$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa File: 157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa (raw, json) Hash identifier: 5j1Vg194WS+1E9PcQY3EJfnWUv49xzHGa0x0qqXwMZQ= Subject key identifier: 5C:A1:9C:E8:F7:40:B8:5D:F1:EE:44:9F:70:DE:F5:52:1C:F1:C9:5B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB6E9470EA5DB4DCAD5690 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:6e:94:70:ea:5d:b4:dc:ad:56:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1b5b128b-218e-484d-bacd-23a3ebbca8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:93:da:27:77:96:78:1c:99:46:2d:ea:20: b9:3e:fc:4b:89:39:b3:d1:49:f0:1f:0d:ff:ac:c8: 23:b0:9b:72:68:07:e6:6c:2d:9e:5c:99:9e:74:1f: 17:98:52:f1:b7:62:63:ec:b4:16:51:63:3f:bd:de: 0c:1b:4b:44:e9:fe:32:77:7a:a2:ec:a7:08:60:c8: 22:f2:04:6b:ff:98:75:be:8d:37:79:fd:94:6a:58: 5d:75:6b:45:40:1f:24:eb:3a:7b:e0:bf:4d:90:0f: 00:66:56:5a:50:bb:db:7e:04:a7:8f:f0:3f:6f:1b: 61:60:09:48:95:bd:33:10:33:7c:c3:1b:a0:4e:a4: a1:7b:e7:a3:77:6e:96:36:90:23:c0:e0:c8:f2:9e: 51:41:c9:00:c5:11:a1:b1:62:4d:01:d1:00:97:2a: 79:7c:bd:d2:21:43:14:5c:8d:05:31:37:8a:c7:be: eb:19:fb:3d:a2:e1:28:e9:d2:2e:c4:e0:22:92:6a: 74:bb:9e:97:a3:96:d5:c5:3e:cb:38:86:2e:d7:49: 29:55:b1:c2:18:aa:b2:57:36:6f:4c:29:1e:98:2f: ef:26:32:1c:36:af:54:8a:d2:2e:d6:ee:9c:00:29: 12:29:2c:c8:f9:67:7f:90:ed:a2:34:46:7d:e7:f2: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A1:9C:E8:F7:40:B8:5D:F1:EE:44:9F:70:DE:F5:52:1C:F1:C9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:04:b6:30:2a:40:ac:8f:19:56:be:2d:85:3d:11:5d:a9:26: 81:1a:d8:f0:3b:46:0c:85:a0:f1:36:b8:81:95:35:f8:44:1e: a5:bf:ef:b8:24:25:a4:0c:71:0d:25:b7:7a:54:c4:0c:ee:9d: 3a:3e:9b:f4:fa:36:36:c4:97:bb:38:6f:b6:e3:f4:7c:17:61: 2d:7d:2a:0c:70:d5:99:39:f7:08:ef:b8:3e:48:20:06:a4:45: b9:b7:68:9a:82:c7:3d:9f:19:8b:98:10:70:fe:86:4b:03:a4: 97:4c:2c:3d:bd:6c:d1:44:22:2d:12:b5:37:0f:3b:04:f6:c8: ae:71:8a:5e:28:5f:47:7b:21:49:f6:d8:28:fd:c1:99:0c:4f: 6b:5e:a8:ee:a8:15:9b:39:33:77:6d:fd:51:de:dc:d7:f0:1d: 13:74:7a:e5:4a:31:a7:5d:06:4a:20:e2:1c:66:91:5d:30:02: b6:b7:4f:38:b5:f0:1f:68:33:97:09:24:6f:f4:43:df:f4:d3: df:15:71:94:61:f5:7c:5b:b2:6d:6f:79:8e:c9:58:03:de:a1: 65:6b:6d:5f:2d:28:51:37:82:0a:ee:d0:4d:6b:3a:ba:df:91: 28:bf:9f:cd:48:65:82:94:c6:ff:da:9f:16:28:6f:30:0d:90: ce:1d:48:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG226UcOpdtNytVpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWI1YjEyOGItMjE4ZS00ODRkLWJhY2QtMjNhM2ViYmNhOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXuT2id3lngcmUYt6iC5PvxLiTmz0UnwHw3/ rMgjsJtyaAfmbC2eXJmedB8XmFLxt2Jj7LQWUWM/vd4MG0tE6f4yd3qi7KcIYMgi 8gRr/5h1vo03ef2UalhddWtFQB8k6zp74L9NkA8AZlZaULvbfgSnj/A/bxthYAlI lb0zEDN8wxugTqShe+ejd26WNpAjwODI8p5RQckAxRGhsWJNAdEAlyp5fL3SIUMU XI0FMTeKx77rGfs9ouEo6dIuxOAikmp0u56Xo5bVxT7LOIYu10kpVbHCGKqyVzZv TCkemC/vJjIcNq9UitIu1u6cACkSKSzI+Wd/kO2iNEZ95/IXOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyhnOj3QLhd8e5En3De9VIc8clbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTU3ZjhjNTQtYTZkYS0z YjBmLTlkOTAtOGFlNDcyYzhkMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8EtjAqQKyPGVa+LYU9EV2pJoEa2PA7RgyFoPE2uIGVNfhEHqW/77gk JaQMcQ0lt3pUxAzunTo+m/T6NjbEl7s4b7bj9HwXYS19Kgxw1Zk59wjvuD5IIAak Rbm3aJqCxz2fGYuYEHD+hksDpJdMLD29bNFEIi0StTcPOwT2yK5xil4oX0d7IUn2 2Cj9wZkMT2teqO6oFZs5M3dt/VHe3NfwHRN0euVKMaddBkog4hxmkV0wAra3Tzi1 8B9oM5cJJG/0Q9/0098VcZRh9Xxbsm1veY7JWAPeoWVrbV8tKFE3ggru0E1rOrrf kSi/n81IZYKUxv/anxYobzANkM4dSLw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:16 2025 by rpki-client