$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/391c4b7d-3402-3a70-949b-3ac5a947aefb.roa File: 391c4b7d-3402-3a70-949b-3ac5a947aefb.roa (raw, json) Hash identifier: NlDKUZBy9GntxHgEtFL6GQ+vrhLhk3ru+uwNkC7Rzng= Subject key identifier: B5:FE:3A:61:7F:19:70:DE:1D:07:CB:F9:F8:AE:CC:B0:07:80:61:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81464BB2CB3C3E7B47E79E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/391c4b7d-3402-3a70-949b-3ac5a947aefb.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.20.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:4b:b2:cb:3c:3e:7b:47:e7:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b4c82574-eee2-4ccf-8bc9-9c6c7df09559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:c4:46:ad:c9:2e:0a:bd:76:6d:e0:49:e5: 35:c4:10:2d:41:4b:1e:9c:69:3d:55:39:ca:0e:97: 11:cd:0a:cf:71:cd:3a:31:7e:1e:9f:f0:44:84:f1: f9:24:31:7c:79:7a:33:12:b2:17:86:64:4e:7f:b4: 73:88:93:e9:51:03:2f:d0:c1:6a:23:11:39:d9:32: 16:21:02:37:e6:b0:8c:bf:af:03:c1:f6:9d:c7:c0: db:3f:a0:fa:7a:5d:8e:63:be:3b:ed:1a:5a:f6:f2: ce:40:3d:b8:43:70:12:22:a9:d0:9b:1a:1c:fe:2b: 9e:05:4c:02:3e:de:52:0f:3a:9a:c3:c4:e5:f6:a1: eb:66:f9:ad:8c:50:03:89:78:d3:08:bc:64:dc:ea: d5:af:9e:14:68:b4:19:64:cb:2b:38:78:6c:cb:cb: 2a:8d:5c:75:a7:51:78:f4:e5:90:fb:d0:76:9f:3a: f1:82:38:ed:f3:1c:fd:b8:b2:fe:5e:b9:99:9c:49: 0c:4f:b0:dd:a1:39:5a:8a:3c:af:1e:18:46:41:a5: 3f:e8:70:5f:f9:c4:2d:27:bc:00:01:c9:41:e0:58: d1:4b:11:07:0f:75:21:c6:d3:3e:97:7d:28:32:b3: 78:9d:f6:3f:2e:a9:7a:94:a6:08:16:9b:0e:ab:f6: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FE:3A:61:7F:19:70:DE:1D:07:CB:F9:F8:AE:CC:B0:07:80:61:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/391c4b7d-3402-3a70-949b-3ac5a947aefb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:33:ba:34:a7:40:f9:3a:cf:b6:ec:58:61:71:6b:d1:db:c9: 81:7d:f7:8c:59:73:2d:c7:a6:88:b2:d7:41:9b:a0:d9:d8:cc: 3f:e9:67:02:f3:29:ec:42:82:4c:60:e0:26:fc:53:c3:8c:fa: c6:53:40:95:df:01:ff:13:f1:56:77:1a:17:9a:ae:d1:95:77: cf:81:71:d8:57:ea:ce:b9:d9:57:a4:f0:2d:52:b5:e6:3b:04: a9:81:9c:03:a6:82:d8:40:bb:e1:59:fa:56:db:f7:40:2b:d1: 1c:58:8e:a8:03:af:be:ed:d0:c7:e7:ea:ad:1e:dd:3e:22:d2: 8a:e0:6f:7a:f7:69:4b:c5:73:43:e0:d4:6b:a2:f5:8c:9a:53: 98:84:64:62:9f:f3:02:e0:74:d9:8c:4a:19:c0:c6:ba:24:85: 61:a4:32:dc:2f:8d:18:78:e8:44:d9:88:60:2d:cf:a8:a1:1f: b3:c8:78:3c:5d:ff:86:b8:94:49:0b:de:bd:0e:ea:59:a5:53: 0f:9e:45:02:68:02:58:33:00:f9:87:6d:8c:d9:ab:69:96:10: c4:e2:70:b4:79:cb:be:64:66:4d:a0:8d:bb:44:9d:c6:d0:e9: ec:c0:c9:08:22:f6:88:ce:9c:7e:9e:03:a2:9c:c3:10:b6:b4: 95:77:70:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkuyyzw+e0fnnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjRjODI1NzQtZWVlMi00Y2NmLThiYzktOWM2YzdkZjA5NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDERq3JLgq9dm3gSeU1xBAtQUsenGk9VTnK DpcRzQrPcc06MX4en/BEhPH5JDF8eXozErIXhmROf7RziJPpUQMv0MFqIxE52TIW IQI35rCMv68Dwfadx8DbP6D6el2OY7477Rpa9vLOQD24Q3ASIqnQmxoc/iueBUwC Pt5SDzqaw8Tl9qHrZvmtjFADiXjTCLxk3OrVr54UaLQZZMsrOHhsy8sqjVx1p1F4 9OWQ+9B2nzrxgjjt8xz9uLL+XrmZnEkMT7DdoTlaijyvHhhGQaU/6HBf+cQtJ7wA AclB4FjRSxEHD3UhxtM+l30oMrN4nfY/Lql6lKYIFpsOq/aErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX+OmF/GXDeHQfL+fiuzLAHgGFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzkxYzRiN2QtMzQwMi0z YTcwLTk0OWItM2FjNWE5NDdhZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADczujSnQPk6z7bsWGFxa9HbyYF994xZcy3Hpoiy10GboNnYzD/pZwLz KexCgkxg4Cb8U8OM+sZTQJXfAf8T8VZ3GheartGVd8+BcdhX6s652Vek8C1SteY7 BKmBnAOmgthAu+FZ+lbb90Ar0RxYjqgDr77t0Mfn6q0e3T4i0orgb3r3aUvFc0Pg 1Gui9YyaU5iEZGKf8wLgdNmMShnAxrokhWGkMtwvjRh46ETZiGAtz6ihH7PIeDxd /4a4lEkL3r0O6lmlUw+eRQJoAlgzAPmHbYzZq2mWEMTicLR5y75kZk2gjbtEncbQ 6ezAyQgi9ojOnH6eA6KcwxC2tJV3cGE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:51 2025 by rpki-client