$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/670275fc-ada6-3cea-a087-6cfec41e56b4.roa File: 670275fc-ada6-3cea-a087-6cfec41e56b4.roa (raw, json) Hash identifier: ARDaqY71Gz4FRbflGFh0F4+MrbFKww2AvXoe5SwCjcU= Subject key identifier: C1:0D:3A:89:A1:7B:B7:94:ED:67:F0:82:8B:6E:82:29:59:1C:D3:D5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412401A6835E55EC11DF780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/670275fc-ada6-3cea-a087-6cfec41e56b4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.21.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:40:1a:68:35:e5:5e:c1:1d:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f9d223c3-71b8-4ccb-9f6f-9f0ce76d97b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:23:14:f4:d9:e0:85:11:35:3f:60:1c:d7:d8: 6c:3d:47:63:54:cb:f8:bc:fd:08:da:82:9d:fa:26: 93:9d:13:2c:d9:3d:7f:c1:a8:99:0a:39:e4:59:16: 28:1f:b6:d4:d1:75:a5:f1:e5:95:94:27:6f:07:da: 2f:1c:ec:27:af:3d:fa:08:03:1f:17:74:73:77:5d: 8c:4c:1f:3b:4a:67:f9:64:34:6f:70:1f:55:38:7c: e5:b9:d6:ac:db:b2:61:ed:b3:2b:c3:25:4a:23:60: 04:b5:2f:91:3b:52:5c:b9:d8:68:8c:4f:95:ae:88: ca:ed:8a:a3:29:82:71:25:82:95:34:9b:1e:64:f9: 7f:88:fb:67:f8:d8:11:6a:ef:90:6a:da:f2:ca:66: 19:6a:fa:08:e2:bc:37:88:ba:21:d6:45:57:4f:e0: 72:fb:5c:14:09:5e:40:c7:3f:0a:34:90:ca:0b:56: 88:63:05:2b:c6:0b:db:6e:be:c9:f6:5b:93:b6:a2: c5:f9:b6:7c:a6:06:38:6c:ac:e1:5d:fc:07:d9:3b: 22:09:71:14:a3:55:ed:7e:44:82:22:89:1d:5b:53: ee:73:5c:22:2b:90:2e:52:9f:6d:ad:dc:71:19:78: e4:45:52:06:5e:fa:cd:79:d1:b0:f9:19:4f:d6:e5: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0D:3A:89:A1:7B:B7:94:ED:67:F0:82:8B:6E:82:29:59:1C:D3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/670275fc-ada6-3cea-a087-6cfec41e56b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:34:76:22:32:c8:1c:17:a2:9c:39:45:4d:ff:68:12:4a:57: 72:78:59:2c:5e:19:86:b3:f8:6a:59:cd:81:f5:6c:c0:5d:b7: ae:25:a3:8b:25:6a:ec:cf:61:f9:4f:05:ac:80:8a:4a:3a:c6: 5d:fd:a2:f5:f0:9d:a9:e6:0d:47:59:ee:b9:5c:3e:b3:55:ac: de:16:4b:fa:59:ca:9d:74:ff:b0:91:c2:c8:61:f4:b2:b6:17: ef:a3:42:12:a7:46:bf:f7:ab:46:30:17:7a:31:f2:d3:ac:15: e5:98:f8:d8:10:4c:2b:33:2b:af:95:47:cb:28:47:5c:81:a6: 90:d5:35:5b:d7:30:8f:b0:9b:54:42:68:8f:0e:f4:75:c2:ab: a3:b2:89:27:58:6c:2a:ba:b8:ce:53:2a:5c:f6:b7:84:6f:a6: cd:c8:1d:28:92:0d:7d:13:5a:17:47:18:fd:46:96:32:0d:51: 51:7f:aa:47:4d:45:6a:98:c8:2e:52:88:6b:25:dd:e1:6e:4b: 2b:67:a4:68:87:42:c8:af:77:d9:ab:7f:5e:c3:71:90:9c:ce: 74:7d:d2:0c:13:cd:44:bf:67:be:fd:00:45:e3:ba:aa:86:28: 41:c3:51:12:56:dd:e4:a8:bf:d7:07:c0:d6:a5:53:25:b8:1c: 3c:c1:5d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkAaaDXlXsEd94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjlkMjIzYzMtNzFiOC00Y2NiLTlmNmYtOWYwY2U3NmQ5N2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiMU9NnghRE1P2Ac19hsPUdjVMv4vP0I2oKd +iaTnRMs2T1/waiZCjnkWRYoH7bU0XWl8eWVlCdvB9ovHOwnrz36CAMfF3Rzd12M TB87Smf5ZDRvcB9VOHzludas27Jh7bMrwyVKI2AEtS+RO1JcudhojE+VrojK7Yqj KYJxJYKVNJseZPl/iPtn+NgRau+QatryymYZavoI4rw3iLoh1kVXT+By+1wUCV5A xz8KNJDKC1aIYwUrxgvbbr7J9luTtqLF+bZ8pgY4bKzhXfwH2TsiCXEUo1XtfkSC IokdW1Puc1wiK5AuUp9trdxxGXjkRVIGXvrNedGw+RlP1uUItQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMENOomhe7eU7WfwgotugilZHNPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjcwMjc1ZmMtYWRhNi0z Y2VhLWEwODctNmNmZWM0MWU1NmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk0diIyyBwXopw5RU3/aBJKV3J4WSxeGYaz+GpZzYH1bMBdt64lo4sl auzPYflPBayAiko6xl39ovXwnanmDUdZ7rlcPrNVrN4WS/pZyp10/7CRwshh9LK2 F++jQhKnRr/3q0YwF3ox8tOsFeWY+NgQTCszK6+VR8soR1yBppDVNVvXMI+wm1RC aI8O9HXCq6OyiSdYbCq6uM5TKlz2t4Rvps3IHSiSDX0TWhdHGP1GljINUVF/qkdN RWqYyC5SiGsl3eFuSytnpGiHQsivd9mrf17DcZCcznR90gwTzUS/Z779AEXjuqqG KEHDURJW3eSov9cHwNalUyW4HDzBXR0= -----END CERTIFICATE-----Generated at Wed Aug 6 10:01:22 2025 by rpki-client