$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4481b2e4-fc23-34e6-a24e-7a4a0d4e6877.roa File: 4481b2e4-fc23-34e6-a24e-7a4a0d4e6877.roa (raw, json) Hash identifier: CSIRe0XMYJFIfHpfzrGP/pCPOS+MfD/4O1l0twW0xKY= Subject key identifier: 66:28:86:42:1D:88:3E:FB:7D:CF:6A:63:7D:CE:7D:8A:20:2A:2E:88 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AB91BDE5404B215C440923E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4481b2e4-fc23-34e6-a24e-7a4a0d4e6877.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 30036 IP address blocks: 173.21.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:de:54:04:b2:15:c4:40:92:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=23241a45-42f1-4a41-9289-332ef7cff8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:6c:a3:58:aa:80:34:97:b2:25:a6:3e:ba: 2c:34:51:34:15:38:cb:77:95:58:86:65:08:a8:16: 83:53:21:ca:5e:b3:c3:84:3d:78:30:f9:20:ee:06: 66:42:b7:1e:ee:f5:07:42:b1:e5:19:86:4f:87:cd: 77:cc:66:a1:52:c7:00:12:0b:b9:6f:aa:da:47:44: ed:fa:e3:9c:e4:64:7c:91:da:66:97:dc:50:b3:36: 96:aa:6a:1b:fa:5e:7c:77:9e:fe:ae:99:a3:a6:1a: 88:fd:44:47:44:d1:9f:e3:40:a1:ac:75:61:48:4b: 79:1c:79:ae:05:a9:15:30:87:1a:01:40:c7:b7:89: 5d:e1:ac:e4:d7:f5:84:0f:e9:ad:50:07:5f:a5:3d: 48:6b:b4:48:9c:47:dc:30:3b:0b:7b:5d:40:56:eb: 7a:f2:97:d9:23:ca:57:10:ea:4e:77:bd:e4:bc:e6: c4:ef:00:bd:fd:a5:c9:8d:61:37:91:8c:0d:8e:80: 91:38:22:50:2d:db:74:52:83:d5:54:a5:38:3b:91: 5c:bb:af:cb:e3:e6:9c:17:f8:6b:8c:52:89:3b:ba: 6b:24:8e:51:7a:b4:85:93:57:62:77:7f:be:85:ab: 63:e8:7e:bc:19:01:a4:35:24:00:63:87:43:60:03: d0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:86:42:1D:88:3E:FB:7D:CF:6A:63:7D:CE:7D:8A:20:2A:2E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4481b2e4-fc23-34e6-a24e-7a4a0d4e6877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:85:a9:4a:13:54:ab:0d:4d:0e:44:76:67:0f:f5:0c:c3:81: 25:35:32:c8:d9:45:2a:5e:8e:10:fe:d1:23:86:f4:dc:3a:ff: d7:d9:d3:67:ca:99:1e:fd:21:42:5b:36:94:de:ee:c6:39:e5: a9:93:c8:05:60:d2:9b:ba:ee:66:91:f7:64:87:f2:fc:42:4b: f8:6e:af:96:26:ef:27:08:5b:5e:9c:cc:95:43:d9:91:fa:ba: 7f:4f:c3:35:bb:31:a8:24:80:96:bd:a3:5c:27:fc:38:15:38: 59:f0:6a:12:81:90:0f:98:34:e5:a8:21:40:a6:3c:85:70:e7: 9c:de:fb:01:2a:f7:ae:1d:5b:99:0b:2d:9b:85:21:eb:be:5d: 53:61:47:7d:1b:72:9d:25:38:d6:79:9e:80:48:24:14:df:35: 19:06:b7:ba:4a:db:51:b8:6b:18:46:e6:f2:02:aa:22:ad:14: 5e:3b:96:20:ba:c1:76:ef:b1:06:4e:b2:38:ca:aa:ed:8d:35: e1:e9:0b:28:1e:3c:9b:36:b9:55:90:f4:64:76:e5:57:df:4e: c1:32:1b:13:40:ef:9c:fa:ba:22:fc:4b:b4:d6:4f:71:56:b4: d1:e4:3d:b6:1a:9a:62:96:c8:b2:ed:e2:6f:cf:7e:58:07:08: 94:75:c2:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G95UBLIVxECSPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjMyNDFhNDUtNDJmMS00YTQxLTkyODktMzMyZWY3Y2ZmOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Fso1iqgDSXsiWmProsNFE0FTjLd5VYhmUI qBaDUyHKXrPDhD14MPkg7gZmQrce7vUHQrHlGYZPh813zGahUscAEgu5b6raR0Tt +uOc5GR8kdpml9xQszaWqmob+l58d57+rpmjphqI/URHRNGf40ChrHVhSEt5HHmu BakVMIcaAUDHt4ld4azk1/WED+mtUAdfpT1Ia7RInEfcMDsLe11AVut68pfZI8pX EOpOd73kvObE7wC9/aXJjWE3kYwNjoCROCJQLdt0UoPVVKU4O5Fcu6/L4+acF/hr jFKJO7prJI5RerSFk1did3++hatj6H68GQGkNSQAY4dDYAPQ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYohkIdiD77fc9qY33OfYogKi6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDQ4MWIyZTQtZmMyMy0z NGU2LWEyNGUtN2E0YTBkNGU2ODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeFqUoTVKsNTQ5EdmcP9QzDgSU1MsjZRSpejhD+0SOG9Nw6/9fZ02fK mR79IUJbNpTe7sY55amTyAVg0pu67maR92SH8vxCS/hur5Ym7ycIW16czJVD2ZH6 un9PwzW7MagkgJa9o1wn/DgVOFnwahKBkA+YNOWoIUCmPIVw55ze+wEq964dW5kL LZuFIeu+XVNhR30bcp0lONZ5noBIJBTfNRkGt7pK21G4axhG5vICqiKtFF47liC6 wXbvsQZOsjjKqu2NNeHpCygePJs2uVWQ9GR25VffTsEyGxNA75z6uiL8S7TWT3FW tNHkPbYammKWyLLt4m/PflgHCJR1wmY= -----END CERTIFICATE-----Generated at Tue Aug 5 23:09:28 2025 by rpki-client