$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b1332e1-0429-3b7f-8503-0ce8d29f808e.roa File: 1b1332e1-0429-3b7f-8503-0ce8d29f808e.roa (raw, json) Hash identifier: VbPVUPB58LE15qCMC9mSz07u8sY7FOD6l3ra3HRNzvw= Subject key identifier: 1B:7E:97:F0:D4:92:A7:94:CD:B9:D4:F8:36:04:DF:43:CD:28:B4:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124F8E219F612EFF111A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b1332e1-0429-3b7f-8503-0ce8d29f808e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.16.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4f:8e:21:9f:61:2e:ff:11:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=dfa8424c-e966-4485-9be1-a29f93b64a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:3d:82:7a:f7:96:a5:ef:54:81:e8:9c:79: e9:b4:e5:52:d4:79:04:c0:38:85:eb:06:5a:d1:af: 06:3a:e6:67:ca:9a:75:26:80:40:60:e0:00:a6:9f: 88:d3:9a:37:b5:d5:58:3c:c1:11:59:08:27:6c:7e: 6c:8a:e2:62:10:73:fd:de:ea:42:21:42:97:b4:71: 9e:df:98:09:96:a0:84:50:6b:f5:c3:e7:39:1c:44: cb:5f:82:1e:71:9e:17:42:32:4a:26:e4:cc:44:70: 10:68:a0:ed:d4:dd:3d:77:9a:8f:38:68:90:ed:73: 75:56:37:5f:45:c8:b7:5a:a4:a4:97:b7:e7:44:45: e9:47:1b:10:04:93:39:6b:62:cf:3d:fb:aa:06:bf: 62:61:7f:a7:0f:a9:37:3e:79:92:29:14:dc:91:db: 9b:46:b3:52:5a:c9:42:65:d3:06:e4:e2:48:d4:3a: 94:e0:0b:4e:d9:9a:57:9a:e1:6b:8c:ab:c0:05:7a: 18:d0:71:88:db:6b:c7:d8:bb:e5:cd:7f:dd:5e:e8: 50:e6:9d:5a:20:53:4d:57:6e:89:2d:d6:c2:a8:c0: 4f:0c:aa:9c:6f:6a:3f:8a:40:ce:67:8b:29:18:4f: 3e:b7:97:92:4b:03:16:d1:a3:66:a3:31:47:8b:a4: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7E:97:F0:D4:92:A7:94:CD:B9:D4:F8:36:04:DF:43:CD:28:B4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b1332e1-0429-3b7f-8503-0ce8d29f808e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f1:55:57:2f:26:6b:b3:38:55:2c:7c:2c:52:cc:67:f7:cc: 2a:bb:1c:e5:10:6d:ec:f3:63:83:18:b5:82:06:f5:4b:97:dc: 73:c6:ed:13:ba:ff:22:53:75:0d:ed:99:f7:9c:73:4f:47:4c: 7c:13:74:65:91:66:d5:4d:b8:64:e6:61:3e:a6:ae:2c:52:a7: 95:cb:e7:bf:61:92:b7:a8:ab:c5:c5:e2:5a:1d:00:0b:df:17: 1d:57:65:d0:b6:47:3a:fd:38:db:60:49:b3:47:67:7f:11:d3: 8e:86:3d:9e:0e:0e:24:41:05:84:b3:eb:a7:ea:9c:ee:e7:14: 2f:18:b9:00:08:75:74:f3:c3:8d:3e:11:7c:30:b7:1d:98:09: c1:61:82:4e:db:8b:d9:ae:89:95:25:3e:40:1a:b4:01:7c:00: f7:50:aa:35:40:90:2f:6d:30:dc:84:a8:3d:22:97:cc:8f:23: 79:1f:6e:d3:a3:df:23:60:18:21:32:6e:d8:92:3b:8a:2b:51: ba:41:b9:ae:ba:8d:ee:86:84:97:87:cf:41:6f:6d:3b:ca:89: bf:0b:e7:1b:77:88:fa:81:7b:77:9e:ee:10:81:3b:95:0c:1e: ac:56:7a:b1:4f:d0:be:b4:97:9f:ea:32:41:2d:27:66:6c:0f: 0e:82:02:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEk+OIZ9hLv8RGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGZhODQyNGMtZTk2Ni00NDg1LTliZTEtYTI5ZjkzYjY0YTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOs9gnr3lqXvVIHonHnptOVS1HkEwDiF6wZa 0a8GOuZnypp1JoBAYOAApp+I05o3tdVYPMERWQgnbH5siuJiEHP93upCIUKXtHGe 35gJlqCEUGv1w+c5HETLX4IecZ4XQjJKJuTMRHAQaKDt1N09d5qPOGiQ7XN1Vjdf Rci3WqSkl7fnREXpRxsQBJM5a2LPPfuqBr9iYX+nD6k3PnmSKRTckdubRrNSWslC ZdMG5OJI1DqU4AtO2ZpXmuFrjKvABXoY0HGI22vH2LvlzX/dXuhQ5p1aIFNNV26J LdbCqMBPDKqcb2o/ikDOZ4spGE8+t5eSSwMW0aNmozFHi6SoUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt+l/DUkqeUzbnU+DYE30PNKLRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWIxMzMyZTEtMDQyOS0z YjdmLTg1MDMtMGNlOGQyOWY4MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTxVVcvJmuzOFUsfCxSzGf3zCq7HOUQbezzY4MYtYIG9UuX3HPG7RO6 /yJTdQ3tmfecc09HTHwTdGWRZtVNuGTmYT6mrixSp5XL579hkreoq8XF4lodAAvf Fx1XZdC2Rzr9ONtgSbNHZ38R046GPZ4ODiRBBYSz66fqnO7nFC8YuQAIdXTzw40+ EXwwtx2YCcFhgk7bi9muiZUlPkAatAF8APdQqjVAkC9tMNyEqD0il8yPI3kfbtOj 3yNgGCEybtiSO4orUbpBua66je6GhJeHz0FvbTvKib8L5xt3iPqBe3ee7hCBO5UM HqxWerFP0L60l5/qMkEtJ2ZsDw6CAtw= -----END CERTIFICATE-----Generated at Wed Aug 6 10:01:28 2025 by rpki-client