$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db29e0ff-ee2d-3380-a478-c3efd8946e72.roa File: db29e0ff-ee2d-3380-a478-c3efd8946e72.roa (raw, json) Hash identifier: w8bZ0Tbfm1c3Biv6pEy0+5y+ucxWFwVnsY4/XJNilFk= Subject key identifier: B4:63:F1:EB:D2:52:2F:16:49:8A:12:72:34:89:B8:CE:C9:59:64:12 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B232783A845B9AE32EB5FD82C Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db29e0ff-ee2d-3380-a478-c3efd8946e72.roa Signing time: Tue 09 Sep 2025 12:40:37 +0000 ROA not before: Tue 09 Sep 2025 12:40:37 +0000 ROA not after: Mon 08 Dec 2025 13:40:37 +0000 asID: 19905 IP address blocks: 173.17.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:27:83:a8:45:b9:ae:32:eb:5f:d8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 9 12:40:37 2025 GMT Not After : Dec 8 13:40:37 2025 GMT Subject: CN=846e25ff-0ad4-4b0a-9172-a8bc956a4c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:2d:cc:a2:70:74:6e:52:8c:e2:8b:ce:ae: b9:fc:54:9a:b5:d5:b6:15:6f:f5:14:7b:73:9a:a0: 04:37:78:71:ae:99:d0:4a:cc:2c:fb:a9:ef:30:44: b8:4d:bc:7f:7a:f2:4a:c1:7e:64:80:d5:e6:75:bc: f4:3d:95:6a:c3:06:94:a8:2c:21:e9:58:f4:f3:0b: 10:6d:ff:95:04:03:7a:21:e0:9f:7b:f4:58:8b:08: 0c:bd:34:26:bb:79:01:e8:f5:c5:80:23:0a:1f:11: 43:5e:50:a3:ea:bd:1f:30:c5:ff:45:00:e5:f4:fa: fe:55:9f:60:47:3c:f6:3b:7f:07:d6:ea:df:58:50: 15:0a:e1:d1:0c:64:17:78:1c:e6:e0:88:5a:1c:1a: 2e:67:34:21:9a:7a:bc:c0:fe:87:80:23:55:73:f8: 07:c6:17:6d:c9:08:4a:43:6d:9e:cd:e5:35:4d:ff: e8:60:b9:59:6a:86:b3:b4:5d:10:51:35:bd:71:c3: 58:a5:33:01:33:18:ab:50:b3:20:fc:b8:b1:85:46: ad:3b:e5:4f:2a:fe:f0:51:ae:0d:28:ef:46:9f:f8: da:27:6b:70:d8:4c:a7:5d:63:2a:a6:88:13:9a:ce: c9:7e:34:a1:bc:1f:ea:6f:fd:fd:4b:7d:dc:3b:93: d0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:63:F1:EB:D2:52:2F:16:49:8A:12:72:34:89:B8:CE:C9:59:64:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db29e0ff-ee2d-3380-a478-c3efd8946e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d4:8c:1a:43:d7:70:8a:7e:f4:88:eb:02:2b:b3:52:58:2e: 46:ea:39:ec:42:ea:5c:81:84:2b:df:d5:d6:3b:66:ec:72:10: 0a:d1:5c:37:4f:b8:37:dc:d1:c7:e3:b5:f1:b3:32:3b:d6:73: 0a:ba:cf:37:2d:4b:ea:df:c5:e6:08:98:08:9d:8b:5c:64:2f: fc:f8:8d:25:f8:20:53:de:c2:72:bb:d0:e3:65:b9:19:37:ab: 0c:e4:2f:83:3c:dc:72:e3:c7:c4:fd:88:15:74:68:1c:bb:b6: b5:7c:a9:ca:57:a4:c4:59:c2:26:44:a3:d3:d9:7b:2d:81:c0: 94:66:e7:6b:c5:e1:5a:14:24:1c:5a:d0:1a:ad:66:8c:b3:32: b6:b2:2e:9d:d5:b5:fc:af:26:6b:80:ec:ea:e0:14:d7:25:86: f6:7d:57:ec:e7:e0:5f:44:e2:ff:e6:18:7d:69:9e:e2:64:f9: 1b:61:eb:e1:34:fd:19:44:67:16:9b:4d:e3:ab:58:52:44:57: 71:19:18:d9:eb:2a:2a:0f:55:a1:00:13:30:51:c5:ea:4d:f4: 9d:b4:20:de:2c:8f:50:d5:60:de:c0:e2:25:69:24:2d:b9:33: e7:1a:10:60:30:5b:7d:5b:d8:2d:87:af:e2:d9:c7:85:d0:0a: e9:3f:63:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjJ4OoRbmuMutf2CwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwOTEyNDAzN1oXDTI1MTIwODEzNDAzN1owLzEtMCsGA1UEAxMk ODQ2ZTI1ZmYtMGFkNC00YjBhLTkxNzItYThiYzk1NmE0YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZgtzKJwdG5SjOKLzq65/FSatdW2FW/1FHtz mqAEN3hxrpnQSsws+6nvMES4Tbx/evJKwX5kgNXmdbz0PZVqwwaUqCwh6Vj08wsQ bf+VBAN6IeCfe/RYiwgMvTQmu3kB6PXFgCMKHxFDXlCj6r0fMMX/RQDl9Pr+VZ9g Rzz2O38H1urfWFAVCuHRDGQXeBzm4IhaHBouZzQhmnq8wP6HgCNVc/gHxhdtyQhK Q22ezeU1Tf/oYLlZaoaztF0QUTW9ccNYpTMBMxirULMg/LixhUatO+VPKv7wUa4N KO9Gn/jaJ2tw2EynXWMqpogTms7JfjShvB/qb/39S33cO5PQqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRj8evSUi8WSYoScjSJuM7JWWQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGIyOWUwZmYtZWUyZC0z MzgwLWE0NzgtYzNlZmQ4OTQ2ZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLUjBpD13CKfvSI6wIrs1JYLkbqOexC6lyBhCvf1dY7ZuxyEArRXDdP uDfc0cfjtfGzMjvWcwq6zzctS+rfxeYImAidi1xkL/z4jSX4IFPewnK70ONluRk3 qwzkL4M83HLjx8T9iBV0aBy7trV8qcpXpMRZwiZEo9PZey2BwJRm52vF4VoUJBxa 0BqtZoyzMrayLp3VtfyvJmuA7OrgFNclhvZ9V+zn4F9E4v/mGH1pnuJk+Rth6+E0 /RlEZxabTeOrWFJEV3EZGNnrKioPVaEAEzBRxepN9J20IN4sj1DVYN7A4iVpJC25 M+caEGAwW31b2C2Hr+LZx4XQCuk/Y1s= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:24 2025 by rpki-client