$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c6f424ab-3344-390b-b696-1f591e55b29f.roa File: c6f424ab-3344-390b-b696-1f591e55b29f.roa (raw, json) Hash identifier: agNYpW6kMxYk1MdA9s1rSkW2eHKfYYHYgWOtiic5t68= Subject key identifier: E6:F4:32:F3:1C:D2:61:68:D1:A3:1F:94:9D:5C:82:E7:09:58:34:8D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AE461480304C55966C9347080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c6f424ab-3344-390b-b696-1f591e55b29f.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 19905 IP address blocks: 173.17.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:48:03:04:c5:59:66:c9:34:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=1e0ad70b-5240-4b5a-8d06-099cd902bb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:3b:cd:4b:4b:c0:d2:f5:c0:e4:ef:e3:a2: c3:43:71:0a:28:c0:05:21:3f:54:77:10:0a:1f:df: 5b:5a:7b:ec:2c:69:1f:e3:80:ec:da:2f:d8:94:f4: 25:6d:78:7c:b8:4b:07:9d:57:16:b7:71:50:c6:da: 22:84:15:75:17:2a:75:df:d2:95:9d:bf:dd:8e:8e: 4b:7d:9f:15:6a:43:3c:86:f5:eb:ff:38:9a:54:64: 3a:73:75:a3:e0:79:c0:9c:54:5c:bc:74:4f:3f:fa: 0a:ec:0f:ab:46:6d:80:f7:42:b5:a3:70:04:aa:f2: 75:92:3b:b9:e6:d3:eb:18:2c:fe:e5:76:ca:e1:44: 46:8a:6a:3b:7b:56:d4:98:ab:4c:6b:23:7a:6d:39: 94:4e:e0:bd:30:69:a2:ca:b3:92:e0:b6:96:fa:58: 95:94:44:62:22:05:24:5d:34:f9:7a:ea:0f:11:7f: a7:77:18:73:1b:fa:62:91:f4:ec:cb:22:2f:31:2d: 5b:e9:41:09:79:70:37:62:a9:d3:ff:7c:89:7f:d4: 28:b9:26:e6:03:f0:4d:fd:4f:91:ef:28:3f:f1:25: 25:6f:37:f6:95:a7:98:5d:05:83:5c:cb:43:31:70: b2:4b:b2:53:d8:8f:0d:7e:f4:04:23:05:64:c1:96: f1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F4:32:F3:1C:D2:61:68:D1:A3:1F:94:9D:5C:82:E7:09:58:34:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c6f424ab-3344-390b-b696-1f591e55b29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:40:7d:73:40:1c:22:a6:ac:69:5a:40:a0:3e:c7:2d:a4:5b: e8:f9:74:7d:b1:a5:4d:e5:4b:8e:02:25:f0:19:d9:d1:09:46: c4:db:13:a2:ac:88:a3:f7:ab:db:05:b0:be:20:16:45:a9:aa: 97:84:a0:56:b3:81:60:68:2c:dd:1d:21:0e:ae:74:f5:b3:3b: ce:61:eb:a8:8d:08:41:50:20:12:1d:23:6d:ba:bf:b8:de:d0: 78:c0:c7:2c:73:4c:9b:05:95:fb:18:a4:68:d8:05:c4:02:0f: 60:f9:0f:4d:2c:c1:06:b2:76:42:81:78:b7:bd:29:c5:a3:82: 60:36:86:17:65:b1:68:0e:92:ce:37:5b:f3:55:1c:e3:aa:08: 72:02:ac:46:75:fe:1b:73:cd:b4:9a:a2:12:10:40:81:ba:ab: f0:33:ec:f3:32:ad:18:fe:14:f9:63:b9:77:8a:b4:88:ae:18: 15:18:ca:30:2b:6a:e5:2f:83:ad:4b:42:09:ee:f4:fc:cf:8e: b7:91:21:c2:ba:d3:41:7e:10:07:c6:68:48:fe:83:d7:bc:54: 57:3a:23:20:36:d7:5e:ba:40:cb:b2:fb:7d:19:f0:a3:0f:5b: 83:99:13:65:ca:47:50:ce:02:52:99:3b:58:d0:09:ac:06:e7: 00:dd:15:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUgDBMVZZsk0cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MWUwYWQ3MGItNTI0MC00YjVhLThkMDYtMDk5Y2Q5MDJiYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIo7zUtLwNL1wOTv46LDQ3EKKMAFIT9UdxAK H99bWnvsLGkf44Ds2i/YlPQlbXh8uEsHnVcWt3FQxtoihBV1Fyp139KVnb/djo5L fZ8VakM8hvXr/ziaVGQ6c3Wj4HnAnFRcvHRPP/oK7A+rRm2A90K1o3AEqvJ1kju5 5tPrGCz+5XbK4URGimo7e1bUmKtMayN6bTmUTuC9MGmiyrOS4LaW+liVlERiIgUk XTT5euoPEX+ndxhzG/pikfTsyyIvMS1b6UEJeXA3YqnT/3yJf9QouSbmA/BN/U+R 7yg/8SUlbzf2laeYXQWDXMtDMXCyS7JT2I8NfvQEIwVkwZbxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb0MvMc0mFo0aMflJ1cgucJWDSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzZmNDI0YWItMzM0NC0z OTBiLWI2OTYtMWY1OTFlNTViMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBAfXNAHCKmrGlaQKA+xy2kW+j5dH2xpU3lS44CJfAZ2dEJRsTbE6Ks iKP3q9sFsL4gFkWpqpeEoFazgWBoLN0dIQ6udPWzO85h66iNCEFQIBIdI226v7je 0HjAxyxzTJsFlfsYpGjYBcQCD2D5D00swQaydkKBeLe9KcWjgmA2hhdlsWgOks43 W/NVHOOqCHICrEZ1/htzzbSaohIQQIG6q/Az7PMyrRj+FPljuXeKtIiuGBUYyjAr auUvg61LQgnu9PzPjreRIcK600F+EAfGaEj+g9e8VFc6IyA21166QMuy+30Z8KMP W4OZE2XKR1DOAlKZO1jQCawG5wDdFQ0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:07 2025 by rpki-client