$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa File: 17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa (raw, json) Hash identifier: R7J7Gmu7vK2gS/z+Az4CZW+XJJoL5bqaCyzyxYRSX8Y= Subject key identifier: 4E:75:33:3B:2A:DD:7F:7B:97:D0:64:2A:C7:59:4A:E2:6B:16:A3:C9 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584B0B76AFF55EBB24E1126C60C0 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 394285 IP address blocks: 174.137.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:af:f5:5e:bb:24:e1:12:6c:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=ae33268b-bd11-4214-9a11-1a926a077edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b0:d6:2c:87:5b:c6:68:72:bd:3d:8f:32:80: 6c:91:0a:4e:65:d1:51:fc:b1:a9:20:e2:72:83:ed: fd:18:ce:ea:c3:bd:92:2f:9e:ef:98:31:dd:70:04: f0:87:1f:59:6e:9e:6c:f1:7b:49:e2:c1:f8:60:1f: 16:f0:22:7b:9a:7e:9f:65:20:78:f3:01:68:8b:9c: 9d:11:5f:01:66:cd:37:ec:41:12:c8:7e:47:2d:2c: 9b:fd:14:9f:1b:48:0b:3e:f9:91:54:07:1e:e6:f1: 04:84:c3:5b:0e:25:55:cb:1d:65:64:d0:6b:37:63: 1b:40:68:73:96:b0:ba:19:ad:80:14:bd:7c:cc:e2: 45:ec:5b:3c:7c:28:33:26:3e:4f:f4:b3:27:16:c6: 69:3b:4a:82:1a:a6:dc:ad:e5:10:d9:82:67:31:e4: 56:c7:bd:ce:28:b4:ad:b9:58:10:7a:35:87:c7:09: 24:17:17:60:49:31:d4:5f:a0:b1:7b:0b:36:7d:52: fe:3c:d7:36:50:c4:ac:69:fa:b8:56:19:e5:d8:cd: 7b:4a:47:d4:57:46:9a:a5:4d:a2:30:b9:23:66:20: 4b:7a:28:ab:e3:4c:08:e4:3b:e6:85:70:29:0c:b8: 54:e3:41:b4:bd:a5:77:13:c2:96:8e:0b:f5:8e:82: db:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:75:33:3B:2A:DD:7F:7B:97:D0:64:2A:C7:59:4A:E2:6B:16:A3:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b9:41:31:f6:98:88:f7:f8:78:a8:55:68:e7:c2:0d:d9:4f: f9:e5:f8:4c:60:77:1c:ca:9d:4c:98:10:1e:28:37:86:83:82: 42:15:61:cb:17:83:04:d4:75:90:e3:fc:45:4b:3e:d4:e9:ff: 0d:8d:8b:7c:ec:ad:6a:80:e8:5f:11:df:c5:38:a6:9a:46:c3: 56:bc:e7:13:cd:39:9a:7d:34:3f:0b:36:74:4a:9b:13:ee:34: 8b:17:3a:05:db:d5:6c:5b:b0:96:2b:14:e0:c8:0c:60:00:e8: 30:30:32:5b:7a:7c:f2:2f:a4:b0:e5:08:cb:47:4d:9d:5e:ee: f8:fc:03:a6:67:50:2c:46:ac:9a:9c:bd:e3:a7:71:f7:16:99: 66:eb:88:d3:74:72:7e:89:11:7f:20:b3:11:34:23:24:0e:07: a5:07:e3:c2:cc:9c:dd:c6:d5:22:a3:e2:48:9d:82:68:7e:34: 12:c5:57:23:e7:5b:ae:da:69:cc:1a:57:c8:ef:81:34:48:05: 33:44:a2:71:b3:43:59:65:05:07:93:95:81:f2:17:65:c0:bc: 82:07:35:bd:92:7a:dc:b3:a2:93:06:4f:c6:6d:54:95:c8:0f: c2:54:96:a5:e4:a9:98:fb:96:23:4d:28:ba:34:c2:b4:5e:8d: 7a:4e:db:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq/1Xrsk4RJsYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YWUzMzI2OGItYmQxMS00MjE0LTlhMTEtMWE5MjZhMDc3ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLDWLIdbxmhyvT2PMoBskQpOZdFR/LGpIOJy g+39GM7qw72SL57vmDHdcATwhx9Zbp5s8XtJ4sH4YB8W8CJ7mn6fZSB48wFoi5yd EV8BZs037EESyH5HLSyb/RSfG0gLPvmRVAce5vEEhMNbDiVVyx1lZNBrN2MbQGhz lrC6Ga2AFL18zOJF7Fs8fCgzJj5P9LMnFsZpO0qCGqbcreUQ2YJnMeRWx73OKLSt uVgQejWHxwkkFxdgSTHUX6Cxews2fVL+PNc2UMSsafq4Vhnl2M17SkfUV0aapU2i MLkjZiBLeiir40wI5DvmhXApDLhU40G0vaV3E8KWjgv1joLbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE51Mzsq3X97l9BkKsdZSuJrFqPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMTdkM2E0ZTMtNzFmOC0z ODJjLTgzYTQtMzQ3NWFkNjMwMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrolmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO5QTH2mIj3+HioVWjnwg3ZT/nl+ExgdxzKnUyYEB4oN4aDgkIVYcsX gwTUdZDj/EVLPtTp/w2Ni3zsrWqA6F8R38U4pppGw1a85xPNOZp9ND8LNnRKmxPu NIsXOgXb1WxbsJYrFODIDGAA6DAwMlt6fPIvpLDlCMtHTZ1e7vj8A6ZnUCxGrJqc veOncfcWmWbriNN0cn6JEX8gsxE0IyQOB6UH48LMnN3G1SKj4kidgmh+NBLFVyPn W67aacwaV8jvgTRIBTNEonGzQ1llBQeTlYHyF2XAvIIHNb2SetyzopMGT8ZtVJXI D8JUlqXkqZj7liNNKLo0wrRejXpO26k= -----END CERTIFICATE-----Generated at Fri Sep 19 12:46:13 2025 by rpki-client