$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d372561-3c76-3560-8f44-4a6a4ef45366.roa File: 3d372561-3c76-3560-8f44-4a6a4ef45366.roa (raw, json) Hash identifier: 0a1e8komyUdbka3IWC5fOSh1FHbLKGRW+GRVM3419tI= Subject key identifier: BE:CD:7B:24:97:8A:BD:A8:95:6A:6E:AB:20:C4:3E:84:C5:29:C5:AA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E2344DFCD0D9660C5E60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d372561-3c76-3560-8f44-4a6a4ef45366.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.19.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e2:34:4d:fc:d0:d9:66:0c:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f42b5a12-c76d-4a00-9646-da2eef44ac97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:b9:c3:95:c6:00:57:64:70:af:0e:20:9e: e0:f7:91:5e:f4:c3:7f:c6:10:fd:5d:ce:a6:83:9d: 0c:df:a7:d2:ef:6c:5e:21:5c:d8:71:9e:34:bb:03: 70:a9:1c:50:5e:06:68:6c:7e:10:f9:9f:78:ca:91: e6:4c:22:5f:55:06:7e:c5:fc:18:fe:f1:8b:70:92: 7a:03:07:cb:b7:a4:bf:be:ba:c5:bb:a8:5d:79:e9: 8d:91:92:e8:72:79:9f:f3:ce:ab:5f:93:b0:c0:7c: f6:f9:fc:ef:79:ca:c1:18:d0:12:5c:3c:aa:b7:92: 7e:bb:be:7e:74:b3:b5:5c:40:d6:0e:6a:a4:e3:5c: a0:39:76:e6:06:a8:a1:4b:51:2d:25:89:fe:72:df: cb:8e:f8:e1:1b:c3:41:62:dd:be:03:50:19:07:04: fd:e6:55:1a:09:21:79:c6:c1:64:64:db:63:e1:ef: 68:81:8c:33:c3:5d:ab:81:a2:2a:44:de:6f:f1:32: 29:49:5f:44:ec:67:35:0f:1f:d2:fd:22:b2:67:28: b6:aa:c1:1e:eb:71:af:5c:a2:a0:d5:1f:60:99:5e: d9:1e:00:52:89:2c:f7:a8:57:51:17:e9:c5:5a:df: 3d:ff:26:17:56:97:91:fd:ef:84:70:dd:87:6c:90: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CD:7B:24:97:8A:BD:A8:95:6A:6E:AB:20:C4:3E:84:C5:29:C5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d372561-3c76-3560-8f44-4a6a4ef45366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:79:87:88:4d:5a:21:1b:3a:a3:ac:b8:00:be:43:d7:56:ed: c6:67:a4:b8:91:d0:d7:71:51:a5:71:b3:d9:fd:b9:13:1f:01: 31:bb:9f:84:a7:5d:8f:98:b1:08:51:28:21:f3:cf:ea:6b:15: b0:8e:46:6f:ff:ce:5e:b0:1f:98:5e:72:e8:03:cd:47:06:b3: 75:c8:83:3a:e3:cd:7c:ed:09:50:13:c4:e0:ab:4f:a1:7c:21: 2c:62:f7:2e:fe:27:ea:de:52:82:b4:af:40:ff:59:13:67:de: 4c:df:79:67:3c:63:f1:d8:4f:5f:cd:fa:05:99:94:d5:28:80: 23:eb:d7:78:d4:46:0d:24:6a:9b:bb:3b:bc:78:a6:dc:81:e5: 5c:9d:9c:c4:11:eb:e7:22:14:1e:4b:15:d2:1f:06:92:cd:e3: ab:c9:39:5d:40:26:0c:09:06:7a:97:9f:30:8b:46:ee:31:ca: 16:bf:bc:6b:2a:ec:76:f7:d7:77:67:9d:01:9c:61:83:4b:cc: 86:3a:86:e3:c5:ac:76:8c:5d:7c:e4:71:68:db:cf:18:4d:07: 2e:7e:76:a6:01:df:1d:6a:bc:9b:cd:95:28:a4:36:25:26:e5: a7:dc:78:e2:42:96:6d:b8:c1:28:c7:59:48:6d:1f:eb:9a:58: 34:19:03:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOI0TfzQ2WYMXmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjQyYjVhMTItYzc2ZC00YTAwLTk2NDYtZGEyZWVmNDRhYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg+5w5XGAFdkcK8OIJ7g95Fe9MN/xhD9Xc6m g50M36fS72xeIVzYcZ40uwNwqRxQXgZobH4Q+Z94ypHmTCJfVQZ+xfwY/vGLcJJ6 AwfLt6S/vrrFu6hdeemNkZLocnmf886rX5OwwHz2+fzvecrBGNASXDyqt5J+u75+ dLO1XEDWDmqk41ygOXbmBqihS1EtJYn+ct/LjvjhG8NBYt2+A1AZBwT95lUaCSF5 xsFkZNtj4e9ogYwzw12rgaIqRN5v8TIpSV9E7Gc1Dx/S/SKyZyi2qsEe63GvXKKg 1R9gmV7ZHgBSiSz3qFdRF+nFWt89/yYXVpeR/e+EcN2HbJBP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7NeySXir2olWpuqyDEPoTFKcWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2QzNzI1NjEtM2M3Ni0z NTYwLThmNDQtNGE2YTRlZjQ1MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt5h4hNWiEbOqOsuAC+Q9dW7cZnpLiR0NdxUaVxs9n9uRMfATG7n4Sn XY+YsQhRKCHzz+prFbCORm//zl6wH5hecugDzUcGs3XIgzrjzXztCVATxOCrT6F8 ISxi9y7+J+reUoK0r0D/WRNn3kzfeWc8Y/HYT1/N+gWZlNUogCPr13jURg0kapu7 O7x4ptyB5VydnMQR6+ciFB5LFdIfBpLN46vJOV1AJgwJBnqXnzCLRu4xyha/vGsq 7Hb313dnnQGcYYNLzIY6huPFrHaMXXzkcWjbzxhNBy5+dqYB3x1qvJvNlSikNiUm 5afceOJClm24wSjHWUhtH+uaWDQZA2A= -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:49 2025 by rpki-client