$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa File: 223021f3-e1cd-3b6d-a238-c230b97e42a8.roa (raw, json) Hash identifier: n1CVvZQQbscu6QMPqf0JbUcaZqyZrWN1mNQ8RR8xkFY= Subject key identifier: D0:24:A1:66:54:C2:5E:C7:1C:26:4D:50:C0:99:50:39:F1:DD:29:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AC19420AEF4A085E66BCAEF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa Signing time: Tue 05 Aug 2025 13:50:14 +0000 ROA not before: Tue 05 Aug 2025 13:50:14 +0000 ROA not after: Mon 03 Nov 2025 14:50:14 +0000 asID: 19905 IP address blocks: 173.16.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:94:20:ae:f4:a0:85:e6:6b:ca:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 5 13:50:14 2025 GMT Not After : Nov 3 14:50:14 2025 GMT Subject: CN=6fb95048-e972-4a87-86dd-5c335f2cd4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:5a:39:4a:27:f1:8d:ce:d5:19:79:81:1d: f4:00:02:21:8c:5a:89:90:af:16:6e:90:cf:a5:89: 49:d3:ca:38:bf:c5:28:44:45:1d:7e:1f:59:a6:b6: 84:ac:8e:68:af:fc:2b:c1:42:0b:2d:d6:af:98:bb: f6:fd:bb:d2:99:bb:42:6e:44:c5:0f:bd:c5:2a:dc: 70:e1:db:66:0e:96:52:fe:91:cb:20:b1:63:b2:c4: ed:07:d3:68:55:04:96:c5:af:1f:17:89:5b:6e:5a: f8:18:47:92:80:1f:72:ca:cd:f0:99:c1:aa:32:24: 27:d2:53:0c:a0:0c:ed:12:11:7a:89:59:1c:2c:5a: e4:e5:89:b5:40:34:2c:ec:54:ee:84:4d:83:18:d6: f5:5f:80:38:a3:e6:a8:19:bb:60:be:1d:5d:69:1b: 39:d7:21:a8:9a:c1:f8:99:1b:2a:80:b1:36:ad:61: 4c:92:12:c1:8f:ff:52:14:a5:35:d1:cd:39:12:8e: cf:c0:09:b1:fd:3c:e8:14:c9:1f:a2:34:a5:c9:48: 07:d0:23:a6:0d:51:2f:42:47:fc:e4:bc:6a:e6:d5: 71:34:b1:63:e1:be:bc:6d:33:3f:ad:1c:d8:cd:93: 86:25:ca:66:ed:25:7b:a8:24:60:42:4c:76:3e:df: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:24:A1:66:54:C2:5E:C7:1C:26:4D:50:C0:99:50:39:F1:DD:29:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:54:57:ef:b4:74:43:b7:58:3c:90:a9:ce:70:d2:6d:69:9c: 61:c7:68:b9:48:70:29:b7:a0:cc:ad:f3:ed:12:33:8b:d6:a5: 5e:f5:21:4e:2a:cb:9b:08:d1:28:22:a3:37:51:d8:99:51:9e: d9:56:d4:23:b1:09:09:40:01:fb:d7:03:49:41:84:30:b8:96: 06:fc:34:01:b7:84:05:c2:53:48:7f:8c:f5:52:ed:e7:55:a2: d4:ce:7b:e5:9f:a6:4f:8e:34:6e:06:9a:b9:86:80:77:4b:c1: aa:2b:2a:5a:8b:9c:93:e7:e8:15:e5:e2:98:0f:22:25:6f:a6: 01:59:7e:97:55:b2:3b:4b:cb:67:ba:a8:db:2d:28:8f:88:16: f5:d8:b7:39:3c:03:ec:91:75:ef:a9:d2:6c:2e:42:d7:04:06: 27:8a:83:a2:86:57:26:61:01:b7:b1:71:56:76:d3:f5:b4:d6: d5:b1:01:ea:66:a4:f7:04:a1:ae:43:91:5a:92:a7:26:ff:b2: 99:09:81:fc:ce:e3:79:2a:85:94:c6:0a:32:8f:44:20:80:69: dd:28:37:42:ba:ed:5c:4a:4c:5b:4a:df:c6:17:27:ff:f2:43: 34:b1:38:8c:70:51:c1:36:55:92:4a:f3:59:d0:b3:d0:60:3c: 93:39:ed:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErBlCCu9KCF5mvK7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwNTEzNTAxNFoXDTI1MTEwMzE0NTAxNFowLzEtMCsGA1UEAxMk NmZiOTUwNDgtZTk3Mi00YTg3LTg2ZGQtNWMzMzVmMmNkNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTNaOUon8Y3O1Rl5gR30AAIhjFqJkK8WbpDP pYlJ08o4v8UoREUdfh9ZpraErI5or/wrwUILLdavmLv2/bvSmbtCbkTFD73FKtxw 4dtmDpZS/pHLILFjssTtB9NoVQSWxa8fF4lbblr4GEeSgB9yys3wmcGqMiQn0lMM oAztEhF6iVkcLFrk5Ym1QDQs7FTuhE2DGNb1X4A4o+aoGbtgvh1daRs51yGomsH4 mRsqgLE2rWFMkhLBj/9SFKU10c05Eo7PwAmx/TzoFMkfojSlyUgH0COmDVEvQkf8 5Lxq5tVxNLFj4b68bTM/rRzYzZOGJcpm7SV7qCRgQkx2Pt/1bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAkoWZUwl7HHCZNUMCZUDnx3Sm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjIzMDIxZjMtZTFjZC0z YjZkLWEyMzgtYzIzMGI5N2U0MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFUV++0dEO3WDyQqc5w0m1pnGHHaLlIcCm3oMyt8+0SM4vWpV71IU4q y5sI0SgiozdR2JlRntlW1COxCQlAAfvXA0lBhDC4lgb8NAG3hAXCU0h/jPVS7edV otTOe+Wfpk+ONG4GmrmGgHdLwaorKlqLnJPn6BXl4pgPIiVvpgFZfpdVsjtLy2e6 qNstKI+IFvXYtzk8A+yRde+p0mwuQtcEBieKg6KGVyZhAbexcVZ20/W01tWxAepm pPcEoa5DkVqSpyb/spkJgfzO43kqhZTGCjKPRCCAad0oN0K67VxKTFtK38YXJ//y QzSxOIxwUcE2VZJK81nQs9BgPJM57XU= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:13 2025 by rpki-client