$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa File: 3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa (raw, json) Hash identifier: DiKNs0uRyDVoZ4GNQLAoW+MY+e00E61xTHssN9oPKtU= Subject key identifier: 4B:61:E9:44:DB:82:11:F6:A0:8B:FB:E4:7C:C5:B6:72:AF:3F:63:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81463E6D6586A148695255EA Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.24.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:3e:6d:65:86:a1:48:69:52:55:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=43d0e24c-624e-4535-a958-e2e6c4f4bfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:7b:35:4d:fc:83:9d:5f:86:d3:36:7f:21: f0:43:63:45:f0:1e:bc:2d:da:cb:ad:b4:b5:a4:eb: aa:53:4b:ee:6c:aa:e0:e4:60:03:08:d3:e8:eb:1d: bc:49:cd:9c:1c:9f:2a:eb:36:65:43:bb:1f:d0:35: 9b:4b:1b:d8:45:4e:52:31:32:f8:3b:dd:0d:18:70: 81:21:42:55:a0:ba:ca:c3:13:5a:1c:87:1e:ad:13: 21:a4:f3:f2:49:93:a0:a4:56:84:d7:09:2b:50:4a: 07:96:eb:4b:c2:ef:af:e2:f1:03:5f:3a:7b:3b:97: c7:17:ca:f9:03:27:22:be:fa:7e:d2:ad:f7:d9:d0: 6b:8b:48:f9:d1:55:79:f6:a9:31:e9:ae:a8:d5:f7: e2:89:bf:b7:7b:04:76:8f:ee:92:cc:f8:3a:89:9b: 3e:1f:fd:0c:38:ff:37:f2:53:a4:05:2e:51:7b:95: 82:39:a5:c1:21:9c:20:92:16:94:06:51:24:58:d6: 5f:c8:2f:bb:42:31:77:e3:11:22:80:3c:3f:2d:2f: 76:d2:ec:24:d7:b8:53:c4:04:31:fd:04:8d:a2:1d: 89:6b:47:56:6e:ff:d6:88:39:df:b7:60:78:a0:22: 07:bf:14:9a:7d:8e:91:a4:b4:80:ef:85:43:5d:de: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:61:E9:44:DB:82:11:F6:A0:8B:FB:E4:7C:C5:B6:72:AF:3F:63:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9d:4c:31:0f:bc:8f:04:e9:ae:d6:3a:db:12:7e:d3:eb:bc: 20:30:12:df:32:38:f6:83:31:ed:cd:51:a5:78:8b:9d:6f:35: b9:8f:9e:a2:a3:8b:4d:5c:3d:a4:d9:ee:8c:60:6e:82:54:65: c9:26:be:9e:b9:98:b1:a4:f9:75:ba:da:09:4b:bd:0e:cb:3f: 70:5d:61:94:1e:35:cf:1d:40:a6:94:4d:4e:f4:dc:30:74:99: fb:da:22:af:a5:da:09:27:f9:7a:d8:e4:39:38:da:13:1f:b8: 2c:f5:cc:70:01:0d:01:33:53:fb:25:60:48:4f:2a:9f:69:de: db:14:82:0a:1b:9a:17:36:3c:07:54:2a:93:16:25:4e:97:fd: 14:ec:1c:35:40:de:c5:4a:94:21:d3:e3:3e:fb:59:09:95:92: 43:31:cc:99:6d:23:f2:24:d6:9e:1c:9c:94:23:95:e7:36:3d: 78:2c:a0:9a:d1:c6:f3:59:78:1b:0b:52:18:c1:ae:f2:3d:8e: 15:1e:a3:23:b8:76:6f:e9:ad:62:5a:21:0a:a1:7e:98:86:da: c9:cf:a2:53:41:d4:de:14:91:17:ab:18:c2:2a:bb:94:c4:b5: de:69:0e:78:4f:de:e9:d2:ac:35:37:81:3f:90:5c:0b:99:dc: 22:8d:2d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRj5tZYahSGlSVeowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NDNkMGUyNGMtNjI0ZS00NTM1LWE5NTgtZTJlNmM0ZjRiZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TJ7NU38g51fhtM2fyHwQ2NF8B68LdrLrbS1 pOuqU0vubKrg5GADCNPo6x28Sc2cHJ8q6zZlQ7sf0DWbSxvYRU5SMTL4O90NGHCB IUJVoLrKwxNaHIcerRMhpPPySZOgpFaE1wkrUEoHlutLwu+v4vEDXzp7O5fHF8r5 Aycivvp+0q332dBri0j50VV59qkx6a6o1ffiib+3ewR2j+6SzPg6iZs+H/0MOP83 8lOkBS5Re5WCOaXBIZwgkhaUBlEkWNZfyC+7QjF34xEigDw/LS920uwk17hTxAQx /QSNoh2Ja0dWbv/WiDnft2B4oCIHvxSafY6RpLSA74VDXd6cewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEth6UTbghH2oIv75HzFtnKvP2NgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2U0ZmY5ODItNTJiMS0z YTMwLWEyZDgtNWQxYTRkMWQwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFydTDEPvI8E6a7WOtsSftPrvCAwEt8yOPaDMe3NUaV4i51vNbmPnqKj i01cPaTZ7oxgboJUZckmvp65mLGk+XW62glLvQ7LP3BdYZQeNc8dQKaUTU703DB0 mfvaIq+l2gkn+XrY5Dk42hMfuCz1zHABDQEzU/slYEhPKp9p3tsUggobmhc2PAdU KpMWJU6X/RTsHDVA3sVKlCHT4z77WQmVkkMxzJltI/Ik1p4cnJQjlec2PXgsoJrR xvNZeBsLUhjBrvI9jhUeoyO4dm/prWJaIQqhfpiG2snPolNB1N4UkRerGMIqu5TE td5pDnhP3unSrDU3gT+QXAuZ3CKNLdA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:04 2025 by rpki-client