$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa File: f224b0d3-4510-3f89-826c-e939a66b2874.roa (raw, json) Hash identifier: PFVd6P3fer+Ud9EApYAZPwAidYq3dmrWKPmwpKyYRtk= Subject key identifier: 80:40:13:27:3C:47:6C:02:06:AE:6E:AF:F4:E4:02:7F:4B:49:CB:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B0CDC0C750857B8B2E491FE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 30036 IP address blocks: 173.17.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0c:75:08:57:b8:b2:e4:91:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=e6c19375-fd9c-46f7-b60b-282a0888bcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:11:0b:8a:08:bf:f4:8b:61:b0:ca:ad:ea:a1: c7:d7:53:01:de:8f:9a:a5:16:b6:3b:f3:10:17:54: d0:ca:6b:be:72:82:51:78:d8:0c:2f:bb:ab:3f:9d: a8:81:3d:3b:44:5e:7c:eb:49:11:5a:f7:7b:9c:42: c5:4a:5d:55:9d:81:4a:77:72:bf:eb:ee:63:9e:d7: 85:54:c2:c0:c2:87:7f:29:c3:67:f6:55:e8:0b:74: c4:89:42:57:ac:11:3d:d1:37:df:b1:ae:ea:d3:8a: d2:ef:13:0f:f4:51:96:de:62:3c:34:02:39:b8:86: 81:89:02:b1:7c:80:5c:84:8e:eb:64:d6:38:d8:84: c6:8f:9e:b0:8c:b8:5a:34:73:ec:70:82:7b:32:66: 45:c5:41:4d:c8:0a:5b:12:20:6d:0b:c6:fb:41:7e: ff:8a:7f:f1:04:bc:69:50:34:f5:4b:3f:fc:20:5c: f5:70:ff:1f:7b:4c:d4:1c:5c:27:3d:5b:0a:d8:09: 3d:e1:bd:5a:94:d7:e6:39:b8:0a:f0:87:ed:b5:d6: 86:d8:68:e0:87:81:bf:82:6d:f8:66:d5:60:2a:cf: d6:09:0f:e5:6e:e2:75:4b:8d:a7:ad:e1:e5:a7:89: e2:86:c0:17:07:4a:4a:d8:18:df:b1:91:4d:3c:64: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:40:13:27:3C:47:6C:02:06:AE:6E:AF:F4:E4:02:7F:4B:49:CB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a2:57:3e:7b:9e:d0:24:da:eb:65:ec:bb:2e:7b:f5:05:d8: 46:64:ff:e4:77:4e:aa:06:8f:d2:8c:2d:00:88:9c:73:d7:a1: ba:c3:98:89:0b:fd:91:9e:c8:31:23:cc:7b:8d:8d:84:52:31: d0:9e:f6:79:6d:8b:5b:bc:32:2d:b2:15:42:db:5b:cd:c8:e1: 46:70:54:e8:35:04:61:71:23:3f:ab:13:38:f4:ee:8f:92:a2: 18:19:11:e5:49:83:98:48:44:86:f0:17:8b:4c:3d:bc:a8:83: 71:2c:ee:39:7b:0e:06:a5:9e:fc:26:fd:22:8d:8e:49:e9:b5: a1:41:93:13:a0:2d:dd:5c:76:a0:c5:7f:ae:64:72:16:04:13: 0f:f1:a8:b6:79:e5:7c:aa:db:38:d0:19:5b:ee:d0:c8:e4:6f: e7:d8:8e:a4:00:80:19:04:ff:bf:7f:47:cc:42:1e:7e:28:4a: 77:57:ad:9e:16:89:da:4e:b8:90:ce:ce:a2:06:58:2b:e1:6c: dc:9d:dc:2c:46:57:4b:ce:38:b3:cd:2b:42:f6:16:0d:78:0d: ba:81:14:48:ff:ef:99:38:99:c3:fd:81:0c:cb:e1:83:07:a6: e9:e6:6d:f9:dd:95:fd:aa:37:81:31:1d:90:41:6c:b7:e8:b2: 39:31:91:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Ax1CFe4suSR/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZTZjMTkzNzUtZmQ5Yy00NmY3LWI2MGItMjgyYTA4ODhiY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RELigi/9IthsMqt6qHH11MB3o+apRa2O/MQ F1TQymu+coJReNgML7urP52ogT07RF5860kRWvd7nELFSl1VnYFKd3K/6+5jnteF VMLAwod/KcNn9lXoC3TEiUJXrBE90Tffsa7q04rS7xMP9FGW3mI8NAI5uIaBiQKx fIBchI7rZNY42ITGj56wjLhaNHPscIJ7MmZFxUFNyApbEiBtC8b7QX7/in/xBLxp UDT1Sz/8IFz1cP8fe0zUHFwnPVsK2Ak94b1alNfmObgK8IfttdaG2Gjgh4G/gm34 ZtVgKs/WCQ/lbuJ1S42nreHlp4nihsAXB0pK2BjfsZFNPGQj0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBAEyc8R2wCBq5ur/TkAn9LSctpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjIyNGIwZDMtNDUxMC0z Zjg5LTgyNmMtZTkzOWE2NmIyODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmiVz57ntAk2utl7Lsue/UF2EZk/+R3TqoGj9KMLQCInHPXobrDmIkL /ZGeyDEjzHuNjYRSMdCe9nlti1u8Mi2yFULbW83I4UZwVOg1BGFxIz+rEzj07o+S ohgZEeVJg5hIRIbwF4tMPbyog3Es7jl7Dgalnvwm/SKNjknptaFBkxOgLd1cdqDF f65kchYEEw/xqLZ55Xyq2zjQGVvu0Mjkb+fYjqQAgBkE/79/R8xCHn4oSndXrZ4W idpOuJDOzqIGWCvhbNyd3CxGV0vOOLPNK0L2Fg14DbqBFEj/75k4mcP9gQzL4YMH punmbfndlf2qN4ExHZBBbLfosjkxkY8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:13 2025 by rpki-client