$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/659ce382-3834-3c8a-a344-32fe325eeb8f.roa File: 659ce382-3834-3c8a-a344-32fe325eeb8f.roa (raw, json) Hash identifier: lnFOJlEjXTcfvXIdX+G5Krb6qyJGNwRbShkuWhn5qfM= Subject key identifier: 3D:76:7B:0E:B8:BF:6A:94:8F:20:C5:A0:53:8C:AA:6A:37:66:20:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81464A79F6348080D060EE20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/659ce382-3834-3c8a-a344-32fe325eeb8f.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.24.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:4a:79:f6:34:80:80:d0:60:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2938e0a1-4f66-49ca-a701-3ad9d3b09d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9c:bc:03:c7:cd:c0:74:a5:07:53:b0:b8:24: 0e:74:f2:ec:a0:96:0e:ef:c6:10:5f:3d:95:4e:7d: e1:5e:36:8f:2a:56:39:9c:23:b2:3b:49:92:3b:3d: b9:7f:95:e2:a7:43:88:f7:f0:99:22:04:4d:5a:2a: 16:d5:7c:10:8d:0f:4e:c3:9d:fa:2d:63:2c:b8:2e: 68:f1:49:4d:18:34:21:f4:c5:22:f0:41:d2:63:53: 2b:cd:df:0b:ad:6b:65:25:5b:c1:77:fe:36:fb:e7: 3c:f7:1f:6f:40:d4:06:01:ec:fd:21:cf:c5:21:7f: ba:5f:7c:45:b2:62:32:41:e7:d8:ed:48:89:5c:84: 71:33:61:88:33:a8:91:32:ff:b7:2c:40:a7:e9:2c: e1:fa:44:81:70:7a:18:24:6b:98:ee:b3:ec:ef:e0: 5e:ff:91:83:c7:34:3d:cb:5a:21:f5:02:a2:00:c1: ac:33:6e:bc:32:eb:54:f6:da:8b:06:ae:89:e0:84: 40:9e:73:10:09:80:06:2b:ab:4a:a7:7b:38:03:e3: 2b:6e:1b:13:e8:25:b5:34:ea:0f:de:d1:70:c9:13: 61:cf:93:9c:97:30:0b:d7:80:37:7f:f3:da:96:63: cb:61:06:f2:82:2a:d7:9d:f8:ff:29:85:c1:b8:71: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:76:7B:0E:B8:BF:6A:94:8F:20:C5:A0:53:8C:AA:6A:37:66:20:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/659ce382-3834-3c8a-a344-32fe325eeb8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:58:f9:32:5f:ac:db:bf:0c:8a:73:32:b1:64:81:0c:8a:27: 2a:3b:70:7c:3a:ac:f2:94:2b:e6:13:72:22:83:c5:0a:d5:18: 66:f2:5e:ef:fb:80:34:1c:37:eb:4a:8d:80:4f:b6:1d:03:84: 46:e9:d8:13:04:29:cc:e2:3e:ce:dc:8b:84:dc:75:60:7f:bc: 21:06:c5:44:d7:e5:9a:fd:99:00:96:72:11:f5:c3:5e:d0:49: b9:4c:1c:d9:47:48:10:e0:84:ff:f8:c4:7e:a3:c6:4b:0d:fc: 3c:61:8f:04:8e:d8:10:73:c8:54:da:b9:96:3f:4f:3f:91:6f: 55:da:d1:ae:09:b1:cd:1b:79:10:36:a8:0e:48:9e:25:4e:16: b7:a1:e1:25:8f:8b:e3:3d:8c:30:f9:ed:04:af:20:ae:ae:4c: 93:6b:b6:52:2c:52:34:b3:d4:f0:9b:37:aa:c8:f6:2c:81:4b: b0:36:36:c0:43:37:55:e2:3a:d7:91:86:a6:92:f5:80:75:d5: f2:bc:0a:e0:13:62:66:ed:b2:d1:3f:aa:01:02:bc:0a:a9:a0: 48:7b:54:7e:5c:76:3e:54:2c:8d:95:ae:a1:70:37:99:c5:8f: 3c:05:78:1b:95:97:d3:d6:2c:70:95:94:8f:0c:cc:06:f5:2a: 2b:3e:39:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkp59jSAgNBg7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MjkzOGUwYTEtNGY2Ni00OWNhLWE3MDEtM2FkOWQzYjA5ZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpy8A8fNwHSlB1OwuCQOdPLsoJYO78YQXz2V Tn3hXjaPKlY5nCOyO0mSOz25f5Xip0OI9/CZIgRNWioW1XwQjQ9Ow536LWMsuC5o 8UlNGDQh9MUi8EHSY1Mrzd8LrWtlJVvBd/42++c89x9vQNQGAez9Ic/FIX+6X3xF smIyQefY7UiJXIRxM2GIM6iRMv+3LECn6Szh+kSBcHoYJGuY7rPs7+Be/5GDxzQ9 y1oh9QKiAMGsM268MutU9tqLBq6J4IRAnnMQCYAGK6tKp3s4A+MrbhsT6CW1NOoP 3tFwyRNhz5OclzAL14A3f/PalmPLYQbygirXnfj/KYXBuHHQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD12ew64v2qUjyDFoFOMqmo3ZiBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjU5Y2UzODItMzgzNC0z YzhhLWEzNDQtMzJmZTMyNWVlYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5Y+TJfrNu/DIpzMrFkgQyKJyo7cHw6rPKUK+YTciKDxQrVGGbyXu/7 gDQcN+tKjYBPth0DhEbp2BMEKcziPs7ci4TcdWB/vCEGxUTX5Zr9mQCWchH1w17Q SblMHNlHSBDghP/4xH6jxksN/DxhjwSO2BBzyFTauZY/Tz+Rb1Xa0a4Jsc0beRA2 qA5IniVOFreh4SWPi+M9jDD57QSvIK6uTJNrtlIsUjSz1PCbN6rI9iyBS7A2NsBD N1XiOteRhqaS9YB11fK8CuATYmbtstE/qgECvAqpoEh7VH5cdj5ULI2VrqFwN5nF jzwFeBuVl9PWLHCVlI8MzAb1Kis+ObE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:47 2025 by rpki-client