$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e25daedd-e177-3828-acc1-56a58c64c6c0.roa File: e25daedd-e177-3828-acc1-56a58c64c6c0.roa (raw, json) Hash identifier: AD7cZManQ8uw2MLWmqXPXvyXLIoBDuJ21Wd3mWgQj94= Subject key identifier: 3E:1F:2A:70:9F:E3:D7:50:41:DA:F1:C6:81:22:B7:A0:AE:77:A2:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB62A7E6D69729B87D8680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e25daedd-e177-3828-acc1-56a58c64c6c0.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.17.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:62:a7:e6:d6:97:29:b8:7d:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=021c8c0c-933b-4b8f-ab06-9e6847199c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b8:00:ce:fa:76:94:b6:83:33:f1:bd:bd:4a: 01:40:50:b9:07:36:4a:05:36:36:08:c8:e1:0b:fc: 4d:b6:b9:96:57:ff:29:33:68:b6:2d:a6:b7:bf:71: 63:74:6f:fe:e8:56:53:40:b1:fd:f1:e9:55:a1:8e: 2c:38:c4:f4:71:bb:21:48:d2:00:51:cf:1b:2e:42: a9:d3:98:0a:13:36:1d:67:e4:bb:6e:4b:cd:a5:a9: 79:b2:cf:51:dc:60:f7:83:3b:d4:70:7f:86:62:81: 41:57:1a:d5:34:d2:f1:2b:a4:98:9b:49:ec:30:6e: 65:d7:e6:d4:c5:b5:56:9a:03:a9:a1:a8:74:25:38: 54:6e:33:70:f4:42:8c:99:51:1c:ac:76:de:eb:ff: 41:24:71:57:1e:3f:b9:30:23:d1:17:c9:2b:e1:80: 44:38:01:7f:ae:fc:58:32:b1:f9:92:ed:96:b4:0e: 12:6c:bf:b4:2c:57:6b:bc:1c:dc:2a:d8:61:46:53: 37:b0:3a:92:21:3d:d9:f0:35:7e:65:28:30:5e:61: f8:de:4f:63:94:18:1a:37:70:49:68:af:f5:f9:65: 1d:4c:46:04:fd:9d:46:bb:d4:46:c9:c7:78:1f:b5: 06:09:e0:9f:a9:e7:9a:87:e6:c0:ec:2e:d0:b7:eb: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1F:2A:70:9F:E3:D7:50:41:DA:F1:C6:81:22:B7:A0:AE:77:A2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e25daedd-e177-3828-acc1-56a58c64c6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:0e:ae:24:b5:10:39:09:35:f0:84:fd:c1:d4:65:56:7b:6c: e9:6a:ae:3c:95:cf:b3:5a:33:39:e7:2a:2f:5f:03:b0:9c:e1: 46:43:5e:c2:b5:d0:22:6e:c8:d0:c2:3b:0a:b6:e2:7e:f4:5c: fe:91:a7:6f:c8:8d:41:f5:e1:0d:21:b1:d4:c6:69:2b:1d:d7: 0d:39:8b:cd:b6:f2:7b:df:a8:41:c7:12:d9:63:1b:82:05:b7: 30:89:e5:9d:94:72:e6:a8:92:05:2a:fc:2f:d7:9f:2d:3a:5f: 52:c5:ec:16:8c:da:d6:5f:c5:e7:61:ac:a8:30:ab:49:a1:43: d0:18:1c:5c:70:80:4f:6c:cf:09:cf:d7:38:08:15:5f:e8:c1: c4:6d:24:28:88:cc:08:1f:53:10:0d:cf:7c:8b:f5:6b:72:73: 00:e5:e0:98:83:d5:60:43:3e:c9:00:73:7c:10:71:e3:db:18: 83:9b:d8:c6:46:53:1d:2b:f9:28:df:c0:a9:aa:88:0c:44:c6: 5c:ef:f1:64:8e:74:ee:f1:92:87:f4:3e:5f:0c:bd:c8:d2:4f: 86:aa:f1:06:d3:b9:79:64:9d:1c:4f:47:98:bb:98:ca:8d:75: 92:3c:15:f0:8d:eb:8f:a6:7b:db:12:ba:67:63:0a:82:d4:36: 33:eb:85:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG22Kn5taXKbh9hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MDIxYzhjMGMtOTMzYi00YjhmLWFiMDYtOWU2ODQ3MTk5YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbgAzvp2lLaDM/G9vUoBQFC5BzZKBTY2CMjh C/xNtrmWV/8pM2i2Laa3v3FjdG/+6FZTQLH98elVoY4sOMT0cbshSNIAUc8bLkKp 05gKEzYdZ+S7bkvNpal5ss9R3GD3gzvUcH+GYoFBVxrVNNLxK6SYm0nsMG5l1+bU xbVWmgOpoah0JThUbjNw9EKMmVEcrHbe6/9BJHFXHj+5MCPRF8kr4YBEOAF/rvxY MrH5ku2WtA4SbL+0LFdrvBzcKthhRlM3sDqSIT3Z8DV+ZSgwXmH43k9jlBgaN3BJ aK/1+WUdTEYE/Z1Gu9RGycd4H7UGCeCfqeeah+bA7C7Qt+uEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4fKnCf49dQQdrxxoEit6Cud6IRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTI1ZGFlZGQtZTE3Ny0z ODI4LWFjYzEtNTZhNThjNjRjNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQOriS1EDkJNfCE/cHUZVZ7bOlqrjyVz7NaMznnKi9fA7Cc4UZDXsK1 0CJuyNDCOwq24n70XP6Rp2/IjUH14Q0hsdTGaSsd1w05i8228nvfqEHHEtljG4IF tzCJ5Z2UcuaokgUq/C/Xny06X1LF7BaM2tZfxedhrKgwq0mhQ9AYHFxwgE9szwnP 1zgIFV/owcRtJCiIzAgfUxANz3yL9WtycwDl4JiD1WBDPskAc3wQcePbGIOb2MZG Ux0r+SjfwKmqiAxExlzv8WSOdO7xkof0Pl8MvcjST4aq8QbTuXlknRxPR5i7mMqN dZI8FfCN64+me9sSumdjCoLUNjPrhQM= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:50 2025 by rpki-client