$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa File: 597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa (raw, json) Hash identifier: yCQXenHdWNvZrKX38Hwy3Kf9nUuF0Yv+6PM1IyCKvII= Subject key identifier: 96:77:3B:AA:E5:14:90:80:F0:06:05:6B:87:8C:DC:90:08:45:11:08 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8146391983F8E993E487C580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.21.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:39:19:83:f8:e9:93:e4:87:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=113f928d-337b-4e34-af7a-353a0357763d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:a5:c3:46:d0:15:b9:48:14:e0:19:1c:0d: 41:b0:49:f6:18:cb:82:d9:79:43:88:ec:e4:1e:81: 47:36:96:10:c9:1e:39:94:08:4f:f7:59:b6:62:2c: 6e:4d:cd:0f:96:1e:ab:2b:0c:d0:68:96:b1:15:6f: ff:de:6b:ce:14:fd:c6:b0:f1:8d:32:2b:92:8d:97: 60:4b:7d:0c:55:fb:2b:85:7b:37:05:96:81:41:93: ec:66:d1:3b:f1:cc:78:87:d0:cc:72:2a:00:db:55: 8b:b5:bd:e3:43:39:b9:9e:89:9a:74:76:f4:bd:fd: 10:21:5d:a7:16:e0:9a:b4:ec:e7:8b:c5:dc:71:5a: 16:ea:6d:1d:a6:46:9a:65:15:cc:75:57:44:28:09: fc:02:8c:d7:8c:72:02:87:c4:2c:a1:10:b0:95:59: 96:ce:d1:3c:53:8c:03:8d:aa:d5:38:33:a0:97:f1: 17:29:bd:55:86:f5:8f:e8:f6:cb:3f:e0:0b:7e:1c: 5f:be:29:3b:9f:58:74:24:6d:0f:be:f7:40:0f:0b: 6a:fc:c6:a5:4b:fe:ac:ad:f8:e3:4d:5c:18:d8:17: 84:f8:41:64:ec:5e:0b:07:5f:e8:ec:9d:70:7d:12: 99:2e:9f:9d:b7:34:b0:bb:0b:5e:ea:c2:ab:74:14: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:77:3B:AA:E5:14:90:80:F0:06:05:6B:87:8C:DC:90:08:45:11:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:74:2a:1e:6f:d0:23:6b:fd:3c:29:34:57:e1:70:80:7c:5a: 94:34:cf:05:0e:d5:12:80:f7:ed:65:47:51:4f:bb:2c:9f:6c: 51:8d:15:ef:f6:e6:1d:11:5c:6c:1c:89:17:7a:e7:02:90:9b: a3:43:1c:80:61:44:73:7d:99:8d:3e:d3:2b:10:20:12:de:1c: 6b:d8:24:a3:de:d3:84:fe:65:53:b7:42:5f:b3:ec:cf:4b:74: c9:11:bd:96:72:10:d0:82:9f:5a:47:68:53:c2:35:7b:76:73: 17:43:bd:45:55:ac:be:64:49:bb:87:f9:55:48:e8:db:72:84: 95:19:ab:b1:76:74:89:e1:fb:93:36:48:5d:db:8b:2a:40:78: d5:63:03:79:42:1e:c6:39:bc:4f:0e:3f:49:4a:64:8c:73:e1: 1b:b4:45:e0:9e:53:a9:06:71:71:9f:8b:4c:eb:73:de:d9:46: 7b:42:8d:17:3c:f9:19:3b:e5:63:30:06:49:f2:8e:6d:bc:6a: fb:7d:12:aa:8a:71:d9:93:b0:6e:dc:5c:44:c3:da:d0:3a:f9: 0a:d5:a7:4e:96:12:fe:84:32:6e:a7:a3:04:26:2d:03:dd:95: 2e:f5:c9:3d:47:a7:70:12:82:56:4a:5e:a7:c6:8c:20:bd:0d: 4d:e9:96:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRjkZg/jpk+SHxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MTEzZjkyOGQtMzM3Yi00ZTM0LWFmN2EtMzUzYTAzNTc3NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbqlw0bQFblIFOAZHA1BsEn2GMuC2XlDiOzk HoFHNpYQyR45lAhP91m2YixuTc0Plh6rKwzQaJaxFW//3mvOFP3GsPGNMiuSjZdg S30MVfsrhXs3BZaBQZPsZtE78cx4h9DMcioA21WLtb3jQzm5nomadHb0vf0QIV2n FuCatOzni8XccVoW6m0dpkaaZRXMdVdEKAn8AozXjHICh8QsoRCwlVmWztE8U4wD jarVODOgl/EXKb1VhvWP6PbLP+ALfhxfvik7n1h0JG0PvvdADwtq/MalS/6srfjj TVwY2BeE+EFk7F4LB1/o7J1wfRKZLp+dtzSwuwte6sKrdBSd4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ3O6rlFJCA8AYFa4eM3JAIRREIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTk3MzkzZWQtNjJkOC0z NWY3LTlmMmEtNjEzN2YwYWYzYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl0Kh5v0CNr/TwpNFfhcIB8WpQ0zwUO1RKA9+1lR1FPuyyfbFGNFe/2 5h0RXGwciRd65wKQm6NDHIBhRHN9mY0+0ysQIBLeHGvYJKPe04T+ZVO3Ql+z7M9L dMkRvZZyENCCn1pHaFPCNXt2cxdDvUVVrL5kSbuH+VVI6NtyhJUZq7F2dInh+5M2 SF3biypAeNVjA3lCHsY5vE8OP0lKZIxz4Ru0ReCeU6kGcXGfi0zrc97ZRntCjRc8 +Rk75WMwBknyjm28avt9EqqKcdmTsG7cXETD2tA6+QrVp06WEv6EMm6nowQmLQPd lS71yT1Hp3ASglZKXqfGjCC9DU3pljQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:18 2025 by rpki-client