$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4484a151-9584-37ca-a9a6-d2cd53feb390.roa File: 4484a151-9584-37ca-a9a6-d2cd53feb390.roa (raw, json) Hash identifier: KjJss20l8SJu6hqQ2cCcNGDk9YkcHmPgJ9m2RYL0nrg= Subject key identifier: 95:8D:9E:FC:CB:DA:1B:38:95:38:74:45:96:2A:D0:55:A8:14:17:D5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410CC7EBAC73A79656EC700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4484a151-9584-37ca-a9a6-d2cd53feb390.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.17.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:cc:7e:ba:c7:3a:79:65:6e:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bb72130b-ecb8-463d-a5f8-5e123a5afbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:7c:25:a7:0b:81:43:de:3f:09:89:d3:01: a1:49:fd:4b:4b:f0:e7:39:70:7a:c7:5c:23:8c:f2: 5f:ab:97:4f:e8:db:28:dc:e6:3d:02:c2:4b:a8:20: 15:f4:b9:54:bb:05:cb:82:b1:65:20:7e:6d:f4:a1: 76:70:9b:36:51:f1:71:7f:6a:f0:58:bd:80:1b:53: cb:ce:00:ae:94:70:0b:e1:59:b7:a5:bc:1a:bb:2e: 63:f1:a5:a4:37:e0:3b:78:92:19:12:39:44:a6:17: 09:d0:4a:e8:ba:9d:87:a3:d5:51:57:bf:57:db:b7: 72:c9:8d:f5:91:19:06:27:7b:8e:0c:ea:3b:54:2c: 51:a2:3a:a5:f1:d8:51:db:64:0b:7b:d1:57:e6:03: fe:87:cb:fb:bd:80:77:ea:cf:f0:ac:15:c4:d4:ae: de:fb:62:ac:a2:d3:32:a7:d6:56:01:6f:7b:37:1c: 0c:5f:af:4d:2e:e5:49:9b:67:36:7f:8e:f4:a2:89: 59:a1:26:3d:52:b8:33:cb:08:a1:53:dc:35:03:a5: ce:1d:96:70:79:11:31:02:17:cb:b0:39:49:cb:67: a1:bb:37:fd:72:60:09:44:c3:fc:b3:26:9d:2b:ae: 61:3c:a8:fb:7e:15:8a:86:cc:2f:4e:4a:bf:ae:89: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:9E:FC:CB:DA:1B:38:95:38:74:45:96:2A:D0:55:A8:14:17:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4484a151-9584-37ca-a9a6-d2cd53feb390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ec:e1:21:06:7d:60:67:c3:c7:d4:e6:f5:d0:7e:4d:27:80: f1:6d:e8:e8:27:fe:7f:ae:e3:bb:0d:7c:13:b5:0a:73:01:46: 02:40:b3:e7:f4:25:af:3c:6c:76:f1:53:41:58:e8:5e:cd:e0: a6:db:80:27:48:1c:cb:ba:d9:8c:b3:50:25:ce:51:72:ff:ec: 34:48:e4:0b:ea:8d:50:51:15:c1:2b:9e:7d:7a:e0:31:5e:4d: bd:73:91:c9:2a:f0:e6:ad:5a:0d:6e:19:56:df:0b:19:d4:c4: 5c:f4:39:7c:79:dd:e4:e9:b5:eb:ca:17:f1:1e:4b:e6:b9:f4: bc:dc:e1:d5:b0:07:bb:b3:69:84:17:25:cb:d4:4d:14:d2:c9: 24:21:58:e4:54:a6:3e:56:1a:82:84:65:dc:b7:a0:b3:9a:11: 66:3f:04:f2:e9:84:ac:c4:6c:8b:4a:63:ec:44:c2:5d:84:03: f8:e4:c6:d5:59:39:73:f9:c9:44:a3:6a:88:e9:a4:9d:7f:8f: 4b:08:e6:6b:ba:20:f3:17:0d:f5:2a:85:e6:3f:2c:dd:c3:49: ae:35:da:e3:5b:59:b4:3d:22:5e:2a:e5:e9:d3:9c:f0:10:b2: f3:67:45:f9:20:ca:3a:67:b6:51:b6:73:03:4a:a7:11:89:cc: 57:ef:34:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEMx+usc6eWVuxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmI3MjEzMGItZWNiOC00NjNkLWE1ZjgtNWUxMjNhNWFmYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKZ8JacLgUPePwmJ0wGhSf1LS/DnOXB6x1wj jPJfq5dP6Nso3OY9AsJLqCAV9LlUuwXLgrFlIH5t9KF2cJs2UfFxf2rwWL2AG1PL zgCulHAL4Vm3pbwauy5j8aWkN+A7eJIZEjlEphcJ0Eroup2Ho9VRV79X27dyyY31 kRkGJ3uODOo7VCxRojql8dhR22QLe9FX5gP+h8v7vYB36s/wrBXE1K7e+2KsotMy p9ZWAW97NxwMX69NLuVJm2c2f470oolZoSY9UrgzywihU9w1A6XOHZZweRExAhfL sDlJy2ehuzf9cmAJRMP8syadK65hPKj7fhWKhswvTkq/ronSDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWNnvzL2hs4lTh0RZYq0FWoFBfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDQ4NGExNTEtOTU4NC0z N2NhLWE5YTYtZDJjZDUzZmViMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7s4SEGfWBnw8fU5vXQfk0ngPFt6Ogn/n+u47sNfBO1CnMBRgJAs+f0 Ja88bHbxU0FY6F7N4KbbgCdIHMu62YyzUCXOUXL/7DRI5AvqjVBRFcErnn164DFe Tb1zkckq8OatWg1uGVbfCxnUxFz0OXx53eTptevKF/EeS+a59Lzc4dWwB7uzaYQX JcvUTRTSySQhWORUpj5WGoKEZdy3oLOaEWY/BPLphKzEbItKY+xEwl2EA/jkxtVZ OXP5yUSjaojppJ1/j0sI5mu6IPMXDfUqheY/LN3DSa412uNbWbQ9Il4q5enTnPAQ svNnRfkgyjpntlG2cwNKpxGJzFfvNFw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:51 2025 by rpki-client