$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82e581a5-d4e9-3cec-a9b0-8a7de0f8231e.roa File: 82e581a5-d4e9-3cec-a9b0-8a7de0f8231e.roa (raw, json) Hash identifier: QnFIfrw7fO9xRguRtsvsWw3U5SweJafrQAgMMZ+J0Tw= Subject key identifier: 11:23:76:9F:E7:AE:53:82:FE:E0:10:EA:74:22:B5:26:3B:9A:E0:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841248F090187F8ED4CA0560 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82e581a5-d4e9-3cec-a9b0-8a7de0f8231e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.17.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:48:f0:90:18:7f:8e:d4:ca:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=242bdf5a-fd75-4d6f-92ef-d7ffb9171fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:ca:3f:84:8f:a7:c2:b6:29:dd:54:56:29: 91:65:9f:ef:4a:92:e1:e1:ec:79:7e:3e:ce:cd:a5: 9e:ee:44:31:da:20:6f:28:fb:55:f2:45:3a:30:77: f5:26:f5:a0:01:7d:87:bb:97:69:64:32:46:d6:15: 8c:a1:f4:3d:e4:f6:30:e2:de:fe:e7:ff:67:c1:36: a7:8b:2e:2b:cc:67:f2:27:d8:26:35:cf:68:da:3f: e3:58:ed:c6:fb:40:e5:9a:66:2d:ba:cc:83:13:97: 9f:9b:13:f8:8e:48:e1:9d:43:09:d7:d7:63:25:47: 75:01:d2:48:42:6e:03:c3:45:fd:b6:7a:08:d8:04: 8c:91:a6:c6:79:c4:e4:1a:4c:c7:f1:b6:a6:81:f4: 29:b4:10:dd:57:a8:c0:0c:6d:9a:21:e2:26:a6:24: 82:b3:25:db:09:db:04:75:90:60:f8:01:1a:8d:9f: 1a:9e:d2:8c:d7:c0:37:5f:d3:5e:a2:63:52:d5:2e: 81:b8:86:c7:37:c8:d5:1d:92:b7:1a:57:92:b9:32: cd:e8:cf:f0:11:e3:0e:25:16:70:fc:77:01:01:1a: 1a:e3:10:b1:8f:84:06:9d:9b:06:8f:be:57:35:ee: 49:a6:cf:1d:d8:4d:24:3c:b9:9f:7b:18:95:21:d9: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:23:76:9F:E7:AE:53:82:FE:E0:10:EA:74:22:B5:26:3B:9A:E0:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82e581a5-d4e9-3cec-a9b0-8a7de0f8231e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7f:db:9f:3b:0a:5a:38:b6:36:b2:b0:35:55:45:65:20:c4: 39:d3:f6:47:1e:41:a0:17:2f:0f:a8:24:aa:41:fc:df:52:a4: 14:c1:ab:34:79:f8:bc:47:23:bb:9b:47:a9:75:57:70:27:21: 2a:32:8c:65:ce:62:3b:f3:af:70:64:39:66:05:56:f3:9e:da: cc:07:a1:69:4e:59:7e:c8:0a:dd:b3:6a:8d:09:50:39:a6:fa: c3:b6:75:be:78:42:31:e2:a4:a1:24:e8:c2:df:84:e2:fb:97: ae:3b:bc:03:a8:8c:b4:58:7e:1b:32:f1:ea:01:14:3b:39:00: 13:b5:20:0a:6a:af:d5:db:ad:43:b0:14:3c:6a:5f:1f:80:ff: 39:41:9d:84:05:fe:c9:23:c0:ff:38:64:02:bf:ee:f2:0e:df: c8:dd:3f:f9:90:c5:03:aa:4b:d5:73:ee:c9:53:ac:21:b0:31: 12:ac:68:b3:54:37:07:1e:da:68:dc:f4:d8:b6:2b:27:5d:e0: 4d:84:34:4f:bd:38:12:54:52:d2:85:59:c5:d8:49:d1:92:10: a6:86:25:79:19:03:6c:0e:9a:9a:13:df:61:dd:88:f7:b7:e3: 2c:1a:ac:76:73:ca:7b:23:f1:88:f6:39:54:b2:a7:f0:bd:3d: 78:59:43:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkjwkBh/jtTKBWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjQyYmRmNWEtZmQ3NS00ZDZmLTkyZWYtZDdmZmI5MTcxZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6TKP4SPp8K2Kd1UVimRZZ/vSpLh4ex5fj7O zaWe7kQx2iBvKPtV8kU6MHf1JvWgAX2Hu5dpZDJG1hWMofQ95PYw4t7+5/9nwTan iy4rzGfyJ9gmNc9o2j/jWO3G+0DlmmYtusyDE5efmxP4jkjhnUMJ19djJUd1AdJI Qm4Dw0X9tnoI2ASMkabGecTkGkzH8bamgfQptBDdV6jADG2aIeImpiSCsyXbCdsE dZBg+AEajZ8antKM18A3X9NeomNS1S6BuIbHN8jVHZK3GleSuTLN6M/wEeMOJRZw /HcBARoa4xCxj4QGnZsGj75XNe5Jps8d2E0kPLmfexiVIdk1UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEjdp/nrlOC/uAQ6nQitSY7muDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODJlNTgxYTUtZDRlOS0z Y2VjLWE5YjAtOGE3ZGUwZjgyMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN/2587Clo4tjaysDVVRWUgxDnT9kceQaAXLw+oJKpB/N9SpBTBqzR5 +LxHI7ubR6l1V3AnISoyjGXOYjvzr3BkOWYFVvOe2swHoWlOWX7ICt2zao0JUDmm +sO2db54QjHipKEk6MLfhOL7l647vAOojLRYfhsy8eoBFDs5ABO1IApqr9XbrUOw FDxqXx+A/zlBnYQF/skjwP84ZAK/7vIO38jdP/mQxQOqS9Vz7slTrCGwMRKsaLNU Nwce2mjc9Ni2Kydd4E2ENE+9OBJUUtKFWcXYSdGSEKaGJXkZA2wOmpoT32HdiPe3 4ywarHZzynsj8Yj2OVSyp/C9PXhZQ3Q= -----END CERTIFICATE-----Generated at Tue Aug 5 22:59:09 2025 by rpki-client