$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa File: 3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa (raw, json) Hash identifier: 7YCMWWQ+OeohDbuG+z/h8OdT0egVjI4YglT/+rk0IAI= Subject key identifier: E3:EC:A4:89:49:39:BB:50:F5:E2:C6:4D:4A:95:94:1C:38:FF:26:A4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124E8D2968D56CDD137B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.19.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4e:8d:29:68:d5:6c:dd:13:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b1ebb8fb-1baa-4885-ad61-550fa2d311dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:29:2f:0e:98:05:b9:13:7f:b3:80:73:ec: ff:a9:bb:b9:9b:78:1e:07:96:38:e8:f5:54:f0:39: 81:16:72:27:b7:e9:17:0f:19:37:1a:86:7f:16:d3: 06:bd:6c:7f:1a:ef:ec:1b:0b:cc:e6:a4:e4:de:a3: b1:bb:34:41:d8:da:62:56:11:71:b8:44:c4:2f:c8: 84:5e:1d:a8:5f:4f:53:24:1a:2b:6e:a2:51:9f:3d: 7e:78:1c:14:3c:d6:21:0c:c9:7f:3e:fa:a0:98:c0: 55:b9:13:43:4c:e4:ff:10:43:1d:a6:38:e5:58:48: e6:1a:9b:0c:e1:ba:08:89:6e:98:ec:da:87:d1:eb: ff:0e:b0:6c:e0:d0:74:87:d2:ab:f2:3c:84:a4:69: f8:7d:4c:26:90:6a:72:cc:eb:74:71:95:67:e5:e6: 8d:89:a1:62:df:5e:30:d2:0e:7d:df:63:87:b3:20: df:ec:de:87:0e:20:b5:0d:b7:ca:e8:69:b8:ef:b2: 80:11:0d:6e:bd:42:a3:13:a2:48:c8:ee:21:26:cd: d1:93:b2:ab:d0:5c:d1:0a:24:d3:0e:35:98:5d:cb: 21:be:8e:10:d1:45:3d:e4:60:69:32:33:f7:f6:0e: 70:43:dc:66:49:27:22:aa:8b:35:35:54:77:37:2b: 88:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EC:A4:89:49:39:BB:50:F5:E2:C6:4D:4A:95:94:1C:38:FF:26:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:fe:ea:63:ea:8e:db:27:db:4a:61:6a:c0:e9:5b:57:94:54: 48:2c:6d:0a:a7:59:3e:7b:d3:31:ca:e1:aa:bb:8b:5e:bb:19: a0:21:00:15:3d:08:10:99:ae:6a:38:63:30:21:da:6b:4a:31: b5:78:22:62:27:a4:13:a3:16:7e:66:20:f8:f1:60:97:a8:25: 3f:10:fe:c3:bf:b6:be:c8:6d:cc:ea:9c:5d:88:34:3c:48:74: b4:bf:18:e8:61:be:74:82:e9:8d:a0:9a:1c:f6:b5:95:9a:66: 3e:81:49:de:a7:a9:59:cf:7e:51:68:bc:b1:27:95:df:4d:f4: 3b:eb:6b:d1:00:2d:0b:9e:26:a5:1c:da:e9:c6:6c:db:d8:f7: 85:9c:56:44:02:2f:db:b9:83:30:98:89:8f:21:a0:7f:e5:c5: 17:88:e7:11:c4:04:36:c5:4a:93:e1:6e:fb:18:6c:ac:02:ad: 66:fc:d1:0f:44:58:bc:ab:e9:d0:e8:88:fd:2c:2d:7b:53:f1: eb:a9:06:db:0d:2b:8a:5e:43:bf:90:86:c6:c1:2f:0d:4f:a4: 8c:7a:a9:bd:a5:fb:6b:e6:db:b5:b6:fa:25:fe:68:9b:7f:ab: 2c:bd:85:57:3f:30:0d:4f:81:60:09:74:59:2f:90:65:63:f1: a2:3e:39:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEk6NKWjVbN0TewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjFlYmI4ZmItMWJhYS00ODg1LWFkNjEtNTUwZmEyZDMxMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHUpLw6YBbkTf7OAc+z/qbu5m3geB5Y46PVU 8DmBFnInt+kXDxk3GoZ/FtMGvWx/Gu/sGwvM5qTk3qOxuzRB2NpiVhFxuETEL8iE Xh2oX09TJBorbqJRnz1+eBwUPNYhDMl/PvqgmMBVuRNDTOT/EEMdpjjlWEjmGpsM 4boIiW6Y7NqH0ev/DrBs4NB0h9Kr8jyEpGn4fUwmkGpyzOt0cZVn5eaNiaFi314w 0g5932OHsyDf7N6HDiC1DbfK6Gm477KAEQ1uvUKjE6JIyO4hJs3Rk7Kr0FzRCiTT DjWYXcshvo4Q0UU95GBpMjP39g5wQ9xmSSciqos1NVR3NyuICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPspIlJObtQ9eLGTUqVlBw4/yakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y1M2Q0MGItZTNjZi0z YzE4LThlZjUtYzY3NTRlYjUzMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb+6mPqjtsn20phasDpW1eUVEgsbQqnWT570zHK4aq7i167GaAhABU9 CBCZrmo4YzAh2mtKMbV4ImInpBOjFn5mIPjxYJeoJT8Q/sO/tr7IbczqnF2INDxI dLS/GOhhvnSC6Y2gmhz2tZWaZj6BSd6nqVnPflFovLEnld9N9Dvra9EALQueJqUc 2unGbNvY94WcVkQCL9u5gzCYiY8hoH/lxReI5xHEBDbFSpPhbvsYbKwCrWb80Q9E WLyr6dDoiP0sLXtT8eupBtsNK4peQ7+QhsbBLw1PpIx6qb2l+2vm27W2+iX+aJt/ qyy9hVc/MA1PgWAJdFkvkGVj8aI+OdA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:02:18 2025 by rpki-client