$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59ae7d72-7f2f-391f-b488-a4d060169ea4.roa File: 59ae7d72-7f2f-391f-b488-a4d060169ea4.roa (raw, json) Hash identifier: APooKM82u0FbK8k/0O97eZ/orkTZ7ammfaYyvBc1m+o= Subject key identifier: A9:CD:CB:49:98:B6:E7:44:2B:AA:64:BB:25:3A:FB:C7:27:C5:73:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124F96C7E95DBB87F499C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59ae7d72-7f2f-391f-b488-a4d060169ea4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.19.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4f:96:c7:e9:5d:bb:87:f4:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e8592bba-8716-48fb-9d9f-c7db6e9df76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9e:9a:ad:43:83:69:9c:c8:eb:03:43:94:84: 94:be:47:ca:77:5f:12:ed:04:73:ad:0f:42:ba:ea: 57:15:93:8d:c5:ca:2b:90:8d:ad:96:e7:ef:38:40: b5:84:57:22:08:f3:05:79:1e:f5:3e:15:7e:b9:d4: 7a:21:09:ad:0c:18:c9:af:4a:89:cb:74:1f:c7:d0: 59:17:93:d4:2d:6e:19:3c:4f:05:f7:80:e7:c2:3c: 2c:a5:41:2e:cd:53:05:cf:ac:d5:58:4d:dc:37:fd: 03:72:ed:81:21:52:1b:23:35:74:b6:b7:b8:cd:4c: b3:7b:d9:6a:f8:3a:29:66:44:9c:49:0c:a2:c4:b1: fd:3a:8c:6e:44:2b:7a:9d:11:f0:9c:ee:1d:dc:f0: 33:16:23:5c:66:94:69:56:9f:72:8e:79:9e:d0:e6: d0:6d:14:55:45:16:3e:13:52:93:cd:ca:fb:e9:83: 13:c8:4d:89:49:f1:4e:8c:f9:c1:90:eb:49:2b:50: 32:29:e2:44:41:c7:47:f4:10:b9:6b:a2:72:a3:92: a5:59:b3:c5:a2:3d:d7:88:80:d5:6d:6a:3f:6e:64: 73:61:6a:b2:41:85:2d:55:5a:d0:57:80:4e:8a:b9: 01:ed:06:e8:06:db:e1:25:76:b5:1f:95:6f:59:db: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CD:CB:49:98:B6:E7:44:2B:AA:64:BB:25:3A:FB:C7:27:C5:73:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59ae7d72-7f2f-391f-b488-a4d060169ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:88:6b:a6:1c:ce:ae:27:67:99:50:6e:7b:12:9a:8e:07:c3: 38:c5:e3:b3:d5:96:25:34:b5:37:09:96:9f:b5:37:af:05:b0: dd:6d:f2:c4:00:89:2e:4b:80:d2:84:c9:f9:db:29:63:2e:3d: f1:dd:92:2d:01:4b:dc:13:fc:01:d5:c9:e7:62:8e:ef:6a:0f: 95:d1:5f:55:39:c7:1e:e7:bd:3b:f7:54:a2:f6:c2:3f:f9:69: 05:19:16:f8:ba:69:56:e7:ac:59:ac:64:37:d2:36:39:c5:5e: 2d:76:37:19:74:f2:ac:a7:18:af:76:d4:01:c1:2b:df:82:8f: cc:1a:7d:f1:8e:b8:36:33:bc:b8:57:d5:f8:a9:2e:78:88:1e: 3a:35:1f:42:03:05:0f:6c:92:e7:c5:77:46:b3:df:cd:ab:ee: b3:e6:e0:98:90:92:0d:3d:fe:09:6e:37:57:66:c6:ee:94:02: d4:ce:4d:6e:29:1c:e4:a6:3c:a8:9e:4e:96:a0:dd:d5:98:55: b7:20:f4:c5:38:6f:49:07:3b:25:ad:91:14:f8:e6:49:e7:42: 30:b9:af:6e:e2:54:6c:19:49:e1:7f:98:e9:68:1c:6b:a0:c6: de:15:a6:36:11:31:b3:04:4f:48:28:d5:79:7d:ef:45:1b:40: 29:96:74:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEk+Wx+ldu4f0mcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTg1OTJiYmEtODcxNi00OGZiLTlkOWYtYzdkYjZlOWRmNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp6arUODaZzI6wNDlISUvkfKd18S7QRzrQ9C uupXFZONxcorkI2tlufvOEC1hFciCPMFeR71PhV+udR6IQmtDBjJr0qJy3Qfx9BZ F5PULW4ZPE8F94DnwjwspUEuzVMFz6zVWE3cN/0Dcu2BIVIbIzV0tre4zUyze9lq +DopZkScSQyixLH9OoxuRCt6nRHwnO4d3PAzFiNcZpRpVp9yjnme0ObQbRRVRRY+ E1KTzcr76YMTyE2JSfFOjPnBkOtJK1AyKeJEQcdH9BC5a6Jyo5KlWbPFoj3XiIDV bWo/bmRzYWqyQYUtVVrQV4BOirkB7QboBtvhJXa1H5VvWduDkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnNy0mYtudEK6pkuyU6+8cnxXMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTlhZTdkNzItN2YyZi0z OTFmLWI0ODgtYTRkMDYwMTY5ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSIa6Yczq4nZ5lQbnsSmo4HwzjF47PVliU0tTcJlp+1N68FsN1t8sQA iS5LgNKEyfnbKWMuPfHdki0BS9wT/AHVyediju9qD5XRX1U5xx7nvTv3VKL2wj/5 aQUZFvi6aVbnrFmsZDfSNjnFXi12Nxl08qynGK921AHBK9+Cj8waffGOuDYzvLhX 1fipLniIHjo1H0IDBQ9skufFd0az382r7rPm4JiQkg09/gluN1dmxu6UAtTOTW4p HOSmPKieTpag3dWYVbcg9MU4b0kHOyWtkRT45knnQjC5r27iVGwZSeF/mOloHGug xt4VpjYRMbMET0go1Xl970UbQCmWdCo= -----END CERTIFICATE-----Generated at Wed Aug 6 04:12:16 2025 by rpki-client