$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa File: fcd42c79-dd5e-3c82-b992-91be371e11b3.roa (raw, json) Hash identifier: BaTF9HzYdnkrCuhAMxLZvB1oR+z15q9EuQJw0rU9pdo= Subject key identifier: 19:F6:CE:AD:17:15:1C:9D:41:08:F7:44:01:F7:3B:E4:89:9B:E4:DF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFAB68C9D64430FF0101FE3E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 173.17.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:8c:9d:64:43:0f:f0:10:1f:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=2df117ae-c88d-4e54-984e-1eeb02063bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:36:9e:23:ee:a5:d2:71:24:e8:8b:9e:10:32: 1b:d9:fb:7a:35:65:91:ff:de:4a:9d:58:2c:bd:04: 67:62:45:16:cf:b1:1b:5a:09:22:ef:65:e0:55:53: 4b:18:c6:08:fe:7b:be:96:c2:2a:16:f2:3e:9c:aa: ff:f6:76:65:97:54:6c:26:17:6c:01:50:05:56:6f: a6:67:b2:8f:b9:2e:d1:85:5a:f4:e4:d8:f7:af:e7: ea:72:5d:db:6c:2b:0d:86:1f:bc:12:cc:42:bf:63: 40:e4:a2:17:5d:79:26:4b:62:0e:6e:26:27:5b:08: d0:e8:91:84:28:f8:57:f4:bb:fa:8b:da:37:06:7e: 2f:60:b5:7d:3a:e5:be:54:f7:b9:5a:b4:a1:47:24: e9:8e:f8:f3:a5:a4:6a:0f:32:28:3b:8b:fd:0f:ea: 09:0d:0e:9d:27:f3:50:a0:42:17:c2:4b:69:e6:f8: 1d:2d:7e:ea:0f:04:88:3b:bc:22:bf:77:55:46:d1: cb:d9:e6:a4:ab:22:01:8e:88:2d:56:90:c7:ad:a6: 81:3e:85:d0:fb:4f:6a:4f:02:5d:f5:6a:64:97:29: cc:e3:f5:91:f1:2e:b5:d9:25:af:11:5b:16:bc:d2: 84:b1:77:1f:be:cd:95:f1:e9:ac:4a:06:64:c9:7c: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F6:CE:AD:17:15:1C:9D:41:08:F7:44:01:F7:3B:E4:89:9B:E4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3d:24:29:63:06:68:10:29:4e:72:85:ca:e7:bd:ac:a9:0a: 4b:d5:77:5a:8f:51:83:a3:28:bc:b5:ef:c1:1e:af:93:dd:dd: 11:2c:82:6e:ac:04:fd:79:0b:cc:12:5d:c7:41:ec:c1:f4:13: e2:92:77:69:90:1d:58:06:3d:3a:79:2f:8c:fa:a9:bc:5f:1a: af:d6:78:5d:66:3f:d3:c8:a5:7d:c7:40:28:f8:50:a1:2f:cc: f9:c8:9a:9c:da:b4:82:8d:06:d1:d8:cc:e6:56:fd:62:4f:25: 10:ec:04:84:79:9f:98:94:6c:02:f6:78:48:a8:6c:ae:df:76: 06:f0:24:83:85:ed:a5:c1:ee:99:e5:4a:c2:ed:94:e0:ce:be: 4f:99:7a:9b:ab:2e:1a:85:3c:72:3a:66:1b:9f:00:ec:5e:d9: 2d:66:06:b9:16:aa:fb:b9:e9:bd:f3:fe:0d:79:15:2e:d9:2f: d8:a5:9f:c1:79:42:d9:86:56:06:21:18:c0:c0:c4:29:20:84: 78:40:ac:f8:13:e5:68:d0:d9:5a:b7:b1:2c:e7:0b:f0:18:3d: d7:b0:c0:2f:e8:10:0b:f8:a0:81:d3:13:20:c6:28:1a:e0:1e: d6:96:c7:24:60:bb:5e:4f:55:30:5e:7c:6d:f9:46:b9:62:a1: cb:a0:02:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toydZEMP8BAf4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MmRmMTE3YWUtYzg4ZC00ZTU0LTk4NGUtMWVlYjAyMDYzYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDaeI+6l0nEk6IueEDIb2ft6NWWR/95KnVgs vQRnYkUWz7EbWgki72XgVVNLGMYI/nu+lsIqFvI+nKr/9nZll1RsJhdsAVAFVm+m Z7KPuS7RhVr05Nj3r+fqcl3bbCsNhh+8EsxCv2NA5KIXXXkmS2IObiYnWwjQ6JGE KPhX9Lv6i9o3Bn4vYLV9OuW+VPe5WrShRyTpjvjzpaRqDzIoO4v9D+oJDQ6dJ/NQ oEIXwktp5vgdLX7qDwSIO7wiv3dVRtHL2eakqyIBjogtVpDHraaBPoXQ+09qTwJd 9WpklynM4/WR8S612SWvEVsWvNKEsXcfvs2V8emsSgZkyXym6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn2zq0XFRydQQj3RAH3O+SJm+TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmNkNDJjNzktZGQ1ZS0z YzgyLWI5OTItOTFiZTM3MWUxMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM9JCljBmgQKU5yhcrnvaypCkvVd1qPUYOjKLy178Eer5Pd3REsgm6s BP15C8wSXcdB7MH0E+KSd2mQHVgGPTp5L4z6qbxfGq/WeF1mP9PIpX3HQCj4UKEv zPnImpzatIKNBtHYzOZW/WJPJRDsBIR5n5iUbAL2eEiobK7fdgbwJIOF7aXB7pnl SsLtlODOvk+ZepurLhqFPHI6ZhufAOxe2S1mBrkWqvu56b3z/g15FS7ZL9iln8F5 QtmGVgYhGMDAxCkghHhArPgT5WjQ2Vq3sSznC/AYPdewwC/oEAv4oIHTEyDGKBrg HtaWxyRgu15PVTBefG35RrliocugAsY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:28 2025 by rpki-client