$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68900678-aaf3-3bea-be9f-c204a0425c30.roa File: 68900678-aaf3-3bea-be9f-c204a0425c30.roa (raw, json) Hash identifier: zTU/T9zYAixuRT9MAwliK5xzaEQrXj/rmQsevF4DYZo= Subject key identifier: A2:17:71:25:6E:F8:AB:4B:A8:C6:18:E7:9F:1E:AC:CE:72:65:59:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84125679B1F47747D94E9340 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68900678-aaf3-3bea-be9f-c204a0425c30.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.17.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:56:79:b1:f4:77:47:d9:4e:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=48f25945-bba0-4fe9-bb71-71da12a69882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bf:ad:40:11:bc:31:82:2f:0c:b5:96:81:ba: 44:0f:70:27:18:f4:4f:07:83:7e:05:71:7a:f0:4c: 61:a8:d4:c9:1c:97:d7:f3:0d:4c:13:00:e4:2a:ad: 19:ce:63:49:38:59:c5:c9:08:d2:c8:58:3f:fe:eb: a5:b6:55:7d:63:e6:66:14:62:b0:36:39:1b:58:49: 83:47:59:9d:bf:b2:81:4f:6a:2e:f4:cd:c1:82:82: 28:0d:50:c4:11:4c:8c:4a:9a:ec:00:ed:77:aa:79: 86:1c:5a:8c:4c:79:65:df:70:c4:9f:fb:c0:80:5c: 01:88:28:28:c2:cc:6e:17:b5:70:87:11:f0:a8:97: 1f:70:e8:5f:d4:72:79:81:3c:ab:ae:80:ab:89:28: 49:12:17:bf:d6:1b:5c:68:9c:1c:e4:69:53:0b:92: 8e:96:9b:c8:0a:e1:fb:0c:f3:02:2b:7d:99:cf:4d: 48:f2:15:2e:4e:dd:af:78:a9:cb:e9:b0:ae:d1:88: bc:f2:47:df:3f:1d:56:05:ed:96:2f:10:a9:d1:d2: 39:39:88:aa:98:13:3c:c3:e0:db:fd:62:a1:fd:58: d9:65:48:b6:b6:5d:4c:66:51:b3:fd:47:2e:a2:85: 17:35:fd:dc:c6:8a:a6:b4:22:cd:17:f0:e3:6f:3c: a6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:17:71:25:6E:F8:AB:4B:A8:C6:18:E7:9F:1E:AC:CE:72:65:59:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68900678-aaf3-3bea-be9f-c204a0425c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a6:8e:25:b1:09:71:e9:ba:7d:41:79:4a:dc:db:2c:ac:f3: c9:a6:88:34:e2:46:f1:eb:da:ba:72:76:70:18:2b:6c:cf:5b: 17:08:81:4e:d6:c8:1a:d9:fa:b5:45:23:a0:0f:8a:75:1c:aa: 2c:e2:ea:d8:0a:db:9f:0e:9e:ec:78:fa:b1:9c:24:fd:d9:9e: 27:68:29:c5:81:7c:3b:75:bf:9c:ac:71:30:95:a5:cd:84:83: f4:e6:93:e9:df:1e:08:5d:a8:30:1e:58:29:9a:c5:d0:9e:b2: 63:8f:29:d9:7b:44:3d:f5:d4:3a:c7:10:cb:d9:81:b6:e7:e5: 54:e8:9f:f0:8a:b6:97:85:86:62:19:cc:87:83:ab:dd:7e:27: e8:8d:24:12:e3:5e:46:7f:e1:e0:e2:a8:2c:09:ff:1d:35:18: aa:3a:c4:29:16:0a:2b:a8:5b:76:d1:0a:6f:1a:fb:8e:32:2c: ec:44:06:9b:50:49:6a:7e:f7:5d:65:88:b0:35:2c:c2:5a:be: 63:a0:84:51:d4:66:bb:45:52:ed:4a:40:7a:bb:f0:37:55:0e: 08:24:c0:41:b4:dc:82:7f:75:16:3e:b5:78:6a:b6:d5:5e:a6: 7e:36:67:c0:69:3a:7c:90:d7:12:3c:35:35:06:5e:9d:09:72: b7:be:5e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElZ5sfR3R9lOk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDhmMjU5NDUtYmJhMC00ZmU5LWJiNzEtNzFkYTEyYTY5ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL+tQBG8MYIvDLWWgbpED3AnGPRPB4N+BXF6 8ExhqNTJHJfX8w1MEwDkKq0ZzmNJOFnFyQjSyFg//uultlV9Y+ZmFGKwNjkbWEmD R1mdv7KBT2ou9M3BgoIoDVDEEUyMSprsAO13qnmGHFqMTHll33DEn/vAgFwBiCgo wsxuF7VwhxHwqJcfcOhf1HJ5gTyrroCriShJEhe/1htcaJwc5GlTC5KOlpvICuH7 DPMCK32Zz01I8hUuTt2veKnL6bCu0Yi88kffPx1WBe2WLxCp0dI5OYiqmBM8w+Db /WKh/VjZZUi2tl1MZlGz/UcuooUXNf3cxoqmtCLNF/Djbzym4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIXcSVu+KtLqMYY558erM5yZVnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjg5MDA2NzgtYWFmMy0z YmVhLWJlOWYtYzIwNGEwNDI1YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSmjiWxCXHpun1BeUrc2yys88mmiDTiRvHr2rpydnAYK2zPWxcIgU7W yBrZ+rVFI6APinUcqizi6tgK258Onux4+rGcJP3ZnidoKcWBfDt1v5yscTCVpc2E g/Tmk+nfHghdqDAeWCmaxdCesmOPKdl7RD311DrHEMvZgbbn5VTon/CKtpeFhmIZ zIeDq91+J+iNJBLjXkZ/4eDiqCwJ/x01GKo6xCkWCiuoW3bRCm8a+44yLOxEBptQ SWp+911liLA1LMJavmOghFHUZrtFUu1KQHq78DdVDggkwEG03IJ/dRY+tXhqttVe pn42Z8BpOnyQ1xI8NTUGXp0Jcre+Xgc= -----END CERTIFICATE-----Generated at Wed Aug 6 04:12:19 2025 by rpki-client