$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a130408-6050-35c1-a9fe-9f645a014bae.roa File: 3a130408-6050-35c1-a9fe-9f645a014bae.roa (raw, json) Hash identifier: uM+CEtoxukwEY+qpbeNo0sIgLbpRXTAJgBxo2KiNp1I= Subject key identifier: 9D:0F:1E:D1:97:53:78:D3:BB:25:50:17:72:59:7C:68:1A:74:C9:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841251A384F537C4585862E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a130408-6050-35c1-a9fe-9f645a014bae.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 150.195.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:51:a3:84:f5:37:c4:58:58:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2a517f6c-cc69-4b17-8d5d-85118d8c6b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:7f:18:29:13:dc:97:a1:fa:26:a3:d7:78: 3e:65:b9:0e:40:37:61:89:66:fa:3b:d8:62:a1:74: fa:38:fd:d9:17:2a:34:7a:6c:22:d8:9b:70:41:e3: 57:78:1c:85:75:93:8e:64:3e:50:6c:f5:5d:67:46: a5:27:af:68:ef:18:7a:a7:fe:89:15:0e:c6:ef:20: 84:5d:75:dc:c9:e2:de:30:7b:b4:33:53:5b:b9:40: 00:3c:56:27:6a:3e:26:45:5f:74:98:15:ac:a8:18: fb:bb:ff:89:0d:85:8c:f8:0a:e9:33:76:83:68:4c: d3:e7:48:2c:cd:3c:ab:41:f3:66:35:d1:1b:1b:49: 74:87:a2:96:9e:62:40:0e:2c:c2:85:7c:87:1f:a1: 75:83:a1:35:36:ee:7f:98:88:1e:7b:d9:7e:7e:47: f9:d7:0d:11:cf:74:76:fc:5e:ca:80:fc:4c:f9:38: 24:c3:d5:e6:71:7c:c9:0e:60:25:5b:2c:af:f6:ec: 32:41:28:56:08:d4:ce:cf:af:65:f5:93:37:9a:37: e9:a9:a2:40:06:e1:76:6e:d5:16:5c:6b:40:eb:47: 7e:9d:c7:c7:c0:cd:b7:a5:44:d4:9a:e9:9e:9b:e2: 05:50:14:81:d7:a2:ca:5e:55:8f:29:76:87:2e:29: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0F:1E:D1:97:53:78:D3:BB:25:50:17:72:59:7C:68:1A:74:C9:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a130408-6050-35c1-a9fe-9f645a014bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a7:cb:c2:41:2c:2d:72:1e:02:56:79:19:cb:14:a7:cd:58: c6:4a:36:fd:da:e0:e2:78:36:d2:1b:78:03:71:3c:37:66:08: fc:19:13:27:d4:17:42:b5:94:f5:8e:ca:a0:53:23:2e:1a:b3: 79:49:0f:24:5b:8d:e1:69:33:42:20:79:e8:9f:f6:2b:6b:c9: 48:2f:56:f3:04:4c:f4:ac:71:a9:cf:7d:d4:4c:48:1a:9d:a6: 72:c5:54:1a:2f:87:6c:19:cf:54:09:b2:d5:5e:99:4f:1a:6d: 1a:01:41:12:a2:8b:31:fb:ff:70:b6:53:db:ef:5f:f5:7b:98: 74:ce:a8:b5:f5:d8:c7:d7:0c:e4:81:d9:cb:d5:82:73:17:4d: 1e:88:0f:6f:bd:5d:db:01:44:cf:b5:86:c4:7e:21:3b:3f:7e: a9:46:54:20:31:bc:cf:18:5a:8f:e8:bf:53:f5:be:57:35:d4: a2:d5:a6:42:29:08:d3:66:45:0c:d8:91:df:72:d7:ae:6c:85: f6:b5:30:ea:fc:6a:05:5e:9f:3b:de:3f:2d:ee:01:57:5d:21: 88:01:ce:c2:a5:88:21:9f:48:43:39:eb:f2:11:eb:b5:fe:20: c2:b9:c9:66:ff:85:89:2c:44:0f:ef:ac:f4:da:29:66:45:80: 90:95:c8:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElGjhPU3xFhYYuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmE1MTdmNmMtY2M2OS00YjE3LThkNWQtODUxMThkOGM2YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr9/GCkT3Jeh+iaj13g+ZbkOQDdhiWb6O9hi oXT6OP3ZFyo0emwi2JtwQeNXeByFdZOOZD5QbPVdZ0alJ69o7xh6p/6JFQ7G7yCE XXXcyeLeMHu0M1NbuUAAPFYnaj4mRV90mBWsqBj7u/+JDYWM+ArpM3aDaEzT50gs zTyrQfNmNdEbG0l0h6KWnmJADizChXyHH6F1g6E1Nu5/mIgee9l+fkf51w0Rz3R2 /F7KgPxM+Tgkw9XmcXzJDmAlWyyv9uwyQShWCNTOz69l9ZM3mjfpqaJABuF2btUW XGtA60d+ncfHwM23pUTUmumem+IFUBSB16LKXlWPKXaHLinRuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0PHtGXU3jTuyVQF3JZfGgadMkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ExMzA0MDgtNjA1MC0z NWMxLWE5ZmUtOWY2NDVhMDE0YmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmny8JBLC1yHgJWeRnLFKfNWMZKNv3a4OJ4NtIbeANxPDdmCPwZEyfU F0K1lPWOyqBTIy4as3lJDyRbjeFpM0Igeeif9itryUgvVvMETPSscanPfdRMSBqd pnLFVBovh2wZz1QJstVemU8abRoBQRKiizH7/3C2U9vvX/V7mHTOqLX12MfXDOSB 2cvVgnMXTR6ID2+9XdsBRM+1hsR+ITs/fqlGVCAxvM8YWo/ov1P1vlc11KLVpkIp CNNmRQzYkd9y165shfa1MOr8agVenzvePy3uAVddIYgBzsKliCGfSEM56/IR67X+ IMK5yWb/hYksRA/vrPTaKWZFgJCVyM8= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:26 2025 by rpki-client