$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa File: c0286517-a220-316a-b592-8b2237a7fea3.roa (raw, json) Hash identifier: 7+zSSWMO+9P8Y8rK61G+udlNOxk7i0IRdrA+K1colmQ= Subject key identifier: 75:8E:B3:F7:7D:EC:BC:B5:D1:97:CF:63:70:64:EB:D4:19:B2:E6:BF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DBFD5151640A322B6D2360 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.17.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:fd:51:51:64:0a:32:2b:6d:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2c2cf90a-0e6f-42ff-a966-d722d39657be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7c:3c:e8:94:45:f8:dc:fe:d0:bc:a1:5a:7a: 9a:0a:f0:23:31:07:0c:93:13:3c:5c:95:58:c0:31: 5e:7c:10:22:29:ca:f1:b2:77:45:54:ab:c8:48:05: 34:a9:67:85:4c:b0:1c:31:10:30:59:f4:d4:cc:bd: 25:05:1c:63:69:70:3c:34:47:dc:5a:af:77:2c:66: 2c:12:bc:36:92:7e:d7:4a:06:3f:69:32:29:f9:61: 26:c9:59:45:05:c7:11:97:f7:d8:11:df:54:93:c5: be:a0:8b:1e:45:28:54:18:f4:b9:ef:8f:08:28:c2: 7e:35:10:14:e2:de:a3:73:19:c3:cb:d5:2b:9b:40: 72:80:fb:e7:25:3b:48:91:b8:a8:10:86:d0:0e:11: be:e9:b5:fe:e9:72:35:56:6a:87:84:ee:a5:f5:60: c8:33:a7:0d:54:7f:56:33:87:38:5a:00:55:63:d3: f2:99:68:8d:37:c9:8d:a9:2c:16:04:2d:87:45:b2: 17:6e:51:cb:a4:9a:6f:87:ad:cf:1c:a3:f3:77:b5: 48:a3:5c:b2:ec:28:5b:7c:f8:80:b1:f9:91:2d:84: 7d:86:51:19:ac:39:29:c7:28:d3:5d:26:7b:f8:7e: 9e:c0:5b:a4:1e:f4:24:8a:fc:95:f7:6f:f2:d3:a9: 43:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8E:B3:F7:7D:EC:BC:B5:D1:97:CF:63:70:64:EB:D4:19:B2:E6:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c8:8e:c5:88:6b:86:93:6f:4f:c5:39:7a:65:04:e7:f8:f4: 1d:f0:28:a1:3c:ff:5c:c7:1a:fd:e0:8a:2a:20:54:c1:c1:c1: a9:18:26:33:6c:21:c7:bb:41:62:ac:78:f0:98:6d:2d:e7:76: ae:cd:17:d0:8c:99:4b:46:ec:c4:f3:3b:f0:0e:39:64:6b:03: ef:be:c7:10:5a:c3:6a:38:a8:80:29:23:a0:d9:51:a6:02:a7: b8:5d:bc:d3:dc:8d:dd:b0:17:c5:27:4a:5f:cb:a7:ba:23:e9: d1:6b:84:95:cc:f1:2d:68:12:c7:de:84:ce:3d:06:c2:44:7b: d3:ef:9c:6a:d9:cb:0e:4c:66:07:fb:f5:f9:8e:4c:76:ee:9a: 37:27:a8:65:f4:b5:0d:ab:40:50:b1:df:60:78:e1:70:3a:80: b1:8c:3f:81:b6:d5:0d:1b:19:d5:12:89:19:ea:f0:d1:f7:d6: 03:e3:14:42:49:11:6f:5e:b2:b5:4a:79:dd:89:74:1e:ea:55: 40:73:13:82:77:0d:cb:1c:41:d3:a2:06:56:ed:50:a4:4c:09: a4:3a:53:61:b9:83:ec:0a:38:d9:5a:16:ff:7e:df:1a:f5:9d: 2d:33:6d:bf:2a:7a:9a:cd:c2:a3:66:75:28:7b:65:ca:39:46: 52:dc:d3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/1RUWQKMittI2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmMyY2Y5MGEtMGU2Zi00MmZmLWE5NjYtZDcyMmQzOTY1N2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hw86JRF+Nz+0LyhWnqaCvAjMQcMkxM8XJVY wDFefBAiKcrxsndFVKvISAU0qWeFTLAcMRAwWfTUzL0lBRxjaXA8NEfcWq93LGYs Erw2kn7XSgY/aTIp+WEmyVlFBccRl/fYEd9Uk8W+oIseRShUGPS5748IKMJ+NRAU 4t6jcxnDy9Urm0BygPvnJTtIkbioEIbQDhG+6bX+6XI1VmqHhO6l9WDIM6cNVH9W M4c4WgBVY9PymWiNN8mNqSwWBC2HRbIXblHLpJpvh63PHKPzd7VIo1yy7ChbfPiA sfmRLYR9hlEZrDkpxyjTXSZ7+H6ewFukHvQkivyV92/y06lDfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWOs/d97Ly10ZfPY3Bk69QZsua/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzAyODY1MTctYTIyMC0z MTZhLWI1OTItOGIyMjM3YTdmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3IjsWIa4aTb0/FOXplBOf49B3wKKE8/1zHGv3giiogVMHBwakYJjNs Ice7QWKsePCYbS3ndq7NF9CMmUtG7MTzO/AOOWRrA+++xxBaw2o4qIApI6DZUaYC p7hdvNPcjd2wF8UnSl/Lp7oj6dFrhJXM8S1oEsfehM49BsJEe9PvnGrZyw5MZgf7 9fmOTHbumjcnqGX0tQ2rQFCx32B44XA6gLGMP4G21Q0bGdUSiRnq8NH31gPjFEJJ EW9esrVKed2JdB7qVUBzE4J3DcscQdOiBlbtUKRMCaQ6U2G5g+wKONlaFv9+3xr1 nS0zbb8qeprNwqNmdSh7Zco5RlLc0+c= -----END CERTIFICATE-----Generated at Wed Aug 6 00:56:24 2025 by rpki-client