$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd4960f-7c02-3b2c-abbb-199c869e1606.roa File: 1cd4960f-7c02-3b2c-abbb-199c869e1606.roa (raw, json) Hash identifier: 4CzjyOUsE6AsuQD1Box5pLhvKS5L3ixUmYjzpzwhUFE= Subject key identifier: 02:1A:2A:55:20:8E:CA:77:6D:08:3F:35:BF:4A:D3:01:A2:5F:E3:13 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81464F9E37F00F22F8D0E980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd4960f-7c02-3b2c-abbb-199c869e1606.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.31.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:4f:9e:37:f0:0f:22:f8:d0:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=67b8f074-ad25-4dee-90b7-befd8859dbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:79:ed:61:a8:cc:76:87:7b:55:95:36:43:b1: 66:1d:9e:ab:98:86:96:47:a5:00:a7:13:44:b8:16: 03:9c:09:f6:1e:40:f1:21:c0:97:52:e5:52:06:93: 98:28:f7:2e:c5:94:6e:cc:ed:58:80:47:79:b3:03: 34:fd:c0:16:1a:2f:7c:09:3b:89:ef:e3:e8:7e:6a: 0c:df:3b:78:da:64:89:0f:85:19:fa:47:c2:eb:72: be:e1:8b:1b:87:87:24:9f:0c:a9:6f:ff:a0:2c:f7: 69:78:b7:2e:b3:af:7c:2f:25:04:e5:3b:9f:c6:5b: 23:09:9f:bb:07:c3:c6:8f:23:04:b3:19:64:56:a8: a1:08:73:31:4a:4d:32:ac:2d:8c:73:5e:4a:7a:7a: 3f:93:9b:39:a9:95:66:e5:c5:4a:79:2e:e6:6d:8e: 9d:b6:f9:57:c0:9f:a2:ba:23:f6:45:52:84:5a:9d: 08:09:aa:8e:1f:25:90:5f:b7:da:3e:90:d5:15:d3: 5a:0e:00:82:66:c2:df:d5:5f:d1:83:99:bf:e7:1b: 74:80:e1:a6:b7:16:9a:3a:46:8c:fd:4b:4e:e1:da: 43:ee:e2:fa:6d:2d:7b:7e:f9:b1:dd:c9:c4:cb:77: 93:10:7a:fc:72:7f:32:8e:54:c6:a7:06:bd:d9:f5: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1A:2A:55:20:8E:CA:77:6D:08:3F:35:BF:4A:D3:01:A2:5F:E3:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd4960f-7c02-3b2c-abbb-199c869e1606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6a:84:33:5f:3d:bf:e5:ab:99:89:aa:10:f8:fd:f4:1d:f9: 2f:65:11:e1:6c:2c:9d:28:00:40:5e:22:b2:4a:81:25:d9:d3: c1:b2:b5:47:f5:ee:ed:80:82:1d:7e:c0:08:22:91:1d:93:c7: 62:9c:2e:f6:e7:be:d2:db:ca:e0:a0:00:b4:ce:e3:8b:01:84: 01:de:68:df:2b:a6:f7:20:77:5e:b0:a3:d2:d0:14:85:4b:a4: 02:81:03:86:a4:0f:e3:05:53:14:fb:46:e2:bf:3e:88:66:00: ca:5c:72:9e:01:2e:70:7c:eb:9e:d3:11:1a:b1:4d:f0:aa:84: 04:5d:48:7e:4f:dc:28:7f:ff:2e:22:a9:f6:59:47:ad:e5:e8: 8c:5b:12:f1:f1:ab:40:3c:3d:72:93:a2:ab:0d:a9:a5:ec:3b: 43:aa:f3:bf:5f:50:28:2a:2e:b5:88:fa:b9:e5:f8:be:a7:18: 80:d1:14:a5:b0:c0:8d:4a:3b:d6:ed:c5:cc:ed:72:ca:a7:dd: bc:e9:64:6e:c4:55:8f:e9:92:ae:d9:03:f4:21:16:35:17:03: cb:90:02:43:6b:d5:91:a3:86:67:74:d2:05:5d:dc:40:c1:f2: a2:56:8e:ab:9f:dd:f8:26:93:4f:0e:9e:ac:66:27:2a:b3:45: fb:36:87:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRk+eN/APIvjQ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NjdiOGYwNzQtYWQyNS00ZGVlLTkwYjctYmVmZDg4NTlkYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XntYajMdod7VZU2Q7FmHZ6rmIaWR6UApxNE uBYDnAn2HkDxIcCXUuVSBpOYKPcuxZRuzO1YgEd5swM0/cAWGi98CTuJ7+PofmoM 3zt42mSJD4UZ+kfC63K+4Ysbh4cknwypb/+gLPdpeLcus698LyUE5TufxlsjCZ+7 B8PGjyMEsxlkVqihCHMxSk0yrC2Mc15Keno/k5s5qZVm5cVKeS7mbY6dtvlXwJ+i uiP2RVKEWp0ICaqOHyWQX7faPpDVFdNaDgCCZsLf1V/Rg5m/5xt0gOGmtxaaOkaM /UtO4dpD7uL6bS17fvmx3cnEy3eTEHr8cn8yjlTGpwa92fVwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIaKlUgjsp3bQg/Nb9K0wGiX+MTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWNkNDk2MGYtN2MwMi0z YjJjLWFiYmItMTk5Yzg2OWUxNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNqhDNfPb/lq5mJqhD4/fQd+S9lEeFsLJ0oAEBeIrJKgSXZ08GytUf1 7u2Agh1+wAgikR2Tx2KcLvbnvtLbyuCgALTO44sBhAHeaN8rpvcgd16wo9LQFIVL pAKBA4akD+MFUxT7RuK/PohmAMpccp4BLnB8657TERqxTfCqhARdSH5P3Ch//y4i qfZZR63l6IxbEvHxq0A8PXKToqsNqaXsO0Oq879fUCgqLrWI+rnl+L6nGIDRFKWw wI1KO9btxcztcsqn3bzpZG7EVY/pkq7ZA/QhFjUXA8uQAkNr1ZGjhmd00gVd3EDB 8qJWjquf3fgmk08OnqxmJyqzRfs2h9Q= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:24 2025 by rpki-client