$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa File: 89f75768-f5cc-3977-b803-ee0990cb3e34.roa (raw, json) Hash identifier: X3i5c7bVNTejekCZYUIs7ZWHl1naJz+qQye4dkRpEws= Subject key identifier: E7:80:9F:5D:A9:0E:69:7D:5E:8C:FE:4B:DB:16:A6:3A:9F:21:40:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC05DFF1733BCDD6E1ACA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.17.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:05:df:f1:73:3b:cd:d6:e1:ac:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=86d6d95a-7afa-4550-982c-e04293313d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:a9:24:38:df:93:51:73:00:df:48:d8:ac: 15:c8:81:67:c0:c0:37:82:82:eb:78:d9:ab:6c:62: 86:46:d8:5f:f6:86:fc:54:c4:2d:16:87:f6:71:35: b9:00:be:fc:e5:ca:65:bd:b1:f9:f3:15:e7:87:98: 33:2f:2d:63:70:80:ba:e8:f5:d2:09:93:d1:e7:02: c8:92:88:4a:e9:a9:56:f4:1b:84:7a:f9:a8:61:1b: 53:1d:86:30:b1:ae:3b:61:1f:0b:7d:c0:dd:10:4b: 85:bf:1c:30:19:44:26:76:47:c3:e7:21:cd:ba:68: 67:8f:ce:0e:5c:92:13:3e:23:02:be:37:ea:fd:dd: 88:b5:00:64:2e:67:1e:8b:6f:ea:88:de:0b:a4:1a: 5d:da:b4:d5:03:11:2b:23:d0:44:d2:35:cc:f5:be: 77:8e:1a:ee:20:a2:78:91:56:76:0a:90:58:65:b4: 08:b1:1f:a8:38:4a:58:3c:3d:b0:6b:40:05:a9:8d: 4c:e0:e7:f4:d1:6a:62:85:e2:e8:ed:81:d6:99:61: 26:24:f9:3c:53:52:72:b7:46:2f:bb:51:b0:cc:cf: a4:cc:cb:7c:c9:c1:0a:01:cb:b3:de:8d:66:a7:dc: 34:c6:af:8a:31:08:0d:c1:f1:cc:b9:d4:d3:74:c1: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:80:9F:5D:A9:0E:69:7D:5E:8C:FE:4B:DB:16:A6:3A:9F:21:40:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:26:d8:18:74:c3:ab:9b:b7:c6:de:74:8c:fe:3b:d1:01:ae: c8:bc:d5:98:02:49:82:de:09:63:65:d0:ce:4e:5c:4c:54:bd: d1:dd:3c:00:7e:3b:24:9e:55:0d:ae:f5:d7:5a:34:3c:e5:ec: ae:45:49:e2:ad:1a:b7:ae:33:81:5a:60:77:c4:89:c0:6a:9c: 62:ea:47:83:a7:cf:1b:6d:08:dd:30:17:73:db:15:3b:ac:d2: f3:99:be:5e:ea:cf:fd:f9:66:8b:0b:da:21:08:22:3a:41:4b: a3:91:d3:c3:b5:19:cb:0e:91:40:e2:be:c2:97:61:53:f2:5d: a5:cb:1e:88:54:bd:e0:8e:3e:df:a9:04:24:0e:bf:09:94:0b: 39:cb:b4:5f:cd:42:6a:65:40:12:9b:81:30:43:64:f2:5c:7f: 07:c5:f9:51:b9:71:47:64:86:08:37:a4:b8:bd:b3:be:6f:41: 81:48:fb:07:2f:5c:0e:50:db:a4:c0:03:1f:87:5c:a4:be:92: 22:79:9f:3a:96:d1:fa:74:c0:57:7b:57:49:14:ae:06:c8:18: b2:22:44:5f:38:0f:7b:de:a6:28:77:3e:bf:da:44:dc:5d:b5: 05:64:66:7c:34:f0:a9:5c:79:83:3a:bc:1c:d6:73:8c:73:70: 85:83:7e:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3AXf8XM7zdbhrKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODZkNmQ5NWEtN2FmYS00NTUwLTk4MmMtZTA0MjkzMzEzZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtqpJDjfk1FzAN9I2KwVyIFnwMA3goLreNmr bGKGRthf9ob8VMQtFof2cTW5AL785cplvbH58xXnh5gzLy1jcIC66PXSCZPR5wLI kohK6alW9BuEevmoYRtTHYYwsa47YR8LfcDdEEuFvxwwGUQmdkfD5yHNumhnj84O XJITPiMCvjfq/d2ItQBkLmcei2/qiN4LpBpd2rTVAxErI9BE0jXM9b53jhruIKJ4 kVZ2CpBYZbQIsR+oOEpYPD2wa0AFqY1M4Of00WpiheLo7YHWmWEmJPk8U1Jyt0Yv u1GwzM+kzMt8ycEKAcuz3o1mp9w0xq+KMQgNwfHMudTTdMH2RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeAn12pDml9Xoz+S9sWpjqfIUBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlmNzU3NjgtZjVjYy0z OTc3LWI4MDMtZWUwOTkwY2IzZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAm2Bh0w6ubt8bedIz+O9EBrsi81ZgCSYLeCWNl0M5OXExUvdHdPAB+ OySeVQ2u9ddaNDzl7K5FSeKtGreuM4FaYHfEicBqnGLqR4OnzxttCN0wF3PbFTus 0vOZvl7qz/35ZosL2iEIIjpBS6OR08O1GcsOkUDivsKXYVPyXaXLHohUveCOPt+p BCQOvwmUCznLtF/NQmplQBKbgTBDZPJcfwfF+VG5cUdkhgg3pLi9s75vQYFI+wcv XA5Q26TAAx+HXKS+kiJ5nzqW0fp0wFd7V0kUrgbIGLIiRF84D3vepih3Pr/aRNxd tQVkZnw08KlceYM6vBzWc4xzcIWDflk= -----END CERTIFICATE-----Generated at Wed Aug 6 05:24:12 2025 by rpki-client