$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa File: 58c98bd2-dcad-3956-be00-36aa73050259.roa (raw, json) Hash identifier: 03HxBdOAZF7hrG/37ZoifmuJvEvM+NIh8myp2DFYcw4= Subject key identifier: D6:89:50:14:D8:10:96:06:8A:73:73:A3:3A:CA:87:3A:18:EF:CC:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AB91C080FC24192F9481E7F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 30036 IP address blocks: 173.16.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:08:0f:c2:41:92:f9:48:1e:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=f541172b-2d43-4cf4-b0ad-1bf79cb48960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b4:83:0d:0c:e2:a2:6e:54:58:a9:f0:7f:3d: 0c:26:76:62:53:69:9e:f1:e4:6e:39:ed:aa:e3:33: 18:c5:50:63:3b:ee:24:ea:fa:ee:1c:f8:03:e8:ac: 66:39:66:07:58:14:d2:27:1f:2c:fb:dd:47:d1:44: 82:65:32:e1:14:62:c9:41:87:24:8e:88:d5:4a:d9: 77:26:d2:46:6b:5c:cc:59:a2:40:fb:43:cc:be:9a: 8c:cf:0d:1b:80:9b:1e:d1:1e:65:28:17:8d:1d:f4: 6c:38:ef:78:cc:69:2a:39:22:1c:3d:af:ec:74:17: c2:05:2d:86:8b:85:47:5c:d4:4c:43:5b:a2:31:e5: 83:08:3d:51:f7:a9:49:1f:b1:ec:42:b7:da:62:cc: 18:ef:e5:50:c0:d2:b2:ea:0d:1d:e9:b0:44:64:ad: 4e:d7:7d:c4:c8:a4:bc:5d:a7:35:30:bf:5d:51:fa: 44:cf:24:6c:ef:dc:53:ce:cb:d6:86:6f:b5:d8:06: e3:07:08:fa:a9:10:bd:8a:da:11:9e:71:2a:08:3e: db:1c:83:63:f2:8a:e6:73:a9:c5:b5:aa:58:7e:a8: 25:a7:9a:67:6d:ac:a8:7d:a4:4b:76:e2:b3:fc:bc: e1:06:0b:94:fb:68:cc:bb:e1:b7:bb:0f:4c:fb:be: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:89:50:14:D8:10:96:06:8A:73:73:A3:3A:CA:87:3A:18:EF:CC:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:40:b8:1b:27:81:4d:22:d1:8e:7b:84:36:73:6c:74:b6:d8: 02:23:74:c0:6c:4b:f2:eb:fd:e4:ed:17:d3:e2:08:de:67:6a: e8:8b:b1:9f:b5:c9:23:28:4f:12:5e:48:ba:4e:79:7e:1c:65: b7:99:ad:8d:1b:18:2f:b0:d7:b2:da:d3:02:67:29:0a:8f:e3: 12:0f:33:d4:e0:0f:31:a0:01:00:ce:3e:de:9f:85:1a:06:8c: 54:c2:fc:a3:31:ea:5f:ed:d6:c3:59:42:4e:40:18:c9:c5:92: 0e:13:e7:7b:7b:b0:9b:0b:c7:6d:96:2d:dd:ea:46:99:09:72: 02:41:5d:62:09:99:43:43:83:dc:6f:92:e4:6a:81:c0:4f:b9: 09:9a:e3:0d:06:9d:a3:72:54:a4:ee:7d:76:82:b9:5b:0a:f4: 00:60:13:4c:4c:fc:0d:80:8e:4b:b8:61:f9:4e:b0:50:4f:db: 53:f8:39:5a:91:3b:87:4d:a7:34:1c:2a:27:2b:c0:aa:a0:9c: ac:43:19:71:33:b7:d9:96:37:34:4e:f5:8e:d4:46:47:1b:ef: a6:69:a7:cd:2f:7b:bc:d1:cd:80:d1:ba:83:fb:49:51:a3:6b: 8d:07:20:f6:c7:e8:fc:e4:d7:09:86:a0:16:5f:ac:e6:7a:54: 1a:1e:fa:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HAgPwkGS+UgefwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjU0MTE3MmItMmQ0My00Y2Y0LWIwYWQtMWJmNzljYjQ4OTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLSDDQziom5UWKnwfz0MJnZiU2me8eRuOe2q 4zMYxVBjO+4k6vruHPgD6KxmOWYHWBTSJx8s+91H0USCZTLhFGLJQYckjojVStl3 JtJGa1zMWaJA+0PMvpqMzw0bgJse0R5lKBeNHfRsOO94zGkqOSIcPa/sdBfCBS2G i4VHXNRMQ1uiMeWDCD1R96lJH7HsQrfaYswY7+VQwNKy6g0d6bBEZK1O133EyKS8 Xac1ML9dUfpEzyRs79xTzsvWhm+12AbjBwj6qRC9itoRnnEqCD7bHINj8ormc6nF tapYfqglp5pnbayofaRLduKz/LzhBguU+2jMu+G3uw9M+748sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaJUBTYEJYGinNzozrKhzoY78xvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThjOThiZDItZGNhZC0z OTU2LWJlMDAtMzZhYTczMDUwMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVAuBsngU0i0Y57hDZzbHS22AIjdMBsS/Lr/eTtF9PiCN5nauiLsZ+1 ySMoTxJeSLpOeX4cZbeZrY0bGC+w17La0wJnKQqP4xIPM9TgDzGgAQDOPt6fhRoG jFTC/KMx6l/t1sNZQk5AGMnFkg4T53t7sJsLx22WLd3qRpkJcgJBXWIJmUNDg9xv kuRqgcBPuQma4w0GnaNyVKTufXaCuVsK9ABgE0xM/A2Ajku4YflOsFBP21P4OVqR O4dNpzQcKicrwKqgnKxDGXEzt9mWNzRO9Y7URkcb76Zpp80ve7zRzYDRuoP7SVGj a40HIPbH6Pzk1wmGoBZfrOZ6VBoe+n4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:16 2025 by rpki-client