$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa File: 3f92c434-efd9-3a70-96d3-95f8d0c53235.roa (raw, json) Hash identifier: 00/kriONVrM8G8pWE6OZxhG1gLORTrO9HqnPUvmZMyA= Subject key identifier: 47:71:DA:19:CD:21:9C:9D:91:8C:7C:46:C0:4B:AE:C1:AC:C4:78:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A814662F8795B29A529C15F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.17.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:62:f8:79:5b:29:a5:29:c1:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=082cb7d6-bb96-43a8-8ce9-a0b0408f4ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:c5:b9:8b:fc:4f:9e:27:80:ef:9a:e0:be: a2:95:1c:b0:98:00:14:8d:2e:30:33:c5:10:12:66: c0:bf:b5:03:da:72:98:39:06:58:3a:fa:1d:90:82: 81:63:fc:e2:9e:ff:e4:be:a4:17:c9:8c:67:e5:02: fd:e0:4c:63:1a:8b:e9:c3:2e:68:ae:37:55:6a:75: c0:38:cf:ac:4b:f8:45:5d:80:31:4a:12:49:c7:25: 83:b7:5c:e4:95:d7:cf:8a:26:9d:f9:c6:53:aa:3f: d1:1d:2d:b8:b2:a4:51:b0:47:6b:8b:de:e7:83:f7: 3a:24:20:9b:47:e0:79:a7:43:a9:54:1f:7c:51:c1: 6b:de:45:b1:d5:0b:c0:cf:f1:ac:f3:b0:aa:05:d3: 5f:39:1d:30:dd:bf:2a:53:57:1a:66:ee:a5:1a:e2: 6e:81:33:ca:e1:3b:10:6f:ef:96:20:98:d0:0d:54: 33:a3:04:e9:44:c3:10:18:de:f2:45:28:5d:3d:c7: d6:79:2e:28:2e:d2:09:f8:c4:1b:7b:40:16:89:bc: 12:67:40:20:85:9b:d5:15:61:8b:10:76:f8:8d:38: 1d:bd:80:b1:12:8d:da:cb:ff:0b:d2:18:5a:c9:7f: 67:3e:be:c2:07:90:9a:48:64:fd:b6:16:da:46:8f: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:71:DA:19:CD:21:9C:9D:91:8C:7C:46:C0:4B:AE:C1:AC:C4:78:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:91:31:50:7e:9a:85:24:df:45:e9:dc:b4:b7:75:c3:de:49: 14:0c:a1:74:53:53:0a:36:62:8e:0a:ef:d4:2f:e4:aa:25:56: f0:1e:3e:63:dd:55:04:ca:ba:76:15:f5:98:cf:70:62:b7:8f: 78:1e:f8:24:a7:ea:4f:31:24:54:a4:47:83:58:12:0b:1e:d7: 28:09:b0:45:dd:3f:7c:12:77:9d:19:0d:d4:d5:13:81:b7:c1: 06:ba:82:7f:87:ed:ec:62:36:4a:3b:7d:f5:bb:a4:fe:bf:e4: 1a:06:16:76:fa:fc:ee:42:9d:de:48:08:f1:d6:e6:39:09:a0: 36:ce:8b:e1:b8:19:d6:dd:e1:54:bc:63:70:eb:b3:8b:d6:d9: 95:82:dc:b5:32:a0:18:40:0e:8f:5f:5e:68:cd:86:ae:e8:a7: 33:78:98:e2:f2:3e:af:c7:a4:43:d6:2e:23:8e:48:fc:fb:fc: ce:02:ce:73:ab:c1:03:e3:7d:34:e2:a4:be:95:68:49:f3:80: ee:4a:3a:6c:24:9d:9f:16:4d:62:32:97:88:ca:bd:31:44:23: 73:a2:cf:50:86:3a:c2:2c:68:18:2e:ac:20:dc:34:84:a3:9d: 78:f5:57:1e:a8:fa:36:b7:1d:87:b0:2b:34:5b:db:c1:4c:a1: 14:ac:4f:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRmL4eVsppSnBX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MDgyY2I3ZDYtYmI5Ni00M2E4LThjZTktYTBiMDQwOGY0ZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRzFuYv8T54ngO+a4L6ilRywmAAUjS4wM8UQ EmbAv7UD2nKYOQZYOvodkIKBY/zinv/kvqQXyYxn5QL94ExjGovpwy5orjdVanXA OM+sS/hFXYAxShJJxyWDt1zkldfPiiad+cZTqj/RHS24sqRRsEdri97ng/c6JCCb R+B5p0OpVB98UcFr3kWx1QvAz/Gs87CqBdNfOR0w3b8qU1caZu6lGuJugTPK4TsQ b++WIJjQDVQzowTpRMMQGN7yRShdPcfWeS4oLtIJ+MQbe0AWibwSZ0AghZvVFWGL EHb4jTgdvYCxEo3ay/8L0hhayX9nPr7CB5CaSGT9thbaRo/ydQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdx2hnNIZydkYx8RsBLrsGsxHgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y5MmM0MzQtZWZkOS0z YTcwLTk2ZDMtOTVmOGQwYzUzMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeRMVB+moUk30Xp3LS3dcPeSRQMoXRTUwo2Yo4K79Qv5KolVvAePmPd VQTKunYV9ZjPcGK3j3ge+CSn6k8xJFSkR4NYEgse1ygJsEXdP3wSd50ZDdTVE4G3 wQa6gn+H7exiNko7ffW7pP6/5BoGFnb6/O5Cnd5ICPHW5jkJoDbOi+G4Gdbd4VS8 Y3Drs4vW2ZWC3LUyoBhADo9fXmjNhq7opzN4mOLyPq/HpEPWLiOOSPz7/M4CznOr wQPjfTTipL6VaEnzgO5KOmwknZ8WTWIyl4jKvTFEI3Oiz1CGOsIsaBgurCDcNISj nXj1Vx6o+ja3HYewKzRb28FMoRSsT0s= -----END CERTIFICATE-----Generated at Tue Aug 5 23:05:19 2025 by rpki-client