$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c63d9f7-d883-3935-a8d9-c3a01efb4066.roa File: 0c63d9f7-d883-3935-a8d9-c3a01efb4066.roa (raw, json) Hash identifier: k0vENeEkiK3wdEhmLL9BMzwq5KaDrNWGntOkpvkde3M= Subject key identifier: DB:7A:6A:64:28:05:FA:AE:31:56:39:CF:C6:4E:11:BF:08:3C:60:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410EFB77EF2B8B742CA2E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c63d9f7-d883-3935-a8d9-c3a01efb4066.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.19.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:ef:b7:7e:f2:b8:b7:42:ca:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ea0b7f30-6c42-4e8f-93c0-c1e23a97811c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:24:2d:39:fa:ea:3a:75:14:4f:33:b7:55: 2d:f1:f9:01:47:a4:ab:92:3b:b2:a2:40:36:4f:33: 9d:3e:94:a7:b2:11:6e:f5:9d:76:74:0c:bd:ba:7d: a6:e7:a5:75:d1:52:ff:17:73:c2:bb:9f:51:19:fb: 55:02:3b:c6:fa:a5:19:54:c2:ef:2e:72:f3:ac:dc: d0:5c:4e:91:4c:8d:18:0e:b3:b2:a2:1a:a2:21:f1: 54:07:89:e8:be:67:2f:cb:5e:91:41:1b:ca:0f:75: 0a:3b:e2:05:55:cd:9a:6b:74:e5:e8:7d:f6:3b:90: c9:85:a7:5b:7f:d0:10:d4:2e:6f:e7:a7:b3:61:92: 82:42:b1:8b:d4:fa:04:60:61:dc:a7:36:49:de:eb: 5b:52:b5:47:8a:18:52:7a:fc:51:81:54:1c:fa:7a: ad:26:86:64:23:d9:9e:90:f2:b4:33:da:9e:8c:e9: 9f:43:fa:fe:80:98:c0:ba:f7:e7:40:62:0f:b1:09: 14:49:17:c2:85:44:d5:ac:10:c7:6b:b1:eb:40:f4: a6:8b:0f:07:d3:e9:29:4a:8e:89:7d:67:73:df:57: a1:e4:37:45:f3:d9:0c:24:51:2e:a9:b1:fa:da:9b: 2c:3b:7c:0c:9a:c2:4c:3c:5f:96:d1:68:30:22:fe: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7A:6A:64:28:05:FA:AE:31:56:39:CF:C6:4E:11:BF:08:3C:60:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c63d9f7-d883-3935-a8d9-c3a01efb4066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:86:ad:92:21:d0:61:00:6d:ae:97:f5:6b:5b:30:b1:b5:fc: b1:b2:70:47:86:24:70:10:c2:10:cf:32:11:03:72:e6:5e:a9: 3c:72:ef:55:cf:61:0d:a9:a4:f6:b0:d4:d0:48:f5:e1:00:ce: fb:47:dc:14:84:eb:12:0a:79:14:c3:81:e3:a7:c4:d4:3b:1b: 87:38:c2:78:ce:48:40:ee:e2:34:94:7f:5f:1b:21:b7:99:57: bc:b2:2e:cb:71:42:47:19:dd:b5:4d:66:6b:11:b1:11:9c:f4: 6c:2d:6b:61:5f:ca:65:8e:6d:f8:78:6b:6c:c5:11:7a:95:3b: 17:76:8c:14:eb:d6:16:52:f7:c4:1c:19:48:0f:dd:dd:d0:f6: 0a:6d:e0:cb:cd:73:17:e2:15:c4:03:82:05:07:6e:77:92:43: 1f:80:07:35:6a:e6:59:4b:e4:ab:2a:57:58:23:7c:c2:00:01: ed:6d:96:5d:6f:6f:37:3f:d1:d2:40:f9:32:23:e8:d2:26:fa: 56:21:e2:8a:8b:fb:06:3d:be:16:d4:ca:c1:72:b5:73:13:af: f6:fb:d9:8b:6c:ad:14:97:35:14:b7:bc:10:d6:5a:5b:1a:f7: fc:bd:e6:f5:23:43:73:26:32:74:ae:1b:6b:0f:fa:7d:18:39: 70:3e:ff:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEO+3fvK4t0LKLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWEwYjdmMzAtNmM0Mi00ZThmLTkzYzAtYzFlMjNhOTc4MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm4kLTn66jp1FE8zt1Ut8fkBR6SrkjuyokA2 TzOdPpSnshFu9Z12dAy9un2m56V10VL/F3PCu59RGftVAjvG+qUZVMLvLnLzrNzQ XE6RTI0YDrOyohqiIfFUB4novmcvy16RQRvKD3UKO+IFVc2aa3Tl6H32O5DJhadb f9AQ1C5v56ezYZKCQrGL1PoEYGHcpzZJ3utbUrVHihhSevxRgVQc+nqtJoZkI9me kPK0M9qejOmfQ/r+gJjAuvfnQGIPsQkUSRfChUTVrBDHa7HrQPSmiw8H0+kpSo6J fWdz31eh5DdF89kMJFEuqbH62pssO3wMmsJMPF+W0WgwIv4Y9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNt6amQoBfquMVY5z8ZOEb8IPGDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGM2M2Q5ZjctZDg4My0z OTM1LWE4ZDktYzNhMDFlZmI0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGGrZIh0GEAba6X9WtbMLG1/LGycEeGJHAQwhDPMhEDcuZeqTxy71XP YQ2ppPaw1NBI9eEAzvtH3BSE6xIKeRTDgeOnxNQ7G4c4wnjOSEDu4jSUf18bIbeZ V7yyLstxQkcZ3bVNZmsRsRGc9Gwta2FfymWObfh4a2zFEXqVOxd2jBTr1hZS98Qc GUgP3d3Q9gpt4MvNcxfiFcQDggUHbneSQx+ABzVq5llL5KsqV1gjfMIAAe1tll1v bzc/0dJA+TIj6NIm+lYh4oqL+wY9vhbUysFytXMTr/b72YtsrRSXNRS3vBDWWlsa 9/y95vUjQ3MmMnSuG2sP+n0YOXA+/zE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:29 2025 by rpki-client