$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc4773d-c88e-3d01-a66b-0c268d6bf7c1.roa File: cdc4773d-c88e-3d01-a66b-0c268d6bf7c1.roa (raw, json) Hash identifier: 6J+AE4DXKdqxKTfQFSdzS44VW5XGzk7+a3BljPM6njM= Subject key identifier: 3D:7C:36:CE:2E:F6:7F:05:05:DD:79:9D:0C:2A:E7:46:C0:DA:00:57 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC7E6BC85034DD905CDC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc4773d-c88e-3d01-a66b-0c268d6bf7c1.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.19.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:7e:6b:c8:50:34:dd:90:5c:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=17f1212b-a3f0-41ce-8c5d-be116626b638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:2a:ad:2e:e4:f2:40:cb:41:b1:99:e6:02: c7:ff:15:39:02:13:aa:80:79:e0:ea:11:b8:e3:f9: 82:b4:2e:4f:a4:21:ab:be:05:94:06:2d:e0:9e:9d: 95:0a:43:19:19:7d:34:c0:23:00:34:5d:c9:d2:a4: fa:97:fe:1c:2b:09:52:03:c6:46:38:88:e5:32:39: 10:e6:fb:a6:85:fa:b5:be:8e:fe:b6:9c:74:61:29: 63:77:48:20:91:82:49:04:26:74:62:fd:f6:3a:ab: 39:27:1a:fd:35:e4:a5:34:77:c6:a4:65:e7:07:ed: 6a:55:f6:20:77:83:74:dc:a7:f0:08:8b:0d:51:dd: 2b:45:b1:08:87:21:ba:43:5a:0c:63:8a:fc:20:20: 83:52:f6:29:c1:d3:be:28:c8:b5:6a:55:ce:4a:77: 58:47:ea:a9:62:54:d3:a0:04:fe:09:b6:dc:55:ba: 08:f1:21:bc:cc:6d:35:6e:bb:36:cf:8b:d9:6f:e4: d6:d4:0d:d9:d9:db:09:5e:56:4c:a8:62:ca:0e:9a: 60:f9:c2:69:54:67:9b:54:63:5a:36:b9:fc:c9:6d: 46:2e:67:0b:14:b9:a2:aa:85:aa:40:56:d9:a8:51: af:6c:75:e5:e1:8e:d9:2a:f0:71:cb:9a:f4:8c:17: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7C:36:CE:2E:F6:7F:05:05:DD:79:9D:0C:2A:E7:46:C0:DA:00:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc4773d-c88e-3d01-a66b-0c268d6bf7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0a:5c:e1:9f:47:91:ec:3b:49:07:03:db:02:ba:22:3f:b0: fb:91:6d:31:c7:2e:ce:81:62:41:3d:4b:b6:b8:cd:69:e4:36: 64:f0:59:43:2f:a9:1b:e4:7f:a2:de:87:83:1d:10:eb:6b:7f: 70:8c:16:ce:7c:b1:0a:50:84:92:6b:96:c9:eb:fa:8b:a9:af: 70:c8:21:06:2e:c1:59:dc:07:53:ae:4b:be:c0:de:3f:57:95: 8b:0b:c8:33:85:b6:60:b7:28:8a:ac:cf:5f:03:60:d9:fc:ae: 47:1b:b0:f9:2f:63:c3:2b:c2:5e:27:e4:ec:d1:f2:39:1b:a2: 44:6d:3d:a2:0e:2a:e7:50:e8:3e:99:b8:da:25:b0:de:9f:87: 87:86:45:90:6a:be:80:cf:bb:4d:66:46:54:a7:8c:59:63:6f: 6f:31:9c:86:d7:c0:3e:b5:08:3d:67:21:ab:29:3c:f8:df:a8: 90:19:ad:86:31:84:51:b0:5a:fc:f2:63:f0:11:04:b1:9f:f6: 22:fe:60:d3:e4:f9:bc:0a:53:a6:b6:08:4b:a4:21:5d:ba:ed: ef:63:54:5c:d3:03:04:53:8f:c5:d5:42:75:60:9a:30:7e:28: a9:2a:4a:8f:7c:39:1c:9c:ac:fd:06:83:98:a5:07:66:38:8d: db:cb:75:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzH5ryFA03ZBc3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTdmMTIxMmItYTNmMC00MWNlLThjNWQtYmUxMTY2MjZiNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwYqrS7k8kDLQbGZ5gLH/xU5AhOqgHng6hG4 4/mCtC5PpCGrvgWUBi3gnp2VCkMZGX00wCMANF3J0qT6l/4cKwlSA8ZGOIjlMjkQ 5vumhfq1vo7+tpx0YSljd0ggkYJJBCZ0Yv32Oqs5Jxr9NeSlNHfGpGXnB+1qVfYg d4N03KfwCIsNUd0rRbEIhyG6Q1oMY4r8ICCDUvYpwdO+KMi1alXOSndYR+qpYlTT oAT+CbbcVboI8SG8zG01brs2z4vZb+TW1A3Z2dsJXlZMqGLKDppg+cJpVGebVGNa Nrn8yW1GLmcLFLmiqoWqQFbZqFGvbHXl4Y7ZKvBxy5r0jBdVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD18Ns4u9n8FBd15nQwq50bA2gBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RjNDc3M2QtYzg4ZS0z ZDAxLWE2NmItMGMyNjhkNmJmN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRN1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgKXOGfR5HsO0kHA9sCuiI/sPuRbTHHLs6BYkE9S7a4zWnkNmTwWUMv qRvkf6Leh4MdEOtrf3CMFs58sQpQhJJrlsnr+oupr3DIIQYuwVncB1OuS77A3j9X lYsLyDOFtmC3KIqsz18DYNn8rkcbsPkvY8Mrwl4n5OzR8jkbokRtPaIOKudQ6D6Z uNolsN6fh4eGRZBqvoDPu01mRlSnjFljb28xnIbXwD61CD1nIaspPPjfqJAZrYYx hFGwWvzyY/ARBLGf9iL+YNPk+bwKU6a2CEukIV267e9jVFzTAwRTj8XVQnVgmjB+ KKkqSo98ORycrP0Gg5ilB2Y4jdvLdeM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:53 2025 by rpki-client