$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/177e1eb6-0ac0-3abc-b175-97318c9b4231.roa File: 177e1eb6-0ac0-3abc-b175-97318c9b4231.roa (raw, json) Hash identifier: /qTTL5rbiS6ap669S0YKOaQ4gCUqeGsh6lEndKKB+es= Subject key identifier: 42:19:3B:67:CA:74:E7:2D:2C:0E:12:A6:A5:61:DA:66:35:86:34:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797F0C1E3D144764DF8B7C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/177e1eb6-0ac0-3abc-b175-97318c9b4231.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.17.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f0:c1:e3:d1:44:76:4d:f8:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=dee4ed20-1bd7-4f49-b9df-ef8e18bb27a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:1d:d5:6c:86:2b:a5:5a:53:b2:bd:96:dd: 52:c1:28:2d:8b:c2:90:3f:3a:bd:f9:4b:0c:ab:a1: 1f:46:1e:69:e2:7a:40:5d:ec:33:3b:06:1d:5e:7b: 3a:ef:fe:85:1b:09:aa:ac:c9:7c:2d:c5:94:f7:e3: 51:68:93:f3:e7:8c:cd:73:50:2f:a5:aa:39:29:96: ec:21:e9:11:c8:13:d9:6b:b5:a8:8a:e5:db:be:38: 1e:de:46:81:15:65:21:f1:0e:2d:bc:f1:c0:49:27: b8:6d:28:a0:34:c4:17:72:7f:91:51:1a:92:4e:df: 0f:25:59:94:82:20:f2:31:da:54:c0:21:67:7a:f2: d1:7b:8f:ed:68:a9:e7:4e:88:ce:b2:17:7b:1d:48: b8:b7:ab:39:c6:74:10:87:17:32:74:00:21:17:04: 8f:62:de:e1:89:b8:5c:ba:ab:76:08:cb:59:0c:9c: 7a:42:d7:9b:5b:74:af:b3:5f:fb:38:71:32:01:82: 11:a8:10:8d:47:02:5e:82:64:73:c6:be:65:5e:3d: 88:33:e2:60:c4:8b:13:4a:28:58:1d:81:5e:77:7b: a7:78:3a:a3:76:01:d6:ea:c6:34:19:de:2f:de:69: 26:f3:bf:62:c4:91:d3:b2:77:f5:e1:6f:49:5b:08: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:19:3B:67:CA:74:E7:2D:2C:0E:12:A6:A5:61:DA:66:35:86:34:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/177e1eb6-0ac0-3abc-b175-97318c9b4231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:65:93:cb:f6:ab:66:ee:00:d6:08:2d:36:1c:e8:fd:1a:39: e5:69:20:2b:78:e6:ae:60:cb:5f:4b:5b:c1:d1:5f:11:2a:96: 14:be:2e:51:79:83:b7:bd:af:25:1f:09:89:18:73:a2:c7:38: e8:50:13:74:e6:31:86:67:e1:b1:54:f6:e5:94:59:64:0e:84: 4e:dd:1d:e7:fb:3a:0f:56:44:bb:28:ce:8d:29:bc:8d:fb:a5: 99:c8:62:c8:50:70:b5:0b:72:0b:86:50:92:24:27:bd:4e:ee: ad:cc:af:bc:e6:50:04:a0:ed:e9:e6:9d:33:c9:e5:2b:38:48: aa:03:1c:1a:fd:04:d5:9b:79:5f:2b:44:55:0c:4a:91:d6:53: e2:71:1d:71:45:86:fc:13:03:ca:3c:22:9f:dd:0a:e5:7d:f2: 72:90:dc:e5:77:62:30:27:93:5e:1d:05:2f:a2:30:6e:49:7d: 01:52:a4:e0:03:cf:30:97:34:12:ee:62:54:0b:b5:de:b6:d4: 9c:80:c0:76:de:aa:55:87:3d:47:63:e2:6a:d8:9c:2e:89:e9: 65:d4:b1:91:89:d7:2a:7f:11:bc:ca:b1:91:d1:d3:43:1d:fa: 43:98:dd:03:b0:cc:d1:70:ea:06:a3:0d:a5:42:a9:b5:12:5c: 10:ad:43:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/DB49FEdk34t8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGVlNGVkMjAtMWJkNy00ZjQ5LWI5ZGYtZWY4ZTE4YmIyN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzUd1WyGK6VaU7K9lt1SwSgti8KQPzq9+UsM q6EfRh5p4npAXewzOwYdXns67/6FGwmqrMl8LcWU9+NRaJPz54zNc1Avpao5KZbs IekRyBPZa7WoiuXbvjge3kaBFWUh8Q4tvPHASSe4bSigNMQXcn+RURqSTt8PJVmU giDyMdpUwCFnevLRe4/taKnnTojOshd7HUi4t6s5xnQQhxcydAAhFwSPYt7hibhc uqt2CMtZDJx6QtebW3Svs1/7OHEyAYIRqBCNRwJegmRzxr5lXj2IM+JgxIsTSihY HYFed3uneDqjdgHW6sY0Gd4v3mkm879ixJHTsnf14W9JWwhjMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIZO2fKdOctLA4SpqVh2mY1hjRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTc3ZTFlYjYtMGFjMC0z YWJjLWIxNzUtOTczMThjOWI0MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9lk8v2q2buANYILTYc6P0aOeVpICt45q5gy19LW8HRXxEqlhS+LlF5 g7e9ryUfCYkYc6LHOOhQE3TmMYZn4bFU9uWUWWQOhE7dHef7Og9WRLsozo0pvI37 pZnIYshQcLULcguGUJIkJ71O7q3Mr7zmUASg7enmnTPJ5Ss4SKoDHBr9BNWbeV8r RFUMSpHWU+JxHXFFhvwTA8o8Ip/dCuV98nKQ3OV3YjAnk14dBS+iMG5JfQFSpOAD zzCXNBLuYlQLtd621JyAwHbeqlWHPUdj4mrYnC6J6WXUsZGJ1yp/EbzKsZHR00Md +kOY3QOwzNFw6gajDaVCqbUSXBCtQ1Y= -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:54 2025 by rpki-client