$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4256ca3e-bafa-34e6-8881-181519cc664a.roa File: 4256ca3e-bafa-34e6-8881-181519cc664a.roa (raw, json) Hash identifier: HaBdMMeqafMOIGTs/oMohboWgeuMrOpkW+/tD+R+w0E= Subject key identifier: 05:30:09:18:8E:0F:D9:01:89:A2:22:E4:39:AD:8F:83:CA:A7:E9:EC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8146651B6B509516CA6ECB90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4256ca3e-bafa-34e6-8881-181519cc664a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.21.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:65:1b:6b:50:95:16:ca:6e:cb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=f619815a-bfae-4486-bdea-0103a955a0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:42:5e:2d:76:aa:71:af:ec:1c:5a:6c:3a: b4:c4:9c:11:f0:2c:e4:3f:d6:34:2e:c7:79:01:d6: 88:2f:40:ea:31:50:f5:bd:7c:4d:05:4e:6e:75:b0: 70:e4:aa:9c:85:0c:eb:08:25:1b:7b:0a:08:1f:01: 91:b3:ad:a4:b7:0f:a8:1e:8d:4e:db:8d:28:01:1b: a6:39:7d:9e:75:ff:ee:7c:87:ac:75:99:93:fc:64: 8c:f6:06:d9:ac:05:83:7f:46:ec:9f:c0:e8:33:34: d2:16:a5:3f:a6:e6:1c:ae:db:30:65:75:57:e9:27: ee:ab:a8:37:37:09:9a:99:a4:28:72:2c:98:49:b7: 78:81:f2:38:34:6a:9e:0e:c7:10:1d:06:18:30:e2: 4b:a4:1e:2b:3b:ca:96:1a:e8:68:4e:a5:29:31:66: d7:5e:8e:b3:fe:f2:55:2f:c2:66:72:7c:8b:f3:0b: d4:d3:2f:12:3a:c1:29:7d:a9:ea:69:83:f9:56:9c: 68:96:7e:79:c7:3f:9f:34:35:87:ea:03:a8:0f:e3: 52:c2:31:40:42:b3:33:2f:65:5d:8b:55:dd:d4:d2: c4:b2:7c:f8:8d:02:22:76:4e:b3:3e:6f:33:6e:2f: 96:a5:e3:75:0f:0b:3d:5d:ec:6e:70:e7:6b:a9:e2: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:30:09:18:8E:0F:D9:01:89:A2:22:E4:39:AD:8F:83:CA:A7:E9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4256ca3e-bafa-34e6-8881-181519cc664a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a0:1c:b2:b1:db:2f:a1:7b:ea:f0:39:27:1c:97:90:b0:20: ac:d7:95:ce:15:d1:e9:c3:1d:55:1a:73:2e:30:1c:26:f1:f2: 6e:91:d5:3a:1b:4f:36:3c:75:4e:9a:57:a1:fb:a9:0a:0c:43: 89:c5:06:18:87:f8:89:e8:08:84:71:cd:37:07:65:9d:0d:41: f7:1c:da:61:89:62:77:e3:2e:bf:0f:37:28:b8:18:0f:94:4f: 66:c1:ca:ae:4a:77:cf:f1:e8:61:43:93:cb:45:5e:5f:0b:40: bf:3f:af:43:1e:4c:4c:cd:ed:e8:90:fa:16:c8:90:70:fa:90: 8c:49:1f:ce:27:2e:d7:db:ed:e0:98:dd:cd:cd:4e:7c:b3:68: 6c:2b:da:8c:87:05:9c:f9:7b:1d:55:23:43:41:62:1a:aa:f4: 5f:8d:db:5f:6a:79:01:fc:00:04:0d:d6:78:3e:8c:1f:11:69: ba:61:35:c9:ba:43:36:14:b6:3d:a8:1e:df:ac:2d:85:4f:f7: 33:3c:5e:77:6c:8e:ae:47:7e:55:6e:a7:c6:d1:24:70:b7:1e: ed:53:ad:54:d1:e1:fb:08:48:b3:24:45:11:18:07:df:a4:2a: f8:73:a1:8d:56:87:de:b9:fd:c5:d7:fe:2b:34:51:02:4d:35: 17:89:10:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRmUba1CVFspuy5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjYxOTgxNWEtYmZhZS00NDg2LWJkZWEtMDEwM2E5NTVhMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEtCXi12qnGv7BxabDq0xJwR8CzkP9Y0Lsd5 AdaIL0DqMVD1vXxNBU5udbBw5KqchQzrCCUbewoIHwGRs62ktw+oHo1O240oARum OX2edf/ufIesdZmT/GSM9gbZrAWDf0bsn8DoMzTSFqU/puYcrtswZXVX6Sfuq6g3 NwmamaQociyYSbd4gfI4NGqeDscQHQYYMOJLpB4rO8qWGuhoTqUpMWbXXo6z/vJV L8JmcnyL8wvU0y8SOsEpfanqaYP5Vpxoln55xz+fNDWH6gOoD+NSwjFAQrMzL2Vd i1Xd1NLEsnz4jQIidk6zPm8zbi+WpeN1Dws9XexucOdrqeKXvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUwCRiOD9kBiaIi5Dmtj4PKp+nsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDI1NmNhM2UtYmFmYS0z NGU2LTg4ODEtMTgxNTE5Y2M2NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASgHLKx2y+he+rwOSccl5CwIKzXlc4V0enDHVUacy4wHCbx8m6R1Tob TzY8dU6aV6H7qQoMQ4nFBhiH+InoCIRxzTcHZZ0NQfcc2mGJYnfjLr8PNyi4GA+U T2bByq5Kd8/x6GFDk8tFXl8LQL8/r0MeTEzN7eiQ+hbIkHD6kIxJH84nLtfb7eCY 3c3NTnyzaGwr2oyHBZz5ex1VI0NBYhqq9F+N219qeQH8AAQN1ng+jB8RabphNcm6 QzYUtj2oHt+sLYVP9zM8Xndsjq5HflVup8bRJHC3Hu1TrVTR4fsISLMkRREYB9+k KvhzoY1Wh965/cXX/is0UQJNNReJEHY= -----END CERTIFICATE-----Generated at Wed Aug 6 05:49:55 2025 by rpki-client