$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa File: d4dddb2e-63a6-3480-ab9a-d46cad988093.roa (raw, json) Hash identifier: fAmIlbUGHcgkphCgkn1FW3TQf0XWQQRsqN84ydbncCs= Subject key identifier: 38:5F:A0:A4:A7:C8:3C:5B:87:27:AA:A2:39:AB:C0:EA:3D:CA:23:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620204A67F03C78D22D684D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.17.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:04:a6:7f:03:c7:8d:22:d6:84:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d7795889-5b39-4a91-83a4-00633a4d32c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:71:8b:8d:da:cc:f0:39:d7:bf:44:14:be: 9b:82:72:ec:95:32:c5:08:7f:f3:32:14:3d:b8:a4: ac:e3:ac:12:96:75:2d:35:1b:44:cb:c5:7d:f3:73: c0:10:4e:19:59:d3:02:1e:54:94:1f:03:a6:63:58: 21:7b:ae:19:57:97:fe:cc:36:ac:0a:3a:18:b5:7d: 31:67:50:fc:75:e5:b6:26:c6:2a:79:31:c3:2c:03: d6:b2:b5:9c:af:a1:95:99:5c:b0:0e:1d:e0:92:88: 45:f7:e8:bb:ff:91:a0:2c:29:43:82:e8:34:72:14: 97:d0:ab:90:69:2b:d2:3a:97:a5:08:4a:66:56:ab: a7:f1:90:ad:4b:60:90:8c:2d:bb:1b:81:5b:61:ea: 6e:2c:4c:9d:c7:4d:36:a1:a9:2c:f8:9b:31:68:ec: 8b:44:37:b7:f8:49:22:f2:5e:51:84:dd:4e:71:3e: 6c:77:21:33:a0:61:78:aa:68:4b:e6:ae:42:90:16: a0:55:8d:90:8d:9b:07:58:cd:26:22:13:6b:52:da: b9:e8:cd:d3:ed:d4:da:a5:4c:8d:57:54:35:1f:9e: f8:d9:db:da:e7:47:f7:29:c1:3d:68:b8:c0:98:39: 2e:47:0b:97:e1:f6:66:89:ea:da:ab:01:1e:25:52: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5F:A0:A4:A7:C8:3C:5B:87:27:AA:A2:39:AB:C0:EA:3D:CA:23:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:66:e5:09:d9:14:c7:07:23:d2:d8:ce:d1:8e:50:33:10:22: 30:c9:65:a3:43:6d:75:ea:46:06:33:7a:a2:0b:ac:19:3c:17: f1:57:ae:4e:d2:3c:3b:07:7a:4c:d8:4f:b1:4f:5d:80:9a:98: 7b:a1:ab:86:a1:fe:80:98:72:e2:eb:7c:e7:0e:43:d6:33:ad: 24:04:bc:b8:09:4f:47:5c:d3:29:21:89:23:1e:57:50:71:f2: 08:80:55:b4:59:c9:72:28:e3:1b:8b:f3:66:93:6c:c4:1a:b3: 0e:c6:4a:d3:7e:97:91:e5:ee:71:98:2d:73:0a:ae:a9:82:84: b1:50:cd:92:e7:c6:48:88:78:8c:63:c6:fb:92:98:f6:15:5a: 0b:68:26:64:93:f0:16:2c:86:ba:a3:48:67:f1:ec:46:2e:67: 49:98:06:04:57:b9:a7:ae:f6:b6:2d:48:ee:65:44:55:98:86: 2a:83:bf:09:3d:2d:3a:ec:3a:75:4b:8c:95:94:86:ba:b2:d7: b2:36:21:9a:da:01:2b:fd:6d:4d:1d:2f:d6:94:d5:e1:8d:c3: 5a:96:d2:b2:05:fd:4c:0a:af:bb:cf:30:74:91:05:26:3a:e8: 25:9d:39:e4:f7:19:19:ff:ca:7d:72:27:9b:44:ae:28:f8:7b: f6:fd:a6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgSmfwPHjSLWhNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDc3OTU4ODktNWIzOS00YTkxLTgzYTQtMDA2MzNhNGQzMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqFxi43azPA5179EFL6bgnLslTLFCH/zMhQ9 uKSs46wSlnUtNRtEy8V983PAEE4ZWdMCHlSUHwOmY1ghe64ZV5f+zDasCjoYtX0x Z1D8deW2JsYqeTHDLAPWsrWcr6GVmVywDh3gkohF9+i7/5GgLClDgug0chSX0KuQ aSvSOpelCEpmVqun8ZCtS2CQjC27G4FbYepuLEydx002oaks+JsxaOyLRDe3+Eki 8l5RhN1OcT5sdyEzoGF4qmhL5q5CkBagVY2QjZsHWM0mIhNrUtq56M3T7dTapUyN V1Q1H5742dva50f3KcE9aLjAmDkuRwuX4fZmieraqwEeJVJcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhfoKSnyDxbhyeqojmrwOo9yiMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRkZGRiMmUtNjNhNi0z NDgwLWFiOWEtZDQ2Y2FkOTg4MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxm5QnZFMcHI9LYztGOUDMQIjDJZaNDbXXqRgYzeqILrBk8F/FXrk7S PDsHekzYT7FPXYCamHuhq4ah/oCYcuLrfOcOQ9YzrSQEvLgJT0dc0ykhiSMeV1Bx 8giAVbRZyXIo4xuL82aTbMQasw7GStN+l5Hl7nGYLXMKrqmChLFQzZLnxkiIeIxj xvuSmPYVWgtoJmST8BYshrqjSGfx7EYuZ0mYBgRXuaeu9rYtSO5lRFWYhiqDvwk9 LTrsOnVLjJWUhrqy17I2IZraASv9bU0dL9aU1eGNw1qW0rIF/UwKr7vPMHSRBSY6 6CWdOeT3GRn/yn1yJ5tErij4e/b9pgM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:31 2025 by rpki-client