$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa File: daff23a2-4a8d-3881-b578-bfa4060d3d09.roa (raw, json) Hash identifier: nDXmiD/dwbUTu0N6hS3Tm4NrqSqpZAx4kcvdMPm0MM8= Subject key identifier: 14:5A:F3:CF:48:E5:13:0C:69:B8:0D:D9:83:B3:5D:DB:63:E9:DE:3B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC050BFCB7BA383AFC6280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.17.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:05:0b:fc:b7:ba:38:3a:fc:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=aaae4d4f-081a-457d-96c3-9cdea09c362d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:42:72:b4:71:1c:e1:2d:39:86:dd:97:82: 66:9b:e7:1e:8e:2c:8f:d8:e9:0c:bc:db:ff:43:72: 94:10:cb:1f:d4:72:19:be:02:19:c6:75:98:1b:61: 90:8c:c5:2c:ff:ff:25:9e:92:cb:6d:14:e1:0a:1f: b9:ad:7c:32:c8:61:f2:b7:65:a9:df:8b:97:db:f5: 76:2f:6a:70:d9:aa:52:23:88:08:e5:ca:8f:23:98: d5:2c:7b:1c:d0:8f:0b:b6:c5:1d:8c:f6:12:8b:6b: 6f:dc:74:f2:fe:4a:5b:06:92:13:35:97:11:6a:e2: 8d:b6:91:7e:19:cd:7e:0d:5e:e6:57:4c:34:02:95: a6:de:e3:27:ec:6c:a3:a1:c1:6f:22:8f:13:4b:1e: 60:bd:66:1c:6a:7d:97:4a:2c:4b:e5:f3:3a:6b:b6: 4b:ed:94:59:11:fa:b4:a6:9a:94:f5:41:c9:b4:be: 9b:33:7b:39:02:fa:76:7a:8a:66:45:e5:79:9f:a2: 9e:f9:43:e8:92:c1:c1:fc:5a:0d:d3:c6:23:ce:f4: 34:ef:09:8c:0c:d2:09:98:cd:45:35:3b:44:8b:47: 42:d3:d5:af:75:24:93:b4:74:29:b6:b2:18:31:53: c4:48:d5:46:cf:62:9e:f1:0e:8c:9e:aa:2a:74:dd: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5A:F3:CF:48:E5:13:0C:69:B8:0D:D9:83:B3:5D:DB:63:E9:DE:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:02:ba:ae:a2:d8:ae:a1:b7:3e:06:0a:fa:34:5f:0a:1e:e4: 2d:94:eb:f9:0e:08:d9:f4:1f:a6:da:df:84:a4:6d:3e:80:68: eb:2f:e1:9a:8b:4c:af:3e:ca:64:20:a4:9e:62:04:e4:12:a6: 87:06:43:af:9d:0b:4f:33:0d:4b:e6:fe:ae:df:f3:00:a9:fa: 20:2e:6f:51:e0:81:6d:29:29:6e:b1:70:56:1b:c4:94:e4:97: 8b:4b:73:4e:07:04:4a:24:ad:13:e4:a4:59:5c:97:ae:d7:27: e4:d0:25:56:01:f0:80:a0:95:6b:4c:da:71:93:ce:8f:43:b9: 43:bd:67:08:ef:fa:00:4d:94:c0:f1:e0:ba:05:64:f6:1c:2e: 0b:7a:2e:21:89:53:c1:ea:60:a1:89:c8:95:e2:a8:52:b0:f5: e1:20:2a:03:79:68:25:d3:3a:6e:a7:1c:55:a5:32:a6:89:91: a2:3c:24:7f:3c:f9:67:6f:9c:a1:3a:f8:36:3f:a1:98:3a:0a: 51:1b:4e:de:6c:dd:21:62:05:7e:be:1d:c3:9b:0a:57:5a:c2: 1a:1a:ed:20:37:15:e8:a7:80:34:36:df:0b:3f:05:65:87:f7: 04:aa:32:51:6e:9d:01:85:c6:a9:74:4c:24:a0:15:17:96:61: 9d:b4:a5:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3AUL/Le6ODr8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWFhZTRkNGYtMDgxYS00NTdkLTk2YzMtOWNkZWEwOWMzNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta5CcrRxHOEtOYbdl4Jmm+cejiyP2OkMvNv/ Q3KUEMsf1HIZvgIZxnWYG2GQjMUs//8lnpLLbRThCh+5rXwyyGHyt2Wp34uX2/V2 L2pw2apSI4gI5cqPI5jVLHsc0I8LtsUdjPYSi2tv3HTy/kpbBpITNZcRauKNtpF+ Gc1+DV7mV0w0ApWm3uMn7GyjocFvIo8TSx5gvWYcan2XSixL5fM6a7ZL7ZRZEfq0 ppqU9UHJtL6bM3s5Avp2eopmReV5n6Ke+UPoksHB/FoN08YjzvQ07wmMDNIJmM1F NTtEi0dC09WvdSSTtHQptrIYMVPESNVGz2Ke8Q6MnqoqdN2FcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRa889I5RMMabgN2YOzXdtj6d47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFmZjIzYTItNGE4ZC0z ODgxLWI1NzgtYmZhNDA2MGQzZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYCuq6i2K6htz4GCvo0Xwoe5C2U6/kOCNn0H6ba34SkbT6AaOsv4ZqL TK8+ymQgpJ5iBOQSpocGQ6+dC08zDUvm/q7f8wCp+iAub1HggW0pKW6xcFYbxJTk l4tLc04HBEokrRPkpFlcl67XJ+TQJVYB8ICglWtM2nGTzo9DuUO9Zwjv+gBNlMDx 4LoFZPYcLgt6LiGJU8HqYKGJyJXiqFKw9eEgKgN5aCXTOm6nHFWlMqaJkaI8JH88 +WdvnKE6+DY/oZg6ClEbTt5s3SFiBX6+HcObCldawhoa7SA3FeingDQ23ws/BWWH 9wSqMlFunQGFxql0TCSgFReWYZ20pTU= -----END CERTIFICATE-----Generated at Wed Aug 6 04:12:38 2025 by rpki-client