$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa File: daff23a2-4a8d-3881-b578-bfa4060d3d09.roa (raw, json) Hash identifier: uGnlqvpqZeiL/n5wPW3DtmnJl8C0fRVFbhsslcyk0cw= Subject key identifier: 73:D3:94:30:FC:9F:83:2D:45:66:00:FD:8C:A9:DA:4E:17:20:5D:B5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797F24DA53B0C3AD6CA9780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f2:4d:a5:3b:0c:3a:d6:ca:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=85dcb838-eed6-499f-9be9-0a94a014d26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:87:dd:26:83:37:6f:e1:ed:e9:21:28:45: 55:25:9e:56:0b:3c:c8:73:b0:c5:c6:c5:66:9e:61: 0f:60:62:4a:ea:41:8e:75:9d:f2:b6:34:54:4a:f2: 34:f5:fc:46:e7:e3:c7:d0:cf:11:5a:b5:d6:41:60: 68:d4:ce:d6:62:0b:72:5b:8e:07:78:04:97:dd:56: 56:07:15:8f:9a:dc:58:1b:a9:84:80:b6:e0:84:1e: 45:94:28:32:0e:b9:c9:fc:39:46:2c:f8:66:5c:cc: f0:14:f8:30:de:4b:f9:51:ea:d2:48:2e:e5:16:a0: fb:a3:f1:4d:9d:b9:56:d1:a5:84:62:0d:4b:bd:54: cc:df:c1:a0:59:21:f7:1e:6a:60:01:ad:ce:8a:2b: eb:21:3a:53:7d:fc:70:88:2a:43:1b:f7:85:b0:89: 02:e4:60:02:74:7d:20:75:79:26:fe:84:07:0f:d9: fe:64:85:bb:25:ad:fb:3e:eb:63:96:13:c1:c0:91: 82:ca:ea:d3:a8:e8:68:84:d6:74:06:14:6a:60:33: c0:9d:d7:7c:e7:cc:0a:cf:5d:f7:7d:c4:be:08:ec: 7c:c6:a6:2a:03:09:5d:2a:5a:a3:2b:86:dd:c4:63: 5a:32:cb:0d:0f:a5:65:39:8a:96:1d:5d:2c:5d:e3: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D3:94:30:FC:9F:83:2D:45:66:00:FD:8C:A9:DA:4E:17:20:5D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:93:d4:b7:e6:0b:fe:a1:db:81:59:36:ee:6c:d5:ca:39:34: 02:fb:9f:a7:23:3d:e6:fb:a2:d2:a2:6f:4a:10:2f:4b:7d:62: 2a:38:35:e2:1a:eb:32:ac:be:59:93:1e:8e:aa:d9:56:9e:71: 18:8b:e3:db:59:d3:e6:94:32:57:ae:25:a9:45:d2:7c:cc:b1: 42:02:02:50:f1:36:08:28:76:82:bd:6f:03:c9:d4:ee:85:8c: 99:70:06:f1:af:39:e7:d7:ca:b5:8a:8a:97:c6:0e:f7:16:19: 22:9c:ed:77:a6:29:2a:cc:fb:86:69:02:d7:c5:db:26:b5:e3: 33:de:e3:3e:9a:79:15:cb:b3:56:31:df:77:2f:bb:79:b1:e1: 09:a7:33:1e:75:d9:b0:69:43:a2:40:54:f3:c8:e3:23:84:05: 38:15:54:2b:ca:2e:0a:9d:4c:e8:0a:26:5b:a4:9a:97:78:36: e3:70:a0:19:11:88:3a:7e:97:5c:2f:23:bc:ed:1f:db:bd:52: d0:d3:9f:04:e8:c5:23:3e:da:96:73:98:cf:64:a3:96:78:3b: 20:7d:d1:af:85:32:3c:9f:e2:35:34:6f:15:87:1d:db:d1:b8: d5:56:a7:fb:d4:6e:1f:13:4c:46:cb:b2:42:a6:18:e2:2b:24: 62:9f:5b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/JNpTsMOtbKl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODVkY2I4MzgtZWVkNi00OTlmLTliZTktMGE5NGEwMTRkMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7mH3SaDN2/h7ekhKEVVJZ5WCzzIc7DFxsVm nmEPYGJK6kGOdZ3ytjRUSvI09fxG5+PH0M8RWrXWQWBo1M7WYgtyW44HeASX3VZW BxWPmtxYG6mEgLbghB5FlCgyDrnJ/DlGLPhmXMzwFPgw3kv5UerSSC7lFqD7o/FN nblW0aWEYg1LvVTM38GgWSH3HmpgAa3OiivrITpTffxwiCpDG/eFsIkC5GACdH0g dXkm/oQHD9n+ZIW7Ja37PutjlhPBwJGCyurTqOhohNZ0BhRqYDPAndd858wKz133 fcS+COx8xqYqAwldKlqjK4bdxGNaMssND6VlOYqWHV0sXeM/7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPTlDD8n4MtRWYA/Yyp2k4XIF21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFmZjIzYTItNGE4ZC0z ODgxLWI1NzgtYmZhNDA2MGQzZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOT1LfmC/6h24FZNu5s1co5NAL7n6cjPeb7otKib0oQL0t9Yio4NeIa 6zKsvlmTHo6q2VaecRiL49tZ0+aUMleuJalF0nzMsUICAlDxNggodoK9bwPJ1O6F jJlwBvGvOefXyrWKipfGDvcWGSKc7XemKSrM+4ZpAtfF2ya14zPe4z6aeRXLs1Yx 33cvu3mx4QmnMx512bBpQ6JAVPPI4yOEBTgVVCvKLgqdTOgKJlukmpd4NuNwoBkR iDp+l1wvI7ztH9u9UtDTnwToxSM+2pZzmM9ko5Z4OyB90a+FMjyf4jU0bxWHHdvR uNVWp/vUbh8TTEbLskKmGOIrJGKfW4s= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:34 2025 by rpki-client