$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa File: 213537ac-2312-3e47-8fd5-9349e44762f2.roa (raw, json) Hash identifier: sHmNL6JKCf3wYYAJ6xQtvAjsPf2aQ0pFzr2Sdk6KSM8= Subject key identifier: 1F:06:3E:24:9A:E9:FF:96:93:01:2E:08:8C:12:BE:FE:34:9B:37:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410CD5F1C802A026AEFEE90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.29.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:cd:5f:1c:80:2a:02:6a:ef:ee:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f8c8aaa9-e273-438a-935a-124ffefb1bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:f1:db:b0:ee:7e:be:57:bf:61:f7:c3:e3: 04:d2:52:d8:27:81:1e:62:8b:9f:d8:c6:8d:68:64: 2d:84:e0:ce:1a:bc:b9:a0:ab:91:0e:37:27:2a:a0: 6d:b6:d4:48:4b:8e:08:f8:e2:de:5b:f8:c3:64:af: e6:a6:91:ef:e6:bf:bc:30:6e:a7:de:90:30:f0:45: 60:a6:1f:cc:25:5c:18:7d:a7:5d:1d:ef:f1:89:71: a3:a7:17:5f:a8:6f:3f:37:74:ec:3a:93:23:fb:a4: 1a:48:8e:98:5c:57:be:f2:cd:a4:eb:fb:c4:71:08: 5c:ee:a0:25:a6:f6:88:e6:cc:82:4c:b6:30:88:4a: f2:27:9a:72:75:dc:47:4f:57:dc:6b:d6:86:e6:e4: 58:ca:14:2b:b3:76:a2:ce:d0:72:19:26:f3:ee:be: 0a:11:78:a3:12:66:e3:51:00:e9:f3:d9:c0:f9:54: 58:36:95:a6:03:f2:ca:8d:e6:7e:7f:9c:07:b0:c1: ef:58:ac:11:e4:ab:bb:c1:87:a4:86:56:87:de:81: 71:71:40:a3:20:58:20:c4:03:dd:26:16:aa:75:42: 7d:3e:27:91:79:62:f7:89:97:03:32:f3:0b:3b:5b: 4b:9b:b0:75:19:ae:97:d7:39:4a:19:25:8b:15:a9: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:06:3E:24:9A:E9:FF:96:93:01:2E:08:8C:12:BE:FE:34:9B:37:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4a:f9:e3:54:7c:46:95:31:cf:9d:82:23:7a:96:50:cd:e3: 9a:a1:c3:f0:da:5a:a1:b1:e0:a0:d9:01:fe:8f:58:2a:fd:5c: bc:cf:f9:d0:c6:e8:f8:80:d0:ba:19:78:6b:14:d5:b9:18:82: 72:b0:79:76:6e:9f:cd:50:2d:7b:5c:85:9e:d0:17:93:b3:c2: 6b:96:11:9a:03:93:e3:0e:14:1a:69:28:d9:a2:b8:74:80:37: a3:a4:b1:3b:b1:b3:93:70:6a:10:3f:1f:49:97:11:d3:4f:e7: c3:e6:1b:0b:75:ac:d6:35:8b:84:6e:2e:35:68:a4:82:bb:c0: 5e:cb:ea:e3:78:8f:3a:21:ab:8d:49:89:b5:68:7f:3b:9d:0e: 25:18:50:b3:dd:85:c4:28:51:46:c6:a3:72:79:bc:20:ed:bc: 3c:2c:e2:a6:62:50:37:7d:28:4a:a6:cb:90:83:3e:7c:eb:12: 86:fe:5d:15:c2:f0:22:aa:24:96:9e:be:cf:5a:07:ee:3a:f2: 68:8a:16:45:41:7f:5b:8a:8f:00:18:36:08:cc:7e:32:e6:35: 66:36:91:6b:59:7e:2a:94:38:19:ca:75:78:88:da:a7:0b:8f: 83:72:20:ae:9d:26:65:63:21:5f:15:e4:cf:0c:3b:47:4e:43: 5f:d7:93:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEM1fHIAqAmrv7pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjhjOGFhYTktZTI3My00MzhhLTkzNWEtMTI0ZmZlZmIxYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MPx27Dufr5Xv2H3w+ME0lLYJ4EeYouf2MaN aGQthODOGry5oKuRDjcnKqBtttRIS44I+OLeW/jDZK/mppHv5r+8MG6n3pAw8EVg ph/MJVwYfaddHe/xiXGjpxdfqG8/N3TsOpMj+6QaSI6YXFe+8s2k6/vEcQhc7qAl pvaI5syCTLYwiEryJ5pyddxHT1fca9aG5uRYyhQrs3aiztByGSbz7r4KEXijEmbj UQDp89nA+VRYNpWmA/LKjeZ+f5wHsMHvWKwR5Ku7wYekhlaH3oFxcUCjIFggxAPd JhaqdUJ9PieReWL3iZcDMvMLO1tLm7B1Ga6X1zlKGSWLFanvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8GPiSa6f+WkwEuCIwSvv40mzcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjEzNTM3YWMtMjMxMi0z ZTQ3LThmZDUtOTM0OWU0NDc2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVK+eNUfEaVMc+dgiN6llDN45qhw/DaWqGx4KDZAf6PWCr9XLzP+dDG 6PiA0LoZeGsU1bkYgnKweXZun81QLXtchZ7QF5OzwmuWEZoDk+MOFBppKNmiuHSA N6OksTuxs5NwahA/H0mXEdNP58PmGwt1rNY1i4RuLjVopIK7wF7L6uN4jzohq41J ibVofzudDiUYULPdhcQoUUbGo3J5vCDtvDws4qZiUDd9KEqmy5CDPnzrEob+XRXC 8CKqJJaevs9aB+468miKFkVBf1uKjwAYNgjMfjLmNWY2kWtZfiqUOBnKdXiI2qcL j4NyIK6dJmVjIV8V5M8MO0dOQ1/Xk2s= -----END CERTIFICATE-----Generated at Wed Aug 6 04:04:02 2025 by rpki-client