$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19b84c53-23f8-3950-93ac-b83b895f4e71.roa File: 19b84c53-23f8-3950-93ac-b83b895f4e71.roa (raw, json) Hash identifier: 9bQnFV3qiQeacvPKzrSEqmriHQASf7GDCG9lMMb5W0M= Subject key identifier: 02:8C:9D:22:38:39:48:B2:01:2A:0E:EE:E6:77:AD:28:07:71:28:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412489C920AB10561F5A700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19b84c53-23f8-3950-93ac-b83b895f4e71.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.24.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:48:9c:92:0a:b1:05:61:f5:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=225e5692-ea27-45ae-94a8-977a8a911bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:98:8a:32:30:1c:2b:af:c9:b5:07:19:cc: 9e:17:10:9b:5b:d9:be:c1:24:a8:57:8e:84:a2:45: 63:b6:b8:b7:a7:06:88:e6:d1:3c:b7:a4:1c:00:18: ca:c8:30:83:0f:e1:af:e8:03:40:20:84:36:fe:84: 58:fb:1f:30:a6:10:95:98:f2:14:2b:8c:82:fc:6b: 2a:74:27:74:74:9e:3f:7a:7a:bf:9c:30:ef:a4:7b: 4f:e7:44:d5:41:2a:3c:a8:c7:fb:9e:ae:bf:bf:81: 34:0b:c6:80:78:d8:b0:bd:0d:82:77:bc:18:3b:7e: 19:72:d4:5b:63:94:74:21:d5:60:50:e8:a5:a3:72: 55:d5:15:9f:7c:ad:2d:18:c5:5e:cc:77:9b:ba:98: 36:58:f7:78:9b:1e:39:e5:b7:6d:47:50:50:a8:70: 9b:6a:24:fc:64:c0:76:c9:a6:0a:31:70:d4:5d:38: 7c:e9:fb:35:b9:a1:4e:6b:22:c7:a8:78:b7:54:03: 09:fa:5d:db:cf:1f:f8:c1:25:27:54:72:0a:f6:1b: 25:75:18:ae:24:9d:5c:83:d8:51:05:0c:16:97:34: c0:ca:64:74:03:00:ec:df:d8:59:14:5e:4e:7c:e6: 2c:2c:48:4c:93:f5:1a:48:be:68:fc:75:6a:81:d5: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8C:9D:22:38:39:48:B2:01:2A:0E:EE:E6:77:AD:28:07:71:28:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19b84c53-23f8-3950-93ac-b83b895f4e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b8:57:5e:be:1f:ba:9d:13:33:e1:f0:40:66:99:e8:45:8a: 22:7c:2e:71:ee:3f:d8:73:cb:f5:e8:38:de:c8:80:c5:e2:69: 34:58:55:82:79:7f:09:ce:49:6b:0f:d1:b8:d0:e5:57:0b:26: fe:53:6f:08:2b:6e:6e:d5:b8:d9:83:e8:7d:22:f4:85:47:a0: 27:a5:48:59:f3:33:45:17:67:c7:df:3f:ae:9f:07:f4:61:cf: 88:58:7c:c1:f0:99:7c:b4:e9:3e:02:73:b3:1e:64:30:21:12: 90:cb:95:5d:86:bb:99:54:48:1f:25:ea:31:bc:af:a0:2c:17: 77:09:29:44:71:23:d1:fe:cd:66:1b:46:ef:7e:95:28:2b:4d: 17:4d:c5:e1:a4:3b:11:2f:48:e9:19:e1:84:6a:cd:c1:24:ab: 9b:0a:7e:b2:50:77:2f:56:83:d3:52:2c:8e:6b:dc:35:21:4b: 0c:ca:2d:43:ef:49:6e:e9:b7:53:47:06:6d:c7:52:86:9c:73: 58:26:74:ae:25:95:25:b5:11:19:ae:0c:d6:f1:f8:99:81:10: 02:b9:97:ba:81:61:ab:74:f5:95:da:06:e4:8e:ae:bb:16:ad: da:47:0c:5a:69:fa:c7:68:58:df:83:16:88:3e:a2:b1:e0:3b: 26:94:cf:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkickgqxBWH1pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjI1ZTU2OTItZWEyNy00NWFlLTk0YTgtOTc3YThhOTExYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLiYijIwHCuvybUHGcyeFxCbW9m+wSSoV46E okVjtri3pwaI5tE8t6QcABjKyDCDD+Gv6ANAIIQ2/oRY+x8wphCVmPIUK4yC/Gsq dCd0dJ4/enq/nDDvpHtP50TVQSo8qMf7nq6/v4E0C8aAeNiwvQ2Cd7wYO34ZctRb Y5R0IdVgUOilo3JV1RWffK0tGMVezHebupg2WPd4mx455bdtR1BQqHCbaiT8ZMB2 yaYKMXDUXTh86fs1uaFOayLHqHi3VAMJ+l3bzx/4wSUnVHIK9hsldRiuJJ1cg9hR BQwWlzTAymR0AwDs39hZFF5OfOYsLEhMk/UaSL5o/HVqgdWLDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKMnSI4OUiyASoO7uZ3rSgHcSihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTliODRjNTMtMjNmOC0z OTUwLTkzYWMtYjgzYjg5NWY0ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe4V16+H7qdEzPh8EBmmehFiiJ8LnHuP9hzy/XoON7IgMXiaTRYVYJ5 fwnOSWsP0bjQ5VcLJv5Tbwgrbm7VuNmD6H0i9IVHoCelSFnzM0UXZ8ffP66fB/Rh z4hYfMHwmXy06T4Cc7MeZDAhEpDLlV2Gu5lUSB8l6jG8r6AsF3cJKURxI9H+zWYb Ru9+lSgrTRdNxeGkOxEvSOkZ4YRqzcEkq5sKfrJQdy9Wg9NSLI5r3DUhSwzKLUPv SW7pt1NHBm3HUoacc1gmdK4llSW1ERmuDNbx+JmBEAK5l7qBYat09ZXaBuSOrrsW rdpHDFpp+sdoWN+DFog+orHgOyaUz0k= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:59 2025 by rpki-client