$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21659562-042a-30e6-94d6-1043ea4d61e5.roa File: 21659562-042a-30e6-94d6-1043ea4d61e5.roa (raw, json) Hash identifier: aNAXP9BMIwmU9hhk1GTdarebHxqDCP8DEihnIwf9BX8= Subject key identifier: 59:31:AC:B6:94:80:AF:4A:ED:D3:88:E3:93:A9:4B:91:69:A7:15:1C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81465CC0DACC07E1CC6FB380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21659562-042a-30e6-94d6-1043ea4d61e5.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.20.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:5c:c0:da:cc:07:e1:cc:6f:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=947baccc-bf55-452d-b865-d36484cca1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:79:e6:4b:e4:e2:ad:fc:ed:d9:f1:2f:48: a5:ad:4f:26:f0:69:5e:bd:a8:0b:38:52:7d:01:34: d7:91:98:fb:0c:53:98:a6:52:80:04:f3:ef:56:30: 20:f6:41:45:db:fd:e8:1f:ee:af:fe:97:6f:a1:c5: 87:76:8b:a7:45:7b:b3:b4:08:3f:1d:d1:22:7e:66: 4f:9f:3c:9e:39:02:3f:43:da:10:13:c3:ab:1d:8c: cd:31:98:c0:8e:d1:fe:6c:a8:5c:5e:c7:e5:60:5c: e3:85:ac:38:e5:4f:9e:3e:b4:6a:93:54:7a:c8:51: ed:63:3e:92:25:ca:2e:da:c0:f8:56:a4:43:17:d1: c7:6a:3d:c5:99:20:2b:49:b6:15:dd:77:6c:40:85: d2:40:b2:aa:64:27:11:54:07:d2:08:e2:44:9b:43: 17:08:ea:a0:cf:6a:41:77:83:9c:24:97:16:3f:37: 68:41:05:5b:38:d3:46:46:59:45:26:19:e2:30:02: c5:c4:fa:b1:32:be:38:90:7a:41:76:4e:b9:87:25: 77:27:a1:d7:01:24:43:fc:5d:b4:e8:18:9e:c6:02: 37:ca:49:79:13:35:99:d9:9f:f4:58:a7:d9:de:fa: 73:8a:f8:bd:df:f8:df:39:25:33:a1:f3:59:41:ef: 25:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:31:AC:B6:94:80:AF:4A:ED:D3:88:E3:93:A9:4B:91:69:A7:15:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21659562-042a-30e6-94d6-1043ea4d61e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:72:67:e0:a6:58:cd:47:13:96:d4:7c:9f:70:f9:be:41:4c: d9:fb:43:80:d0:b6:29:ad:80:df:ed:6b:61:e3:e2:c7:9d:2d: 4f:63:d3:9d:ad:91:2f:ab:7a:07:0a:30:a6:46:d3:1a:e6:09: 26:2a:c8:9b:84:f1:9f:39:f4:1f:36:56:ad:40:47:21:f0:c5: e7:00:22:3e:83:f6:96:a9:12:83:ce:f0:cd:75:53:7f:58:4c: c9:d3:b5:eb:1c:bc:e1:81:9d:2e:dd:e6:2d:55:ea:40:46:44: 82:35:36:b4:ac:64:e8:ea:56:1c:ff:25:3f:b0:31:53:91:46: 68:52:60:66:07:0d:49:57:78:30:b2:0b:b3:65:ab:84:c5:3a: ba:a3:00:1b:3c:3f:f8:52:1f:eb:68:f9:84:dd:11:66:5b:be: b7:d1:6a:e9:5e:41:11:db:10:38:99:7d:f9:34:7c:bb:43:10: c6:37:8e:5e:95:05:8c:42:1b:d0:e8:84:7d:bc:40:b3:4a:0d: 77:cc:98:0c:e4:72:ad:b8:5b:f2:43:fe:6a:6a:54:95:db:c7: 60:48:7c:61:2e:c3:15:b4:20:cd:b4:74:fc:31:e4:6d:80:4c: 1d:6d:6f:c6:f1:eb:69:b7:4d:43:c9:ab:13:ed:ed:b3:9e:be: f3:42:a5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlzA2swH4cxvs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OTQ3YmFjY2MtYmY1NS00NTJkLWI4NjUtZDM2NDg0Y2NhMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyd55kvk4q387dnxL0ilrU8m8GlevagLOFJ9 ATTXkZj7DFOYplKABPPvVjAg9kFF2/3oH+6v/pdvocWHdounRXuztAg/HdEifmZP nzyeOQI/Q9oQE8OrHYzNMZjAjtH+bKhcXsflYFzjhaw45U+ePrRqk1R6yFHtYz6S Jcou2sD4VqRDF9HHaj3FmSArSbYV3XdsQIXSQLKqZCcRVAfSCOJEm0MXCOqgz2pB d4OcJJcWPzdoQQVbONNGRllFJhniMALFxPqxMr44kHpBdk65hyV3J6HXASRD/F20 6BiexgI3ykl5EzWZ2Z/0WKfZ3vpzivi93/jfOSUzofNZQe8lGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkxrLaUgK9K7dOI45OpS5FppxUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjE2NTk1NjItMDQyYS0z MGU2LTk0ZDYtMTA0M2VhNGQ2MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFyZ+CmWM1HE5bUfJ9w+b5BTNn7Q4DQtimtgN/ta2Hj4sedLU9j052t kS+regcKMKZG0xrmCSYqyJuE8Z859B82Vq1ARyHwxecAIj6D9papEoPO8M11U39Y TMnTtescvOGBnS7d5i1V6kBGRII1NrSsZOjqVhz/JT+wMVORRmhSYGYHDUlXeDCy C7Nlq4TFOrqjABs8P/hSH+to+YTdEWZbvrfRauleQRHbEDiZffk0fLtDEMY3jl6V BYxCG9DohH28QLNKDXfMmAzkcq24W/JD/mpqVJXbx2BIfGEuwxW0IM20dPwx5G2A TB1tb8bx62m3TUPJqxPt7bOevvNCpQs= -----END CERTIFICATE-----Generated at Tue Aug 5 23:06:54 2025 by rpki-client