$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa File: 39051ff4-e3bd-3767-be38-89a0f13f363b.roa (raw, json) Hash identifier: 4Pfth9VeHGrKk031dyq8YjUOR6hArNR5SiFanjdczaA= Subject key identifier: D4:65:13:A2:93:48:8F:82:58:B9:6D:DE:68:BA:2F:2D:DE:37:9D:C7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84123FCA2C52BB9F1D8D7400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.22.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3f:ca:2c:52:bb:9f:1d:8d:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=dc56bad3-091b-431b-8c64-8fcd0f4bfd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:8a:67:b8:8f:e9:0d:c9:f0:8c:16:66:b1: 54:79:cc:c5:93:ae:25:a3:63:a5:27:e6:3c:d6:9a: 9e:13:c5:70:c7:21:c7:74:fa:b7:a3:2e:29:b5:30: 74:a1:30:50:f6:04:cc:66:cf:08:71:3c:1d:ab:d3: 57:7a:a7:40:30:87:dd:5b:31:ad:a4:88:aa:4e:6c: 6e:d3:01:97:7d:40:cd:3b:88:e6:5a:b3:98:4a:16: b7:ea:55:df:52:e0:f3:e2:a0:b3:00:af:f1:95:f4: 36:31:9d:a9:b9:78:bb:b2:05:db:9a:7d:b1:ef:e8: a7:e0:51:59:89:fa:a5:2a:d4:cf:0b:91:09:65:df: 8f:0f:68:44:ee:ea:20:bc:68:63:02:2d:4b:a5:29: 84:6a:5f:18:64:3a:89:95:63:bc:d7:89:cd:7a:f9: af:50:4d:b4:6c:0b:c3:d0:d7:0c:12:ac:0b:2a:5e: ff:66:e0:9f:7d:a2:35:89:47:4e:9b:91:be:d5:ce: 0d:e9:58:fd:6a:77:29:81:15:b8:85:87:67:cc:8f: 6e:b4:58:46:c9:d5:6c:38:f1:3a:b0:ba:70:b0:df: 01:1f:c5:6d:b0:29:4b:e8:77:a7:b1:9e:7b:1d:52: 39:83:d7:35:dd:30:51:04:96:9d:fe:da:78:f6:4e: 7f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:65:13:A2:93:48:8F:82:58:B9:6D:DE:68:BA:2F:2D:DE:37:9D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39051ff4-e3bd-3767-be38-89a0f13f363b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:08:29:c4:16:01:bc:35:f7:7f:dc:ca:47:7d:41:90:c1:30: 2b:21:b3:48:cb:57:74:b4:7a:1d:3a:cc:30:58:7e:32:f6:60: 8b:61:16:86:e3:e9:0d:22:17:d3:4e:8e:24:aa:f6:94:ab:cd: 70:9b:35:6f:c4:82:40:50:18:a1:3b:b4:c1:09:f0:6e:62:3c: 50:8d:26:09:f4:72:f9:66:ca:c9:6c:28:03:53:20:78:93:3f: 87:0e:bb:98:24:8f:d6:9c:ce:fd:e8:e1:78:0d:57:1f:0f:0e: 34:51:b1:42:5b:10:36:55:24:49:11:86:d9:06:07:80:2a:f8: 58:30:11:7c:fd:4f:fb:ea:54:d2:01:4b:c0:27:ed:54:22:c4: 68:5d:04:67:bd:50:61:3a:a9:93:95:a3:a6:65:ce:93:b6:30: 14:a9:52:ae:b9:33:0f:02:ec:54:97:ea:e3:33:24:68:7a:1b: 1d:23:13:4e:83:80:f7:70:cf:ad:c0:e5:43:d0:a3:2d:79:8a: 1e:d8:c7:90:10:d2:3d:b6:97:2f:ad:71:7d:10:15:0f:c8:03: 1d:89:0a:b4:1c:ad:24:7b:52:d0:86:9d:14:26:07:6a:77:c7: ed:25:1f:97:9d:09:92:64:29:60:e3:f7:02:59:33:be:95:23: a3:2f:33:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEj/KLFK7nx2NdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGM1NmJhZDMtMDkxYi00MzFiLThjNjQtOGZjZDBmNGJmZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq6KZ7iP6Q3J8IwWZrFUeczFk64lo2OlJ+Y8 1pqeE8VwxyHHdPq3oy4ptTB0oTBQ9gTMZs8IcTwdq9NXeqdAMIfdWzGtpIiqTmxu 0wGXfUDNO4jmWrOYSha36lXfUuDz4qCzAK/xlfQ2MZ2puXi7sgXbmn2x7+in4FFZ ifqlKtTPC5EJZd+PD2hE7uogvGhjAi1LpSmEal8YZDqJlWO814nNevmvUE20bAvD 0NcMEqwLKl7/ZuCffaI1iUdOm5G+1c4N6Vj9ancpgRW4hYdnzI9utFhGydVsOPE6 sLpwsN8BH8VtsClL6HensZ57HVI5g9c13TBRBJad/tp49k5/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRlE6KTSI+CWLlt3mi6Ly3eN53HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzkwNTFmZjQtZTNiZC0z NzY3LWJlMzgtODlhMGYxM2YzNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAIKcQWAbw193/cykd9QZDBMCshs0jLV3S0eh06zDBYfjL2YIthFobj 6Q0iF9NOjiSq9pSrzXCbNW/EgkBQGKE7tMEJ8G5iPFCNJgn0cvlmyslsKANTIHiT P4cOu5gkj9aczv3o4XgNVx8PDjRRsUJbEDZVJEkRhtkGB4Aq+FgwEXz9T/vqVNIB S8An7VQixGhdBGe9UGE6qZOVo6ZlzpO2MBSpUq65Mw8C7FSX6uMzJGh6Gx0jE06D gPdwz63A5UPQoy15ih7Yx5AQ0j22ly+tcX0QFQ/IAx2JCrQcrSR7UtCGnRQmB2p3 x+0lH5edCZJkKWDj9wJZM76VI6MvM8w= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:30 2025 by rpki-client