$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa File: 5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa (raw, json) Hash identifier: 7fvk7pLFcvJTX/1dgIABRydgVSHZWChCZNsaZjdzKpo= Subject key identifier: 91:C4:B0:07:F8:18:99:D9:F9:21:96:72:D6:34:BA:67:17:7E:B8:2A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410CAE795B88331E0601280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.17.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:ca:e7:95:b8:83:31:e0:60:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d7816f8e-499c-4757-93e2-fbe78df62dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:81:b2:5c:e4:6c:73:66:63:20:ea:bf:81:36: e8:0d:92:cc:7b:6d:f1:e1:50:ab:c5:6c:9f:34:ea: 40:0d:53:92:9b:45:6c:ae:75:54:76:38:89:50:e2: 54:25:b8:f8:a2:8a:34:ce:cc:21:a5:ed:b7:5f:82: a6:d5:0a:bd:7d:17:15:88:15:db:27:be:ad:3d:0e: 67:b2:bc:4e:ac:06:77:2d:e7:3a:58:e1:65:d4:ea: a4:03:20:33:67:54:a7:f5:ca:2e:85:d0:85:27:97: 5e:76:2e:37:62:50:56:6d:65:c5:df:ed:1b:1e:64: 6e:98:60:6e:b3:97:ab:a2:4e:21:c1:36:80:2f:24: b6:ea:13:40:23:c6:ad:80:3e:b2:01:85:c3:27:c9: bf:5e:59:30:6b:86:5f:f1:85:61:f4:a8:a4:7d:21: 99:30:ff:4b:be:3b:c3:e0:dc:5a:86:b2:19:68:7c: 4c:6c:40:48:dd:3f:d1:c3:15:83:d9:15:9f:ab:9b: 91:13:24:14:33:79:6e:1c:33:92:d0:c5:e1:f0:bd: 2a:53:be:05:b7:09:d3:fc:f0:64:6e:f0:5c:a4:7b: 59:b4:49:1a:8c:75:2b:b9:f6:95:75:c5:16:6d:c2: 36:d1:18:31:98:12:ac:e1:d7:6d:9e:8d:d4:8b:9a: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C4:B0:07:F8:18:99:D9:F9:21:96:72:D6:34:BA:67:17:7E:B8:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d1:a0:ff:50:a6:f3:df:75:01:00:c7:23:df:33:f3:a8:61: ca:da:83:1c:dd:8e:b8:de:4b:00:b7:c7:92:2c:86:f0:87:1d: 35:6f:b4:8d:f1:57:68:60:fc:75:d6:96:16:dd:8d:f6:ea:89: 9d:55:92:24:96:1f:38:ed:51:c3:10:41:14:1d:42:0c:8d:ed: 58:f9:52:0e:ca:30:cf:69:43:78:0e:17:48:a2:0d:88:ac:dc: 44:ab:f3:ad:ab:d6:91:fd:36:0e:66:e9:dd:2c:8a:95:8a:11: aa:ac:3a:b8:42:b7:05:cd:00:ea:a2:3e:43:db:ee:f1:d9:c0: f8:c6:68:9f:02:fa:1b:d8:66:08:af:22:3e:80:4d:b6:da:45: 2f:47:7d:97:9a:b9:47:4d:b2:4c:ac:36:59:a6:5d:23:3d:a9: 48:16:16:07:c2:0b:b3:e6:92:5e:c5:b9:99:9d:b3:dd:5e:d3: ce:41:0d:3c:71:a9:94:95:06:91:a3:ca:4f:2b:c6:2a:02:6b: cc:a4:de:1d:58:33:89:2c:1d:ba:f1:87:31:7b:00:e8:2a:4f: 34:6a:d3:8d:83:00:9f:de:61:a2:d2:1b:fe:2e:db:bc:94:b9: 4b:07:ec:f8:bd:4d:6f:f4:8d:12:02:cc:65:80:43:64:4e:08: 6d:a4:45:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEMrnlbiDMeBgEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDc4MTZmOGUtNDk5Yy00NzU3LTkzZTItZmJlNzhkZjYyZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIGyXORsc2ZjIOq/gTboDZLMe23x4VCrxWyf NOpADVOSm0VsrnVUdjiJUOJUJbj4ooo0zswhpe23X4Km1Qq9fRcViBXbJ76tPQ5n srxOrAZ3Lec6WOFl1OqkAyAzZ1Sn9couhdCFJ5dedi43YlBWbWXF3+0bHmRumGBu s5erok4hwTaALyS26hNAI8atgD6yAYXDJ8m/Xlkwa4Zf8YVh9KikfSGZMP9LvjvD 4NxahrIZaHxMbEBI3T/RwxWD2RWfq5uREyQUM3luHDOS0MXh8L0qU74FtwnT/PBk bvBcpHtZtEkajHUrufaVdcUWbcI20RgxmBKs4ddtno3Ui5qEgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHEsAf4GJnZ+SGWctY0umcXfrgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWU1MmU2MmUtOWQ0Zi0z MzI3LTk4ZWYtNWE3MDFiODI4NWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3RoP9QpvPfdQEAxyPfM/OoYcragxzdjrjeSwC3x5IshvCHHTVvtI3x V2hg/HXWlhbdjfbqiZ1VkiSWHzjtUcMQQRQdQgyN7Vj5Ug7KMM9pQ3gOF0iiDYis 3ESr862r1pH9Ng5m6d0sipWKEaqsOrhCtwXNAOqiPkPb7vHZwPjGaJ8C+hvYZgiv Ij6ATbbaRS9HfZeauUdNskysNlmmXSM9qUgWFgfCC7Pmkl7FuZmds91e085BDTxx qZSVBpGjyk8rxioCa8yk3h1YM4ksHbrxhzF7AOgqTzRq042DAJ/eYaLSG/4u27yU uUsH7Pi9TW/0jRICzGWAQ2ROCG2kRXk= -----END CERTIFICATE-----Generated at Tue Aug 5 23:06:10 2025 by rpki-client