$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa File: fc7f0507-7a62-3182-beda-806aa55f9f20.roa (raw, json) Hash identifier: pQRJoa26BXZvMrijRahWLe51lCuz/5U69evjRwnncNM= Subject key identifier: 3B:BB:CE:F3:1A:9B:4E:F2:E6:31:3C:04:C9:61:9F:21:81:DB:15:14 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81465FD2E939BD14519DD380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.17.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:5f:d2:e9:39:bd:14:51:9d:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=5bfb47d9-0b27-41e2-84e6-07015a1d2902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:b4:61:ff:b6:92:9c:18:80:a3:f1:c7:bb: 49:ae:95:58:1e:a7:ef:7d:e6:c7:31:3a:e5:38:a8: 98:fc:90:3a:8a:df:f0:39:2d:c9:be:16:7a:d6:22: 62:b0:b0:86:2c:15:0d:dc:4c:09:ff:67:8a:22:7b: f6:cd:eb:03:8e:65:91:c0:9a:23:6b:12:f1:36:bf: 2f:b0:72:4a:8f:92:c2:6a:71:b5:cf:9c:63:e9:38: e5:91:e4:99:d9:7b:26:19:ee:d8:7c:27:18:92:52: 7a:fc:12:bb:98:d4:77:c6:f5:5d:86:53:54:40:1e: 70:d3:df:8e:52:7f:41:f8:3b:5e:69:83:5c:02:fa: e0:17:cd:14:5b:3d:97:a1:72:ed:73:c8:fc:88:c2: c3:f2:f6:ab:cd:b9:59:d1:16:3a:27:1b:e5:65:1d: db:b3:b4:dc:00:b3:78:c9:1c:9e:a9:39:dc:54:84: 61:b3:5a:c1:f8:cb:f9:be:14:36:04:69:84:63:31: 84:59:e9:93:e6:98:4b:2b:48:d3:15:97:b5:d6:3c: 66:27:94:79:e7:bd:1e:32:62:0c:88:bd:ec:74:19: 4b:c1:e2:22:9e:14:98:f5:1b:4b:91:15:8e:1f:62: 89:44:93:56:64:1d:e2:b0:9d:fb:63:3b:22:4a:84: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BB:CE:F3:1A:9B:4E:F2:E6:31:3C:04:C9:61:9F:21:81:DB:15:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:67:ef:36:98:29:9d:fa:1a:a2:06:02:fd:24:07:45:bf:cf: a3:25:52:57:50:a9:67:81:57:4c:0f:26:da:62:3d:c9:ff:43: 80:00:f2:df:05:f4:d1:21:39:ef:da:5e:e8:86:36:5a:fa:6b: 98:33:d8:b2:a4:24:40:19:8f:d1:59:70:c9:e2:2b:62:9a:5d: 3a:18:15:4d:c3:86:2b:48:15:4d:e7:e0:e8:28:fe:7b:73:f3: 73:a8:b6:2a:64:f7:20:55:35:56:8b:7b:45:45:84:bb:83:e6: 30:07:76:00:56:91:cf:84:0e:2b:71:bc:c6:a6:a8:15:22:8b: 53:ed:f1:07:d4:df:7b:83:b4:ec:4f:57:81:2d:f0:60:8a:67: d9:cc:d1:d8:fb:bb:59:c8:c4:40:3b:c5:98:0b:84:b7:99:4a: 6b:3e:7e:f9:f5:38:5c:b7:11:7d:55:ab:27:25:27:94:4e:87: c2:cf:5d:22:c3:2c:91:0d:ce:f2:8b:83:48:17:78:6a:db:42: 1f:a3:bd:8c:96:2e:ca:ca:c9:e0:61:dc:a7:4f:91:44:6b:9c: 6a:2f:19:2a:a6:59:df:92:eb:a8:d9:1f:eb:76:17:ad:bc:6f: 6a:ca:95:01:82:38:e2:83:8b:ac:85:42:b6:5a:3e:5d:58:3a: 00:ac:e6:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRl/S6Tm9FFGd04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NWJmYjQ3ZDktMGIyNy00MWUyLTg0ZTYtMDcwMTVhMWQyOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBi0Yf+2kpwYgKPxx7tJrpVYHqfvfebHMTrl OKiY/JA6it/wOS3JvhZ61iJisLCGLBUN3EwJ/2eKInv2zesDjmWRwJojaxLxNr8v sHJKj5LCanG1z5xj6TjlkeSZ2XsmGe7YfCcYklJ6/BK7mNR3xvVdhlNUQB5w09+O Un9B+DteaYNcAvrgF80UWz2XoXLtc8j8iMLD8varzblZ0RY6JxvlZR3bs7TcALN4 yRyeqTncVIRhs1rB+Mv5vhQ2BGmEYzGEWemT5phLK0jTFZe11jxmJ5R5570eMmIM iL3sdBlLweIinhSY9RtLkRWOH2KJRJNWZB3isJ37YzsiSoTl1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu7zvMam07y5jE8BMlhnyGB2xUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmM3ZjA1MDctN2E2Mi0z MTgyLWJlZGEtODA2YWE1NWY5ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdn7zaYKZ36GqIGAv0kB0W/z6MlUldQqWeBV0wPJtpiPcn/Q4AA8t8F 9NEhOe/aXuiGNlr6a5gz2LKkJEAZj9FZcMniK2KaXToYFU3DhitIFU3n4Ogo/ntz 83Ootipk9yBVNVaLe0VFhLuD5jAHdgBWkc+EDitxvMamqBUii1Pt8QfU33uDtOxP V4Et8GCKZ9nM0dj7u1nIxEA7xZgLhLeZSms+fvn1OFy3EX1VqyclJ5ROh8LPXSLD LJENzvKLg0gXeGrbQh+jvYyWLsrKyeBh3KdPkURrnGovGSqmWd+S66jZH+t2F628 b2rKlQGCOOKDi6yFQrZaPl1YOgCs5vE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:21 2025 by rpki-client