$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/92ea5ffd-0acd-32c6-972b-831ddc4432ca.roa File: 92ea5ffd-0acd-32c6-972b-831ddc4432ca.roa (raw, json) Hash identifier: aTUfiFLHxlKkArVC551gwNOsU17Xd3PSD22bIZtw7Qk= Subject key identifier: 16:12:EC:F0:F2:B9:7B:03:B8:73:4D:95:CF:0B:0F:9B:41:B8:51:FC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFAB68CAEC0334480B0CBA200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/92ea5ffd-0acd-32c6-972b-831ddc4432ca.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 19905 IP address blocks: 173.17.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:8c:ae:c0:33:44:80:b0:cb:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=b2b56a54-8a7f-4915-970c-eecbe305ba1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:c8:85:9f:48:c0:96:da:bf:44:f9:ae:2e: 89:a2:4a:aa:6f:22:7b:f3:5f:c2:d6:4f:86:11:59: 5a:78:14:68:87:a9:58:eb:42:21:21:fc:5d:86:f3: d3:35:2f:d8:ff:85:c9:71:d7:2a:86:42:16:ee:83: 64:1e:43:17:10:91:13:63:fa:9f:13:fc:ec:c6:8e: 3a:fc:c4:be:bd:c3:a6:61:8f:bf:33:41:60:6f:22: cf:06:cf:cb:8e:dd:ac:73:a6:c6:d2:15:18:83:66: 21:60:e2:e2:d7:57:c4:10:f6:1c:eb:45:51:a7:ad: 2c:bf:fa:11:05:20:1c:90:8d:42:ed:3a:bb:a8:1c: 1b:d3:1a:88:16:c6:ac:39:37:86:c5:8c:25:9b:cd: 2c:e5:2e:85:eb:94:cb:fb:24:26:00:1b:84:99:e4: 3e:be:7d:e3:54:53:e6:55:86:e0:8a:55:6b:28:0f: ce:96:55:db:51:c4:a0:72:2d:c5:79:45:da:1e:08: d6:1b:bf:65:83:e2:ac:15:b5:d3:48:69:a8:78:b3: 8a:ec:d2:1d:6c:bd:03:09:7e:f4:d4:2d:69:ea:8e: 9b:61:68:5d:db:79:4b:f6:28:b8:66:c6:17:ab:25: 58:8d:e2:40:f2:4b:86:e9:16:af:9b:3b:ed:7d:49: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:12:EC:F0:F2:B9:7B:03:B8:73:4D:95:CF:0B:0F:9B:41:B8:51:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/92ea5ffd-0acd-32c6-972b-831ddc4432ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:69:75:1e:94:42:75:d3:a3:18:de:b1:ea:fa:43:cf:c1:8c: 3c:2c:6a:54:3a:cb:fc:1a:09:64:b2:89:62:6f:da:d7:bb:71: 47:89:37:9b:9f:5d:8b:ec:c1:8b:ea:f1:5b:ae:01:5a:9f:b2: d8:aa:8c:cd:69:59:76:a4:a3:97:a9:a4:4b:3d:fc:f3:2f:cb: af:e9:a3:e2:f2:b0:6a:4a:55:76:ad:d9:1f:cd:9d:b2:ea:eb: cf:cd:1d:5b:97:15:1d:cc:89:b3:4c:f3:d3:f4:4e:ce:77:cc: eb:be:23:47:52:35:e6:56:d6:4a:7b:81:c6:bc:84:2a:9c:ba: 8e:03:aa:d1:1f:85:6b:15:ca:2f:63:23:38:0d:cb:98:4e:53: 1c:67:7c:d2:ce:90:64:4b:33:87:33:eb:25:9d:9a:2b:61:40: 62:75:47:ba:2f:06:c1:c6:07:56:1f:3b:5e:3d:35:f6:10:45: 73:17:fa:4a:70:1d:3b:1a:10:fa:bd:81:1b:f5:9c:4e:41:ae: f6:53:e8:8f:f1:e3:c6:f5:b5:52:13:25:2f:35:f7:ca:e6:62: ce:ce:b1:b3:aa:04:ce:b2:5c:0a:54:34:d2:36:cb:1b:24:18: c3:b9:62:c7:67:61:c7:66:16:67:01:5f:93:64:91:f1:9b:48: 94:50:3f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toyuwDNEgLDLogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk YjJiNTZhNTQtOGE3Zi00OTE1LTk3MGMtZWVjYmUzMDViYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzvIhZ9IwJbav0T5ri6JokqqbyJ781/C1k+G EVlaeBRoh6lY60IhIfxdhvPTNS/Y/4XJcdcqhkIW7oNkHkMXEJETY/qfE/zsxo46 /MS+vcOmYY+/M0FgbyLPBs/Ljt2sc6bG0hUYg2YhYOLi11fEEPYc60VRp60sv/oR BSAckI1C7Tq7qBwb0xqIFsasOTeGxYwlm80s5S6F65TL+yQmABuEmeQ+vn3jVFPm VYbgilVrKA/OllXbUcSgci3FeUXaHgjWG79lg+KsFbXTSGmoeLOK7NIdbL0DCX70 1C1p6o6bYWhd23lL9ii4ZsYXqyVYjeJA8kuG6RavmzvtfUkyQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYS7PDyuXsDuHNNlc8LD5tBuFH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTJlYTVmZmQtMGFjZC0z MmM2LTk3MmItODMxZGRjNDQzMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINpdR6UQnXToxjeser6Q8/BjDwsalQ6y/waCWSyiWJv2te7cUeJN5uf XYvswYvq8VuuAVqfstiqjM1pWXako5eppEs9/PMvy6/po+LysGpKVXat2R/NnbLq 68/NHVuXFR3MibNM89P0Ts53zOu+I0dSNeZW1kp7gca8hCqcuo4DqtEfhWsVyi9j IzgNy5hOUxxnfNLOkGRLM4cz6yWdmithQGJ1R7ovBsHGB1YfO149NfYQRXMX+kpw HTsaEPq9gRv1nE5BrvZT6I/x48b1tVITJS8198rmYs7OsbOqBM6yXApUNNI2yxsk GMO5YsdnYcdmFmcBX5NkkfGbSJRQP20= -----END CERTIFICATE-----Generated at Tue Aug 26 10:44:28 2025 by rpki-client