$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa File: c0286517-a220-316a-b592-8b2237a7fea3.roa (raw, json) Hash identifier: P/+x35woYx8Roj7Xt/sjQ7/36EjxMjjSdWdxlku7L+o= Subject key identifier: 01:09:3E:D4:67:4B:E4:55:E8:58:6E:AB:5A:72:D9:57:53:2F:78:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797EABA8767801F0D7EA300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ea:ba:87:67:80:1f:0d:7e:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f75d7868-421d-4393-82d1-fa32e18f5413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:22:88:e8:16:f0:ea:e3:2d:f9:52:c2:7b:db: 6d:bb:2e:e2:a3:7b:91:52:ba:74:38:12:da:1a:01: c0:51:e1:68:75:29:a7:80:aa:c9:15:d2:1d:61:65: c6:19:eb:09:4c:1a:cc:49:7c:b7:0c:1c:36:a7:79: 00:4f:18:da:62:a5:5e:ac:47:38:c1:64:ef:7e:d2: 4f:ea:ff:4e:9f:15:dc:0c:2d:cd:f8:5e:c3:4a:48: 7a:50:9a:0d:81:13:57:91:68:0f:a0:5b:cb:3e:37: ee:9f:a2:2b:ac:0f:90:67:79:36:3f:77:cb:81:87: 7a:08:09:74:0c:02:85:42:49:fd:2c:3a:9c:27:e3: fa:5a:ef:47:60:a0:a6:83:5c:e4:13:7c:34:b8:e7: e9:dd:0f:bc:d7:c3:32:d1:2c:d4:af:aa:46:e1:a6: 14:d3:a5:7d:02:0a:0a:a7:7e:9d:24:c5:88:12:33: 4a:18:8f:35:78:86:d2:8c:07:14:db:6e:09:0b:02: d9:9b:d7:cf:24:42:be:b1:ce:88:f5:3d:78:28:93: aa:af:45:8d:09:a6:14:74:06:27:3c:1d:40:6c:d5: a4:31:51:22:d0:59:ee:34:b7:c0:43:e4:0c:3e:15: 02:8e:39:94:f5:62:8a:04:13:09:3c:6b:56:b5:2b: e4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:09:3E:D4:67:4B:E4:55:E8:58:6E:AB:5A:72:D9:57:53:2F:78:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:0f:86:e9:96:7c:0e:f2:5a:ed:c8:1e:dc:fa:af:26:1c:40: f2:20:12:ce:06:7c:80:10:1e:b2:8f:70:55:1e:2b:5e:74:86: df:db:92:43:1c:87:2e:36:2e:95:a0:ca:06:68:9e:5d:e5:3c: 4b:75:2e:54:0b:0d:c8:f3:e7:c7:01:6a:0b:07:f2:92:f0:2d: 35:fd:99:2b:01:74:4f:46:e4:9e:d7:67:45:3d:d7:49:3c:58: 0f:56:e5:88:1a:f3:79:97:f8:9c:3e:1f:29:f1:96:9d:49:50: f5:c2:a4:73:8f:9a:6d:34:d6:a7:77:2c:1d:0b:26:60:22:13: 4b:2f:ae:9b:e8:cb:4e:c0:4e:5d:82:dd:eb:bf:e5:57:15:71: 73:e5:12:cf:b5:8f:13:a1:78:05:42:f8:fa:06:45:39:df:2d: c0:bf:d9:1a:62:b8:5e:dc:ff:8e:92:ed:eb:b1:d9:f6:0e:62: 24:26:af:20:9e:c5:05:da:dd:0f:e9:43:07:b9:b9:3e:17:08: 00:84:c0:4c:53:62:4d:28:14:89:11:df:75:9a:b1:99:a4:2f: e6:36:24:e6:e7:86:fd:a0:a9:a5:df:31:eb:4a:16:f4:bc:62: 35:aa:48:e4:fd:1a:6c:97:d5:83:c8:d4:1e:cc:f3:a6:68:f7: 5a:4c:1f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+q6h2eAHw1+owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjc1ZDc4NjgtNDIxZC00MzkzLTgyZDEtZmEzMmUxOGY1NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSKI6Bbw6uMt+VLCe9ttuy7io3uRUrp0OBLa GgHAUeFodSmngKrJFdIdYWXGGesJTBrMSXy3DBw2p3kATxjaYqVerEc4wWTvftJP 6v9OnxXcDC3N+F7DSkh6UJoNgRNXkWgPoFvLPjfun6IrrA+QZ3k2P3fLgYd6CAl0 DAKFQkn9LDqcJ+P6Wu9HYKCmg1zkE3w0uOfp3Q+818My0SzUr6pG4aYU06V9AgoK p36dJMWIEjNKGI81eIbSjAcU224JCwLZm9fPJEK+sc6I9T14KJOqr0WNCaYUdAYn PB1AbNWkMVEi0FnuNLfAQ+QMPhUCjjmU9WKKBBMJPGtWtSvkbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEJPtRnS+RV6Fhuq1py2VdTL3gKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzAyODY1MTctYTIyMC0z MTZhLWI1OTItOGIyMjM3YTdmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwPhumWfA7yWu3IHtz6ryYcQPIgEs4GfIAQHrKPcFUeK150ht/bkkMc hy42LpWgygZonl3lPEt1LlQLDcjz58cBagsH8pLwLTX9mSsBdE9G5J7XZ0U910k8 WA9W5Yga83mX+Jw+Hynxlp1JUPXCpHOPmm001qd3LB0LJmAiE0svrpvoy07ATl2C 3eu/5VcVcXPlEs+1jxOheAVC+PoGRTnfLcC/2RpiuF7c/46S7eux2fYOYiQmryCe xQXa3Q/pQwe5uT4XCACEwExTYk0oFIkR33WasZmkL+Y2JObnhv2gqaXfMetKFvS8 YjWqSOT9GmyX1YPI1B7M86Zo91pMH6A= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:45 2025 by rpki-client