$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa File: cfabafe3-7463-3fa8-8663-620bcced1c28.roa (raw, json) Hash identifier: GwEBaefvD/CM7D89bHvKnrsna8eIXCLe/TWY8U99IIw= Subject key identifier: A7:3D:A9:D3:6D:54:C9:93:25:D0:37:84:02:66:EB:62:8D:7A:79:8B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0746D3DFE32304F644CCBB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 30036 IP address blocks: 173.17.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d3:df:e3:23:04:f6:44:cc:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=33c478a3-39ce-481b-af2f-6f846476abb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:28:39:97:bb:93:8b:2b:f0:95:8d:f2:54: be:ea:51:e2:5d:a2:b5:3f:fe:d1:3c:26:26:e3:91: 9c:85:01:93:a4:6b:d3:28:d4:d5:61:47:50:7e:3e: 01:63:11:a4:6f:c1:80:c6:c8:ed:f3:b6:a8:c6:f4: 3f:87:72:c8:05:9d:b3:28:c7:bd:6d:39:8f:8d:41: 6e:26:ba:fd:21:7f:4e:00:bb:03:10:93:a5:b9:c3: 99:19:8c:64:97:c1:46:c3:41:fe:ee:52:8e:2d:a5: e9:74:67:f1:ba:c5:4b:c6:fc:4c:1d:c9:00:2a:e1: c2:25:a9:17:2e:76:67:d6:60:5b:b9:ec:34:fb:bf: 5d:86:c8:96:50:09:7d:10:fe:85:92:db:c3:dc:1b: 94:c4:25:3f:08:cc:70:ef:b6:5c:9c:4a:fd:70:83: ee:73:31:5b:45:73:80:46:12:45:72:85:b1:54:f6: 4d:de:d7:0a:20:71:ef:95:83:e3:98:5b:fc:0d:89: 10:65:e0:f5:46:7f:e9:b4:af:8c:2d:45:2f:19:a5: f3:ba:ae:4b:9a:2a:3b:5b:78:47:cc:12:c7:6b:a4: 3a:6b:de:a9:39:59:5a:40:34:d5:a5:ce:2b:61:f4: 11:db:80:af:33:5f:05:1f:88:cf:14:7e:f6:26:58: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3D:A9:D3:6D:54:C9:93:25:D0:37:84:02:66:EB:62:8D:7A:79:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2b:48:88:04:de:0c:8f:b2:c8:30:0f:b1:8b:61:1d:38:b7: 54:d5:7b:16:95:8c:c3:52:84:6c:37:f7:eb:68:09:67:04:d9: 3c:0e:f4:08:af:79:99:3a:e1:bf:6a:24:0b:b3:e9:b1:8f:b1: 50:a3:29:13:1e:b3:24:de:09:01:3b:d6:3c:e2:96:7a:48:05: 52:dd:6c:2c:81:3d:bf:4b:4b:6d:93:d2:b2:e1:1d:13:b6:3a: 2d:0c:25:aa:4d:96:81:77:3a:65:11:9e:fb:ad:f1:3f:be:5a: 55:38:9e:a2:f9:77:57:9b:73:fc:47:da:42:2e:2a:49:77:10: 75:54:f5:f5:a4:c9:63:d2:64:da:d4:b3:ad:c6:9d:d1:b5:53: 46:72:fd:39:49:e1:ee:e6:c1:fd:9e:c7:68:72:d6:44:c4:b3: ea:76:0b:09:f3:2a:b0:d1:a2:c6:90:8a:0c:f5:70:b3:ab:5a: 02:e8:5c:58:f7:0c:14:86:89:be:01:74:04:89:4a:7e:a0:56: 3d:b8:f2:4c:7d:18:44:63:96:54:bd:d2:7f:3a:32:22:07:f1: e6:6c:9d:f6:16:05:92:03:a0:16:51:b5:90:0c:e6:28:67:8c: bc:05:eb:8f:57:00:33:9b:2f:75:aa:1a:88:02:cc:24:43:ce: 59:4b:0b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRtPf4yME9kTMuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MzNjNDc4YTMtMzljZS00ODFiLWFmMmYtNmY4NDY0NzZhYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI4oOZe7k4sr8JWN8lS+6lHiXaK1P/7RPCYm 45GchQGTpGvTKNTVYUdQfj4BYxGkb8GAxsjt87aoxvQ/h3LIBZ2zKMe9bTmPjUFu Jrr9IX9OALsDEJOlucOZGYxkl8FGw0H+7lKOLaXpdGfxusVLxvxMHckAKuHCJakX LnZn1mBbuew0+79dhsiWUAl9EP6FktvD3BuUxCU/CMxw77ZcnEr9cIPuczFbRXOA RhJFcoWxVPZN3tcKIHHvlYPjmFv8DYkQZeD1Rn/ptK+MLUUvGaXzuq5Lmio7W3hH zBLHa6Q6a96pOVlaQDTVpc4rYfQR24CvM18FH4jPFH72JlhUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc9qdNtVMmTJdA3hAJm62KNenmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZhYmFmZTMtNzQ2My0z ZmE4LTg2NjMtNjIwYmNjZWQxYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8rSIgE3gyPssgwD7GLYR04t1TVexaVjMNShGw39+toCWcE2TwO9Aiv eZk64b9qJAuz6bGPsVCjKRMesyTeCQE71jzilnpIBVLdbCyBPb9LS22T0rLhHRO2 Oi0MJapNloF3OmURnvut8T++WlU4nqL5d1ebc/xH2kIuKkl3EHVU9fWkyWPSZNrU s63GndG1U0Zy/TlJ4e7mwf2ex2hy1kTEs+p2CwnzKrDRosaQigz1cLOrWgLoXFj3 DBSGib4BdASJSn6gVj248kx9GERjllS90n86MiIH8eZsnfYWBZIDoBZRtZAM5ihn jLwF649XADObL3WqGogCzCRDzllLCxQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:50 2025 by rpki-client