$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa File: 9e577cf7-001e-33b7-928f-1b41550b0b21.roa (raw, json) Hash identifier: XMywvzPRm3u5HLjId4i+zCg29FZrHUYcJf5LIZAICMc= Subject key identifier: 2E:A8:D9:FD:02:6D:5D:56:0A:21:FA:FB:ED:65:1A:3E:24:D4:E4:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81462B5E7FA56E4C3C0F0720 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.17.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:2b:5e:7f:a5:6e:4c:3c:0f:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2b7633f4-ec0a-408a-8d9d-afc0eb0050e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:85:d2:bb:6f:56:4b:90:7a:d5:7f:e1:00: cf:d9:60:90:a1:1b:e6:03:f5:98:60:7b:e1:3b:64: 10:e9:cc:55:2e:30:4d:82:bd:89:3b:7e:49:f2:53: d8:46:1c:63:d6:98:6d:79:9b:f0:6c:7e:53:53:3f: ab:34:72:ac:eb:13:27:ec:33:ea:ea:9a:3c:7d:0a: 26:07:9c:e0:7e:0d:1a:8d:6e:ae:a5:5b:f0:c9:b7: 87:6f:d2:30:dd:7d:1f:98:14:17:17:52:ea:42:68: 6d:86:b5:ba:e5:90:32:08:a1:12:5d:8d:63:88:d2: ba:dd:c8:2a:c6:a7:f0:8c:a1:a1:95:fb:e5:dc:49: c2:cd:8e:76:46:37:42:22:14:85:07:49:4a:7c:e1: c1:6a:bb:3d:77:6d:9a:52:a6:17:6d:92:19:d1:94: b1:69:f3:50:d6:78:b4:72:4a:fb:06:32:7a:ce:35: be:37:3f:bb:ce:61:39:a2:3f:b2:4e:bc:49:8c:2e: f0:fb:50:34:4c:de:f6:04:61:1f:0a:09:d0:ff:1a: 0b:9f:1f:ea:58:6b:37:03:9f:81:e4:c7:d9:13:c9: 43:44:89:3c:82:89:c5:83:b6:da:30:86:78:6d:02: ed:51:72:de:4e:f8:ca:72:34:48:f1:47:23:26:4e: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A8:D9:FD:02:6D:5D:56:0A:21:FA:FB:ED:65:1A:3E:24:D4:E4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:da:66:73:34:f5:4d:c0:c2:8f:78:63:a4:4c:43:d1:37:2d: ba:77:9a:d6:06:fa:eb:64:1c:dd:eb:5c:91:fe:e7:cd:0c:b3: 0c:2d:69:0b:f5:03:29:40:2b:34:c4:d2:80:20:63:51:75:0a: db:77:51:63:b4:41:e6:49:4f:1c:00:f3:ab:22:64:27:ad:60: d5:1c:1d:0a:a7:25:e0:1b:82:64:94:7b:45:f8:78:dd:33:ea: 71:5a:9d:de:ce:fe:3e:55:43:7a:f7:d4:32:a5:44:19:63:99: 48:79:0c:d5:dd:dc:d1:10:e1:fb:d6:3e:9f:ad:57:ef:f3:e9: 0d:fe:d3:3b:e6:66:55:6d:e6:6e:55:bb:3f:db:72:33:73:b1: cd:9e:4a:bf:76:98:f1:ad:7c:7f:eb:ce:af:1a:0f:92:d9:ec: 20:47:88:9c:33:57:cb:42:ac:f4:ba:1f:cb:35:9b:23:af:54: 53:ac:b6:7b:ab:49:93:c8:34:1e:d1:eb:48:0c:fd:f4:5f:c6: 9b:c9:d0:3d:22:a4:99:7e:be:01:07:3f:e6:af:66:fd:ce:0e: 7a:95:df:65:a1:87:90:e9:b7:35:78:a4:61:28:98:65:60:64: 90:cf:1d:df:cb:9a:e8:3f:e3:ba:c3:80:41:87:46:d8:ef:83: 67:31:b8:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRitef6VuTDwPByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmI3NjMzZjQtZWMwYS00MDhhLThkOWQtYWZjMGViMDA1MGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt72F0rtvVkuQetV/4QDP2WCQoRvmA/WYYHvh O2QQ6cxVLjBNgr2JO35J8lPYRhxj1phteZvwbH5TUz+rNHKs6xMn7DPq6po8fQom B5zgfg0ajW6upVvwybeHb9Iw3X0fmBQXF1LqQmhthrW65ZAyCKESXY1jiNK63cgq xqfwjKGhlfvl3EnCzY52RjdCIhSFB0lKfOHBars9d22aUqYXbZIZ0ZSxafNQ1ni0 ckr7BjJ6zjW+Nz+7zmE5oj+yTrxJjC7w+1A0TN72BGEfCgnQ/xoLnx/qWGs3A5+B 5MfZE8lDRIk8gonFg7baMIZ4bQLtUXLeTvjKcjRI8UcjJk4BPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6o2f0CbV1WCiH6++1lGj4k1ORpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWU1NzdjZjctMDAxZS0z M2I3LTkyOGYtMWI0MTU1MGIwYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHaZnM09U3Awo94Y6RMQ9E3Lbp3mtYG+utkHN3rXJH+580MswwtaQv1 AylAKzTE0oAgY1F1Ctt3UWO0QeZJTxwA86siZCetYNUcHQqnJeAbgmSUe0X4eN0z 6nFand7O/j5VQ3r31DKlRBljmUh5DNXd3NEQ4fvWPp+tV+/z6Q3+0zvmZlVt5m5V uz/bcjNzsc2eSr92mPGtfH/rzq8aD5LZ7CBHiJwzV8tCrPS6H8s1myOvVFOstnur SZPINB7R60gM/fRfxpvJ0D0ipJl+vgEHP+avZv3ODnqV32Whh5DptzV4pGEomGVg ZJDPHd/Lmug/47rDgEGHRtjvg2cxuG0= -----END CERTIFICATE-----Generated at Tue Aug 5 08:20:19 2025 by rpki-client