$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa File: 1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa (raw, json) Hash identifier: qIQYCZC6VoRPh6BRs6kb6uJcOzWLn+aqshDx7fMnf5s= Subject key identifier: BD:25:EB:14:BD:6D:C0:2B:52:17:42:B3:85:5C:77:73:FD:8C:77:2E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410D064B3A2D05636B4A380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.21.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:d0:64:b3:a2:d0:56:36:b4:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=91c99db9-ad3e-4258-b8ee-44df9f776616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:ce:ec:1b:49:b8:be:2c:60:c2:4b:0d:f8: 89:fa:f6:4c:78:c2:96:2d:36:a8:39:19:4e:2d:34: 30:db:58:ed:2f:df:9a:52:f7:21:9b:c5:52:c2:62: 6f:da:62:bd:b6:ab:9a:5f:58:9e:d8:c1:96:f2:3c: 59:7a:a1:5a:15:77:d4:e0:91:61:99:21:43:8a:d1: 2e:18:27:7b:d0:4c:62:74:8d:eb:25:b6:e2:b8:a0: da:27:b6:ab:1e:31:cc:00:58:a6:20:0d:d7:8e:8e: 3d:8f:a6:c4:fa:46:ce:5a:73:9b:91:21:9c:d4:e1: 1c:91:d4:35:75:e7:33:7c:96:a3:95:a1:7e:36:fc: 8a:e7:33:cb:3e:d6:68:47:cf:c8:7d:66:e5:83:5e: 77:14:95:8c:83:9a:5d:13:c2:8d:ea:6f:72:3b:e5: e2:36:86:fb:ec:c1:fc:21:49:68:77:eb:88:c2:a2: 4d:1a:80:5a:17:a7:9e:76:c8:0f:59:1b:be:02:04: a3:a6:ae:7c:dc:21:6f:e0:5b:3f:8f:6b:27:89:c6: b3:19:1b:d6:42:b6:34:f1:b5:95:a2:45:83:30:f5: 40:c6:53:4e:2d:45:a2:2a:d2:14:f3:f0:c9:89:7f: 33:75:16:1e:18:a5:1a:e5:b5:f7:8c:a3:6b:69:94: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:25:EB:14:BD:6D:C0:2B:52:17:42:B3:85:5C:77:73:FD:8C:77:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1faca7ae-7a1a-3b05-ac69-3f359af36bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8e:6b:cb:9d:51:2c:4b:93:11:d0:43:64:7a:38:fb:69:c0: 6a:2b:56:5c:a6:75:dc:d5:e3:8f:b8:cd:35:c4:e9:b7:49:27: eb:4a:cc:fb:34:e1:1d:2d:c3:75:a6:54:78:0f:d3:c1:82:87: 65:c1:b7:43:d6:55:56:3d:08:27:c4:df:e3:ee:be:0a:13:c4: 32:46:18:ba:fc:2f:34:71:1f:6f:8a:b7:24:99:68:30:70:95: 20:2a:de:67:a2:d2:78:b9:fa:02:f7:02:c5:89:e8:be:44:52: 43:b1:c9:a7:75:8a:1f:43:aa:0d:b1:b4:dd:a0:d5:b6:de:4d: da:90:a4:f1:c2:82:30:0c:60:5e:63:69:fe:6d:05:c1:0f:3f: fb:df:4f:ce:c3:0b:9a:59:6a:22:59:2b:bf:71:4f:da:80:12: 4c:a1:57:23:22:7e:9a:cb:64:8d:4f:09:33:5e:7a:9b:2e:cc: ea:3f:a9:05:0c:5a:c8:8c:95:52:b2:43:c2:ff:07:24:23:e9: 44:be:e6:ce:cc:60:f0:d4:29:fa:16:51:9a:46:62:d5:5c:e4: ce:8f:67:ed:c5:94:4f:86:bb:40:5f:54:0c:83:f5:47:40:37: 2e:06:1d:54:a8:4b:28:1e:1f:39:34:25:f4:4a:01:30:2d:d7: 29:cd:97:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENBks6LQVja0o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTFjOTlkYjktYWQzZS00MjU4LWI4ZWUtNDRkZjlmNzc2NjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0TO7BtJuL4sYMJLDfiJ+vZMeMKWLTaoORlO LTQw21jtL9+aUvchm8VSwmJv2mK9tquaX1ie2MGW8jxZeqFaFXfU4JFhmSFDitEu GCd70ExidI3rJbbiuKDaJ7arHjHMAFimIA3Xjo49j6bE+kbOWnObkSGc1OEckdQ1 deczfJajlaF+NvyK5zPLPtZoR8/IfWblg153FJWMg5pdE8KN6m9yO+XiNob77MH8 IUlod+uIwqJNGoBaF6eedsgPWRu+AgSjpq583CFv4Fs/j2snicazGRvWQrY08bWV okWDMPVAxlNOLUWiKtIU8/DJiX8zdRYeGKUa5bX3jKNraZRZewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0l6xS9bcArUhdCs4Vcd3P9jHcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWZhY2E3YWUtN2ExYS0z YjA1LWFjNjktM2YzNTlhZjM2YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGOa8udUSxLkxHQQ2R6OPtpwGorVlymddzV44+4zTXE6bdJJ+tKzPs0 4R0tw3WmVHgP08GCh2XBt0PWVVY9CCfE3+PuvgoTxDJGGLr8LzRxH2+KtySZaDBw lSAq3mei0ni5+gL3AsWJ6L5EUkOxyad1ih9Dqg2xtN2g1bbeTdqQpPHCgjAMYF5j af5tBcEPP/vfT87DC5pZaiJZK79xT9qAEkyhVyMifprLZI1PCTNeepsuzOo/qQUM WsiMlVKyQ8L/ByQj6US+5s7MYPDUKfoWUZpGYtVc5M6PZ+3FlE+Gu0BfVAyD9UdA Ny4GHVSoSygeHzk0JfRKATAt1ynNl3E= -----END CERTIFICATE-----Generated at Wed Aug 6 04:11:52 2025 by rpki-client