$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa File: 2f20d531-3e0b-388f-9365-e78405e59dfd.roa (raw, json) Hash identifier: +lYEz0DyIDod02GK1T3UGBWNqyqjblzQAu9NGnLYAOU= Subject key identifier: D2:F7:C4:A2:DA:75:5D:A9:EC:9F:B3:FE:36:16:DF:9F:5C:39:ED:C2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841252766C4AAD9380E6E380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.24.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:52:76:6c:4a:ad:93:80:e6:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=51148ee0-a367-45e3-959d-777a8e9a0450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3b:68:a9:06:f9:de:61:77:b6:25:14:00:2b: 51:77:00:2d:c7:29:71:c2:fb:9c:5e:1d:70:f0:cd: 1a:6a:07:46:13:70:64:db:7b:8b:d4:42:13:d0:65: c9:80:fb:59:5d:34:04:45:3b:67:6e:a0:cf:57:3a: 04:d4:6b:8a:fc:1a:f1:4d:4a:d8:04:3f:f3:db:79: 6e:f3:49:e0:41:97:c1:d4:bc:fe:5f:5b:00:74:bc: 77:74:f3:fa:b2:47:4f:bb:34:36:b2:1d:a1:31:1d: 5b:66:06:44:0d:12:b3:79:ae:d8:3d:55:19:81:22: 23:6b:35:e0:30:50:de:ff:7c:b3:4b:b1:3e:bb:d2: 2e:12:9f:ee:30:ff:65:e0:00:ba:8a:00:43:02:af: bf:26:3a:24:b8:41:b1:a7:7c:55:d0:03:4c:90:46: e8:c6:50:10:5a:7f:f4:43:1e:76:66:2b:92:01:bd: fa:e4:63:7c:f1:8b:77:eb:e7:0c:44:96:1e:be:35: 16:6e:dc:2e:e6:8b:51:8d:7c:89:3f:4b:fe:ef:68: 7b:f7:36:f1:11:d5:24:7c:8b:42:fb:27:e4:c9:97: 92:d0:ea:19:81:9e:69:df:24:c4:cd:d1:9c:5b:45: 5a:0d:12:a1:3a:92:1d:aa:55:b6:8a:d3:2f:fa:4a: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F7:C4:A2:DA:75:5D:A9:EC:9F:B3:FE:36:16:DF:9F:5C:39:ED:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f20d531-3e0b-388f-9365-e78405e59dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c7:3a:e2:06:90:62:77:57:fe:c6:08:66:3a:cb:25:8a:c0: 54:8d:07:c2:c0:7c:9e:d3:dc:53:de:6f:b3:8e:f6:dc:c8:5b: 19:05:ba:23:2f:ee:f2:be:83:69:60:54:98:21:34:3a:b2:f5: a4:bb:67:8e:74:22:5f:e0:21:d0:fb:5f:b9:10:3f:5f:e2:2a: 3c:52:d2:f7:96:31:13:b0:ee:55:76:1c:8d:41:43:2e:5a:54: 38:32:98:38:67:d6:f3:47:cc:10:25:55:10:b9:1a:06:35:88: 3b:71:b7:1e:fa:2e:2d:cb:84:f5:aa:18:9d:77:6e:2f:33:80: bf:03:7c:6f:26:23:f3:b4:2a:e7:49:25:58:f8:75:30:38:97: 66:a8:ca:c8:34:0c:3f:9b:db:2a:b9:e8:e9:8a:42:06:e2:39: 57:10:0c:43:45:17:c0:63:0f:39:fc:b7:db:8d:09:b1:80:71: ce:42:97:e8:e7:f3:f8:1d:ca:00:c4:9a:fa:fc:bc:28:c3:e2: d6:41:55:af:32:e7:a6:3c:03:af:2b:b5:87:ce:17:8d:b0:40: 01:61:49:90:d5:04:4e:ff:34:ca:f8:11:a8:fc:a1:81:41:56: 9b:74:93:01:a0:e8:03:f5:58:a2:9c:bc:7b:25:39:63:9f:ab: cd:ce:97:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElJ2bEqtk4Dm44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTExNDhlZTAtYTM2Ny00NWUzLTk1OWQtNzc3YThlOWEwNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkztoqQb53mF3tiUUACtRdwAtxylxwvucXh1w 8M0aagdGE3Bk23uL1EIT0GXJgPtZXTQERTtnbqDPVzoE1GuK/BrxTUrYBD/z23lu 80ngQZfB1Lz+X1sAdLx3dPP6skdPuzQ2sh2hMR1bZgZEDRKzea7YPVUZgSIjazXg MFDe/3yzS7E+u9IuEp/uMP9l4AC6igBDAq+/JjokuEGxp3xV0ANMkEboxlAQWn/0 Qx52ZiuSAb365GN88Yt36+cMRJYevjUWbtwu5otRjXyJP0v+72h79zbxEdUkfItC +yfkyZeS0OoZgZ5p3yTEzdGcW0VaDRKhOpIdqlW2itMv+ko8aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL3xKLadV2p7J+z/jYW359cOe3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmYyMGQ1MzEtM2UwYi0z ODhmLTkzNjUtZTc4NDA1ZTU5ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/HOuIGkGJ3V/7GCGY6yyWKwFSNB8LAfJ7T3FPeb7OO9tzIWxkFuiMv 7vK+g2lgVJghNDqy9aS7Z450Il/gIdD7X7kQP1/iKjxS0veWMROw7lV2HI1BQy5a VDgymDhn1vNHzBAlVRC5GgY1iDtxtx76Li3LhPWqGJ13bi8zgL8DfG8mI/O0KudJ JVj4dTA4l2aoysg0DD+b2yq56OmKQgbiOVcQDENFF8BjDzn8t9uNCbGAcc5Cl+jn 8/gdygDEmvr8vCjD4tZBVa8y56Y8A68rtYfOF42wQAFhSZDVBE7/NMr4Eaj8oYFB Vpt0kwGg6AP1WKKcvHslOWOfq83Ol2E= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:32 2025 by rpki-client