$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e5affdb-6980-35fd-9b7b-2528975a41af.roa File: 0e5affdb-6980-35fd-9b7b-2528975a41af.roa (raw, json) Hash identifier: 9lqG3dwFcdAcpGXrdIx6ic328ECTXm1/0usCu1xyWd0= Subject key identifier: 39:66:5F:46:6F:AD:7E:A2:06:0A:7F:1E:21:B3:21:87:20:B4:9F:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE51EEAA4BD36DD9A77780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e5affdb-6980-35fd-9b7b-2528975a41af.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.17.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:51:ee:aa:4b:d3:6d:d9:a7:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=56c29ceb-af48-491b-8fe3-86e3613afd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:12:ca:3d:89:0e:6d:bc:f3:dc:17:45:3b:ce: cd:f8:d8:2e:d4:67:23:67:d4:19:ce:15:b0:5d:0a: cd:d1:e1:23:ba:4c:2e:9a:c0:aa:59:87:5a:ad:40: 45:2e:ee:d2:09:48:37:f8:56:a0:b5:8e:6e:ca:7f: aa:df:46:19:b6:4c:56:a0:dc:7f:8b:96:00:06:9e: bd:63:f2:7b:fc:fc:18:9e:47:e4:15:0e:4b:29:bc: 1c:8e:0f:28:3f:4d:3b:10:06:2a:cb:7a:83:cf:0f: 7f:95:a4:3a:44:e7:44:00:9c:cb:f4:cd:98:68:41: 25:da:e1:86:0d:ab:95:37:d9:40:7a:6b:72:af:9f: b1:f7:b2:60:68:64:7a:ba:03:39:4b:67:df:86:d9: 0b:2b:99:ce:e9:6f:06:01:72:a2:b3:6b:33:67:09: 34:cf:42:6d:58:29:f2:d3:8d:9c:fb:c1:fe:fe:85: ce:38:e4:6b:fa:67:9b:17:78:96:6a:66:2f:52:f6: 4d:3a:67:38:02:ec:7f:b9:8a:75:60:0a:c4:84:65: a2:db:e0:71:89:61:38:1a:98:0e:81:30:38:81:33: 77:14:85:87:9f:1f:23:3f:6a:6f:da:73:15:6a:21: a3:16:0b:c8:80:b2:20:e5:d0:7f:86:45:35:72:68: fc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:66:5F:46:6F:AD:7E:A2:06:0A:7F:1E:21:B3:21:87:20:B4:9F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e5affdb-6980-35fd-9b7b-2528975a41af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:37:4d:b4:a5:46:3d:0a:d3:ad:df:e1:6f:90:0e:69:b3:05: 58:34:c1:f4:67:3e:b4:c6:c0:c9:97:f4:4a:b1:1d:2e:a3:80: 11:4e:88:48:1f:c1:d4:55:4a:fb:6e:76:7b:43:4b:18:f1:02: 05:7a:58:d1:17:fd:95:60:9a:21:f5:1e:78:1e:53:5a:5b:e9: 4c:e3:6d:3c:9f:fe:87:c5:49:91:ca:53:ae:1e:61:d9:06:76: 3c:43:71:08:3c:55:8a:4d:57:04:ab:c5:9c:e1:e7:d4:40:3e: 4d:87:8a:30:e9:e3:07:65:35:4c:62:75:65:fd:67:1a:e5:98: 4c:9c:30:b1:5b:c6:6a:f8:a2:c4:03:33:3d:65:1a:45:8f:88: e8:7d:09:2b:00:72:1f:0f:a4:f6:6d:a5:bb:3d:45:61:6c:73: 9b:a6:75:76:94:d1:bb:55:24:9e:3e:83:c3:98:53:42:cc:03: a6:97:83:e0:a4:3f:54:30:6a:8c:0e:d2:bb:99:f7:e5:fa:d6: 0e:4b:bb:fc:f8:0b:eb:48:84:30:78:29:f3:8b:3d:40:69:07: 64:37:a8:6c:b6:6a:73:e6:38:30:fe:b3:50:e3:a1:ba:74:08: 7f:14:7f:1c:a7:5d:c7:65:cd:14:b0:aa:4a:0e:05:be:6e:94: c2:61:12:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzlHuqkvTbdmnd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTZjMjljZWItYWY0OC00OTFiLThmZTMtODZlMzYxM2FmZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxLKPYkObbzz3BdFO87N+Ngu1GcjZ9QZzhWw XQrN0eEjukwumsCqWYdarUBFLu7SCUg3+FagtY5uyn+q30YZtkxWoNx/i5YABp69 Y/J7/PwYnkfkFQ5LKbwcjg8oP007EAYqy3qDzw9/laQ6ROdEAJzL9M2YaEEl2uGG DauVN9lAemtyr5+x97JgaGR6ugM5S2ffhtkLK5nO6W8GAXKis2szZwk0z0JtWCny 042c+8H+/oXOOORr+mebF3iWamYvUvZNOmc4Aux/uYp1YArEhGWi2+BxiWE4GpgO gTA4gTN3FIWHnx8jP2pv2nMVaiGjFgvIgLIg5dB/hkU1cmj8zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlmX0ZvrX6iBgp/HiGzIYcgtJ9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGU1YWZmZGItNjk4MC0z NWZkLTliN2ItMjUyODk3NWE0MWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB83TbSlRj0K063f4W+QDmmzBVg0wfRnPrTGwMmX9EqxHS6jgBFOiEgf wdRVSvtudntDSxjxAgV6WNEX/ZVgmiH1HngeU1pb6UzjbTyf/ofFSZHKU64eYdkG djxDcQg8VYpNVwSrxZzh59RAPk2HijDp4wdlNUxidWX9ZxrlmEycMLFbxmr4osQD Mz1lGkWPiOh9CSsAch8PpPZtpbs9RWFsc5umdXaU0btVJJ4+g8OYU0LMA6aXg+Ck P1QwaowO0ruZ9+X61g5Lu/z4C+tIhDB4KfOLPUBpB2Q3qGy2anPmODD+s1Djobp0 CH8UfxynXcdlzRSwqkoOBb5ulMJhEn8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:40:42 2025 by rpki-client