$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f66060d-645f-3035-a717-7b3ca23214a3.roa File: 3f66060d-645f-3035-a717-7b3ca23214a3.roa (raw, json) Hash identifier: vwmT0wU1Mgs4C3VLmeoIvHInnE7M3hKWr8AmOIYv9EM= Subject key identifier: CD:D2:0D:6F:6C:AB:CE:69:5E:34:60:11:A9:29:29:72:6B:90:C5:7B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410ED278DEFFCF38D0EB980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f66060d-645f-3035-a717-7b3ca23214a3.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.18.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:ed:27:8d:ef:fc:f3:8d:0e:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b8c8bd24-c81a-42ae-8dce-6a2e70d9fab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:08:30:c6:8f:f7:5b:5b:e8:19:59:49:d3: 95:72:7c:17:91:c0:a6:98:b6:c3:30:f0:ec:98:9f: de:4e:f9:d4:24:9b:ba:cf:82:70:d2:0d:85:af:27: b7:70:00:53:a7:ad:69:c9:cc:cc:b1:e7:ac:a3:97: 6f:d4:eb:96:5f:74:5e:30:b5:b3:13:5c:44:25:3c: 94:d8:e7:ec:22:63:36:41:94:32:2d:c7:a0:c5:c8: 06:81:85:12:04:33:4d:8b:10:86:c7:d4:46:10:eb: fa:2d:4e:c3:55:bd:8e:00:5d:72:03:78:fd:fe:e0: 28:78:5d:36:6b:c8:4b:e0:66:a2:98:9b:a7:46:8b: cc:71:7f:55:f4:ac:94:9a:4a:40:3a:10:7e:9e:c3: 16:4b:73:ee:c3:30:94:33:0f:45:a3:e0:02:75:85: bb:d3:fd:9f:7a:7d:29:c1:b1:e9:dd:a8:8c:e8:a4: 93:92:cd:aa:32:91:f1:f1:c4:f4:92:5d:df:45:d1: f3:e6:b8:a5:d0:eb:69:9e:07:f3:ad:5d:8b:26:60: ca:89:69:d9:ee:e3:59:ca:da:57:bf:07:1f:33:92: bb:8c:a1:1f:d4:65:58:79:50:9b:94:28:e2:b3:82: 6f:82:7a:c5:80:16:9b:90:8d:fd:1a:81:b2:a7:ce: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D2:0D:6F:6C:AB:CE:69:5E:34:60:11:A9:29:29:72:6B:90:C5:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f66060d-645f-3035-a717-7b3ca23214a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2b:60:6e:80:91:17:86:cf:40:d2:ee:90:64:c2:c6:e9:04: 52:32:08:2a:b5:69:41:18:dc:59:77:eb:10:98:f6:b7:66:dd: 1b:ec:67:cb:2d:0c:fa:ab:fe:f3:c3:29:f5:f5:b5:6b:4c:03: 64:a2:8a:d5:7c:68:e1:a9:cf:84:76:d3:66:99:25:32:2f:d1: 2f:fe:88:c3:53:13:77:5b:9d:6c:4a:8e:af:17:48:0f:af:a1: 72:99:2f:a9:ac:1a:86:f9:c2:23:59:a2:95:93:73:fc:d5:2c: 2e:16:e7:34:3b:ae:96:0f:07:ee:77:8b:db:b8:0f:c1:72:27: 36:b7:8b:d3:62:89:fd:8f:e7:55:71:5d:a7:64:6a:db:57:e8: 5a:77:72:14:bf:94:6f:57:43:7e:4f:27:da:44:72:c9:5e:33: d9:8c:f7:3e:af:11:db:4a:12:af:b9:53:f3:9a:e7:25:d5:a8: 3b:ab:0b:2f:13:3f:a0:c7:94:5e:32:2a:50:c9:d9:1d:13:cd: ea:fd:5c:c2:a6:23:79:f7:52:d4:78:ba:d9:9d:77:36:36:d2: 01:bc:92:2d:bc:6a:31:83:4e:71:c1:66:ab:00:2a:c9:0c:92: f1:3f:c8:91:f1:eb:90:ee:43:9c:18:91:9c:53:4c:a3:ce:1d: 21:43:d2:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEO0nje/8840OuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjhjOGJkMjQtYzgxYS00MmFlLThkY2UtNmEyZTcwZDlmYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlUIMMaP91tb6BlZSdOVcnwXkcCmmLbDMPDs mJ/eTvnUJJu6z4Jw0g2Frye3cABTp61pyczMseeso5dv1OuWX3ReMLWzE1xEJTyU 2OfsImM2QZQyLcegxcgGgYUSBDNNixCGx9RGEOv6LU7DVb2OAF1yA3j9/uAoeF02 a8hL4GaimJunRovMcX9V9KyUmkpAOhB+nsMWS3PuwzCUMw9Fo+ACdYW70/2fen0p wbHp3aiM6KSTks2qMpHx8cT0kl3fRdHz5ril0OtpngfzrV2LJmDKiWnZ7uNZytpX vwcfM5K7jKEf1GVYeVCblCjis4JvgnrFgBabkI39GoGyp862bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3SDW9sq85pXjRgEakpKXJrkMV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y2NjA2MGQtNjQ1Zi0z MDM1LWE3MTctN2IzY2EyMzIxNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADArYG6AkReGz0DS7pBkwsbpBFIyCCq1aUEY3Fl36xCY9rdm3RvsZ8st DPqr/vPDKfX1tWtMA2SiitV8aOGpz4R202aZJTIv0S/+iMNTE3dbnWxKjq8XSA+v oXKZL6msGob5wiNZopWTc/zVLC4W5zQ7rpYPB+53i9u4D8FyJza3i9Niif2P51Vx XadkattX6Fp3chS/lG9XQ35PJ9pEcsleM9mM9z6vEdtKEq+5U/Oa5yXVqDurCy8T P6DHlF4yKlDJ2R0Tzer9XMKmI3n3UtR4utmddzY20gG8ki28ajGDTnHBZqsAKskM kvE/yJHx65DuQ5wYkZxTTKPOHSFD0o8= -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:13 2025 by rpki-client