$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa File: 4390aa88-8392-3e92-b96a-694f6067d383.roa (raw, json) Hash identifier: zGEjbdXnAehufGY6KhaajseMnfgPMWjjnTD5lQjARvY= Subject key identifier: D4:3D:3B:B6:C8:CE:39:F6:0C:AA:FD:8F:07:8B:78:08:55:50:D9:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC0067AFC53358FFF599C8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.21.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:00:67:af:c5:33:58:ff:f5:99:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e6995558-5a09-44a3-b8ae-1c4a1bd1888e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:34:c2:12:f3:86:c5:48:61:e9:b1:01:b9: c9:9b:4a:c9:65:b1:3c:4e:be:1b:79:af:e1:0d:bf: aa:ec:b0:ee:6d:55:c4:1a:bd:a8:d0:48:79:c8:fb: 57:17:d1:37:d1:a2:66:73:7c:bb:c9:03:9c:79:15: 8d:21:f7:2b:19:64:2f:77:27:9b:32:ed:ed:a3:6c: 3a:01:ae:86:76:98:71:bb:0e:80:c4:08:3a:63:71: b9:8a:a5:25:ae:4e:df:93:df:fc:16:60:a6:d2:fe: 87:eb:06:04:b9:39:f6:63:f8:3f:0d:4a:f3:82:94: f0:10:80:fc:5a:5f:f5:ce:56:20:0f:d3:5a:ba:0c: 37:a1:0d:38:ae:90:82:1c:fb:30:e6:c7:df:f6:b6: 55:33:98:22:8c:96:a7:74:da:e8:32:79:8e:63:8b: 43:1a:4e:2d:e8:cb:96:b9:5b:f2:1e:e0:42:94:4d: 93:12:d1:0e:65:39:3b:8a:66:2f:08:0b:97:86:94: e5:05:8d:8b:af:ee:35:a6:09:c4:14:f6:a0:63:cb: 97:19:72:1d:f4:67:99:a0:e9:b5:e6:7e:b0:49:91: fa:60:cb:68:c9:46:06:80:d2:46:ac:c0:aa:5d:48: 00:b0:cc:e8:c0:14:8a:83:63:9b:58:49:90:02:34: 1a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3D:3B:B6:C8:CE:39:F6:0C:AA:FD:8F:07:8B:78:08:55:50:D9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c0:8a:02:6e:3f:10:3b:ec:e0:8e:0c:90:9c:0e:0a:14:1a: f8:5b:b4:62:4f:9d:81:c9:fb:c9:7c:70:4c:62:c8:6e:0c:85: 4c:d1:f9:18:d7:72:dd:b4:39:11:a0:54:2c:fa:3f:ec:53:04: dd:98:84:d7:52:d5:99:23:2b:d9:97:29:f8:58:f4:0d:30:68: 07:2e:a9:c4:26:3a:5b:a7:c0:e3:c1:4e:c5:99:ee:ba:7a:cb: 6a:53:f6:f4:2e:20:70:b3:78:0c:5d:8e:70:a7:5b:76:41:2f: c8:28:c5:3e:27:6d:cf:ca:68:01:7b:c8:53:4d:09:0d:f8:ed: f4:5f:6f:d3:0d:ee:ea:48:2c:b0:54:89:e8:e4:2a:dd:0e:fa: 25:25:81:8c:54:45:a0:4e:7a:5a:2f:88:c5:1f:a4:b0:50:bb: a1:f1:7c:10:0d:03:cb:87:54:9d:d6:e4:24:4f:9c:90:32:16: 19:d8:a2:f0:5c:eb:20:6e:d3:ed:bd:9e:a3:99:a8:84:3d:25: 1e:de:e3:22:ec:ac:c3:74:c6:40:77:04:02:94:32:a3:04:78: 06:06:64:43:1a:5b:a4:b8:2d:72:44:be:d3:4b:8b:1f:29:79: d1:07:d4:a0:a6:ea:65:fe:43:cb:cd:6a:73:8a:5a:95:01:30: a1:0a:1e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3ABnr8UzWP/1mcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTY5OTU1NTgtNWEwOS00NGEzLWI4YWUtMWM0YTFiZDE4ODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobc0whLzhsVIYemxAbnJm0rJZbE8Tr4bea/h Db+q7LDubVXEGr2o0Eh5yPtXF9E30aJmc3y7yQOceRWNIfcrGWQvdyebMu3to2w6 Aa6Gdphxuw6AxAg6Y3G5iqUlrk7fk9/8FmCm0v6H6wYEuTn2Y/g/DUrzgpTwEID8 Wl/1zlYgD9Naugw3oQ04rpCCHPsw5sff9rZVM5gijJandNroMnmOY4tDGk4t6MuW uVvyHuBClE2TEtEOZTk7imYvCAuXhpTlBY2Lr+41pgnEFPagY8uXGXId9GeZoOm1 5n6wSZH6YMtoyUYGgNJGrMCqXUgAsMzowBSKg2ObWEmQAjQaKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ9O7bIzjn2DKr9jweLeAhVUNkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDM5MGFhODgtODM5Mi0z ZTkyLWI5NmEtNjk0ZjYwNjdkMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7AigJuPxA77OCODJCcDgoUGvhbtGJPnYHJ+8l8cExiyG4MhUzR+RjX ct20ORGgVCz6P+xTBN2YhNdS1ZkjK9mXKfhY9A0waAcuqcQmOlunwOPBTsWZ7rp6 y2pT9vQuIHCzeAxdjnCnW3ZBL8goxT4nbc/KaAF7yFNNCQ347fRfb9MN7upILLBU iejkKt0O+iUlgYxURaBOeloviMUfpLBQu6HxfBANA8uHVJ3W5CRPnJAyFhnYovBc 6yBu0+29nqOZqIQ9JR7e4yLsrMN0xkB3BAKUMqMEeAYGZEMaW6S4LXJEvtNLix8p edEH1KCm6mX+Q8vNanOKWpUBMKEKHkQ= -----END CERTIFICATE-----Generated at Thu Aug 7 02:03:10 2025 by rpki-client