C:24:C4:7F:B6:69:7C:E2:FB:F6:BB:21:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B004BDFCD83EE62D20D7C1540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:df:cd:83:ee:62:d2:0d:7c:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=d5ff2366-a1e9-46c1-bafc-e3f9828ca96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:5b:cd:c2:14:a2:83:75:4e:ff:6f:32:98: ad:e4:5b:fd:3f:bf:bf:fa:30:6c:2d:52:9d:49:92: af:23:1d:82:fb:d5:6d:22:76:4b:d7:f8:3c:43:eb: a7:9b:a4:7e:8b:a5:df:86:9c:df:04:28:c6:7f:62: b0:d4:aa:bf:fe:b2:c1:60:ab:c9:30:73:42:06:76: 96:c8:1c:fa:a2:7b:0b:de:77:33:4d:bb:4c:38:c5: 00:59:a6:bc:86:5a:fe:99:4f:83:78:ca:1c:b3:51: f6:e9:35:b7:2b:47:1d:96:8c:ca:0b:91:1e:59:4c: 4a:7c:52:36:b0:4c:4c:ac:47:f1:31:55:ea:7f:d6: ac:94:d0:1b:9b:c8:66:ad:52:00:cf:be:c6:c9:28: f3:e5:11:6e:87:be:bf:a1:ee:76:7e:0f:f8:1a:90: 9d:0b:78:c0:29:43:47:0b:49:61:37:d6:d6:80:06: a6:95:03:34:74:d1:6c:2c:62:ad:25:75:a6:9d:8d: bd:67:ee:78:84:fb:84:af:e9:87:a9:f0:99:03:86: eb:5b:de:8f:1f:d5:17:3b:3c:dd:6e:de:f1:31:18: 05:e4:8f:fa:f1:b6:e6:2e:51:32:26:a6:02:57:51: 8e:2a:bd:22:5e:84:2d:b3:87:45:f7:cb:71:15:ef: d6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:70:45:F2:AF:2F:8C:24:C4:7F:B6:69:7C:E2:FB:F6:BB:21:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a4:34:59:dc:c3:c8:ee:02:23:0b:66:c7:58:93:d6:ce:b6: 58:50:f8:a9:7e:55:d2:b7:0c:18:ec:f0:3f:5f:af:b2:08:8b: bd:07:64:79:71:43:3b:1c:42:f8:ab:c3:4e:36:6b:b0:86:70: 5d:09:53:4e:54:ce:6a:0f:de:cb:37:be:c4:3b:41:32:c2:a9: 52:5e:b5:98:5b:a1:0b:89:a0:fb:31:8f:bb:58:db:df:3f:eb: 94:5e:3d:54:91:24:3c:ef:81:dd:9c:5b:71:21:f4:98:44:b0: 0d:40:49:07:cb:ab:a6:d4:76:fd:7b:48:67:e1:2e:f9:b9:fb: 7e:fc:65:bb:fe:6c:4c:11:0e:1f:52:6e:8b:de:0d:03:b3:28: 65:49:39:83:5f:9a:9c:57:19:d1:15:3b:82:2e:69:1d:87:d2: a8:f8:c0:85:ae:10:87:59:db:a0:c5:5e:5e:d1:93:f8:77:f6: 3d:ff:3f:a2:b0:b1:d3:fd:ee:38:59:d5:40:cc:94:76:e7:c9: ef:be:6f:9f:fb:02:d8:15:bc:72:9e:23:00:f4:5f:26:45:7c: a7:a7:9c:1e:fc:9a:6a:cd:e0:ab:35:c1:95:5f:0a:29:47:40: 23:41:41:ca:b8:0a:56:1a:d4:f9:8a:21:15:7f:8e:a5:65:eb: d9:16:4a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS9/Ng+5i0g18FUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDVmZjIzNjYtYTFlOS00NmMxLWJhZmMtZTNmOTgyOGNhOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxlbzcIUooN1Tv9vMpit5Fv9P7+/+jBsLVKd SZKvIx2C+9VtInZL1/g8Q+unm6R+i6XfhpzfBCjGf2Kw1Kq//rLBYKvJMHNCBnaW yBz6onsL3nczTbtMOMUAWaa8hlr+mU+DeMocs1H26TW3K0cdlozKC5EeWUxKfFI2 sExMrEfxMVXqf9aslNAbm8hmrVIAz77GySjz5RFuh76/oe52fg/4GpCdC3jAKUNH C0lhN9bWgAamlQM0dNFsLGKtJXWmnY29Z+54hPuEr+mHqfCZA4brW96PH9UXOzzd bt7xMRgF5I/68bbmLlEyJqYCV1GOKr0iXoQts4dF98txFe/WhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQzcEXyry+MJMR/tml84vv2uyFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWZhYmViMTQtZWE5Ny0z MTA1LTlhNTUtODE4ZGFhNWE5ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADykNFncw8juAiMLZsdYk9bOtlhQ+Kl+VdK3DBjs8D9fr7IIi70HZHlx QzscQvirw042a7CGcF0JU05UzmoP3ss3vsQ7QTLCqVJetZhboQuJoPsxj7tY298/ 65RePVSRJDzvgd2cW3Eh9JhEsA1ASQfLq6bUdv17SGfhLvm5+378Zbv+bEwRDh9S boveDQOzKGVJOYNfmpxXGdEVO4IuaR2H0qj4wIWuEIdZ26DFXl7Rk/h39j3/P6Kw sdP97jhZ1UDMlHbnye++b5/7AtgVvHKeIwD0XyZFfKennB78mmrN4Ks1wZVfCilH QCNBQcq4ClYa1PmKIRV/jqVl69kWSlY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:23 2025 by rpki-client