$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa File: cdeeff8b-e99c-36bb-adc8-c206890065e5.roa (raw, json) Hash identifier: C/zNWKztw6GR/ky2m4AUMsnw6Kgm31X0x9+7kCQX8Fo= Subject key identifier: 9F:99:1E:C2:1C:5B:EE:B7:8E:48:24:35:E1:DA:C3:72:96:6F:4F:76 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797F05010F091C1E6EE8800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f0:50:10:f0:91:c1:e6:ee:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=fc837447-b366-4576-9e53-92e5acb1dfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:21:12:ec:6f:c0:30:0e:f9:d5:6d:60:32: 3f:61:17:35:b5:0c:36:91:07:77:35:74:67:af:5a: d5:57:07:fd:da:f9:2f:b9:47:ad:43:cc:d0:3c:20: 9d:67:17:65:e5:ae:fd:32:4d:e9:2c:94:1a:79:ea: 0f:9d:4a:6e:9a:19:97:52:57:ca:14:f3:06:d1:d1: b3:5e:0e:d3:8c:94:66:b4:42:5a:61:00:b3:21:79: 33:d2:0f:c4:57:1d:0f:a3:d6:aa:64:5c:35:77:81: b9:8f:bc:bc:46:fa:f4:cd:02:61:94:40:79:4f:7d: 2e:66:af:0e:85:06:a7:5d:72:31:dd:89:8d:5f:3a: d7:8b:ea:99:ef:4a:33:6e:5b:de:57:66:37:6a:d6: 9b:10:36:3e:96:87:23:fb:ab:25:41:b7:36:66:9f: 90:07:62:cb:91:f2:7f:b7:92:e6:3e:68:0a:7a:8d: aa:ca:79:4c:67:8a:79:a4:69:3c:9c:82:e1:52:b8: 55:46:a1:97:dc:94:46:16:4d:7a:b3:de:87:21:25: bf:4d:31:0b:ee:32:31:26:a9:a7:5b:6d:67:b2:d6: 92:a6:4d:9f:7d:dd:b5:28:c2:e3:32:f5:d2:0b:63: f9:89:74:30:72:61:c0:0d:fb:c9:8b:7a:81:98:ca: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:99:1E:C2:1C:5B:EE:B7:8E:48:24:35:E1:DA:C3:72:96:6F:4F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:80:ab:9b:c7:76:70:46:68:64:cf:50:72:e5:ae:9b:0e:25: fb:01:02:c4:40:5e:2d:4e:af:a5:a3:ff:16:a9:c8:5d:72:d7: 38:e5:47:aa:15:a4:5d:b9:0e:9b:ca:5b:af:d7:8d:50:da:fa: ac:65:0a:b2:1e:b6:ad:b2:43:4d:26:db:00:02:59:93:f3:57: 53:b6:57:2b:7a:a0:bf:15:d6:18:ca:e8:01:e2:e8:67:e2:b8: c3:5c:df:f8:49:2f:46:7e:15:61:d4:91:bb:6e:a3:80:6d:fd: 6c:f2:73:81:c5:ac:40:55:a9:77:a8:7e:b7:98:23:22:32:14: 1b:bd:78:a1:dc:8f:0a:ef:f6:90:09:f1:57:0b:9b:10:e1:1e: 97:ee:f6:27:c7:65:10:ae:f2:52:3c:a3:38:2e:bb:e0:27:2c: e1:0f:02:c2:90:72:ec:83:be:59:8d:01:bd:5c:3f:c1:98:c9: 08:f6:88:18:cd:91:38:1a:05:71:54:e9:9c:1f:ed:95:71:1c: ac:8e:0a:7b:64:76:1e:a8:39:33:e2:ab:2e:74:96:a1:bd:34: f3:cd:33:96:0a:54:96:72:21:46:e8:1a:d4:68:b4:74:17:50: 6a:c2:75:7d:71:e9:07:ec:6a:c5:73:2a:3e:87:14:e5:f0:de: c4:72:cf:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/BQEPCRwebuiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmM4Mzc0NDctYjM2Ni00NTc2LTllNTMtOTJlNWFjYjFkZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqUhEuxvwDAO+dVtYDI/YRc1tQw2kQd3NXRn r1rVVwf92vkvuUetQ8zQPCCdZxdl5a79Mk3pLJQaeeoPnUpumhmXUlfKFPMG0dGz Xg7TjJRmtEJaYQCzIXkz0g/EVx0Po9aqZFw1d4G5j7y8Rvr0zQJhlEB5T30uZq8O hQanXXIx3YmNXzrXi+qZ70ozblveV2Y3atabEDY+locj+6slQbc2Zp+QB2LLkfJ/ t5LmPmgKeo2qynlMZ4p5pGk8nILhUrhVRqGX3JRGFk16s96HISW/TTEL7jIxJqmn W21nstaSpk2ffd21KMLjMvXSC2P5iXQwcmHADfvJi3qBmMqdzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+ZHsIcW+63jkgkNeHaw3KWb092MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RlZWZmOGItZTk5Yy0z NmJiLWFkYzgtYzIwNjg5MDA2NWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyAq5vHdnBGaGTPUHLlrpsOJfsBAsRAXi1Or6Wj/xapyF1y1zjlR6oV pF25DpvKW6/XjVDa+qxlCrIetq2yQ00m2wACWZPzV1O2Vyt6oL8V1hjK6AHi6Gfi uMNc3/hJL0Z+FWHUkbtuo4Bt/Wzyc4HFrEBVqXeofreYIyIyFBu9eKHcjwrv9pAJ 8VcLmxDhHpfu9ifHZRCu8lI8ozguu+AnLOEPAsKQcuyDvlmNAb1cP8GYyQj2iBjN kTgaBXFU6Zwf7ZVxHKyOCntkdh6oOTPiqy50lqG9NPPNM5YKVJZyIUboGtRotHQX UGrCdX1x6QfsasVzKj6HFOXw3sRyzxQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:47 2025 by rpki-client