$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa File: 84b5df57-c963-3224-b71c-932349312f1b.roa (raw, json) Hash identifier: cHrk8qKtXBRUi4e2MNxzzf/apXN8VYNuZ624iTrJAQ0= Subject key identifier: E6:E8:7A:33:FC:00:F4:1C:A9:70:DB:13:69:F3:84:F1:D3:76:C2:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410EC6D94DC79B5B01AB200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.21.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:ec:6d:94:dc:79:b5:b0:1a:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=86fd25f7-9dc6-4b89-ade8-3574c29dc7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:71:c3:20:f7:6d:f9:43:a1:14:09:da:6c: e1:7d:71:34:29:ec:c8:cf:ff:62:36:0a:cd:cf:28: e2:82:c0:d8:ec:1e:ce:2b:e4:2c:a5:d2:23:e6:f2: 37:3a:b6:fa:32:40:96:2c:bc:ac:71:a6:8b:24:fe: f0:7b:d3:da:4f:c8:a4:93:4b:4e:bb:70:f3:d3:97: 48:54:37:c5:c9:50:96:f5:63:ac:cc:06:51:ad:cc: 48:59:26:32:e5:d2:c9:15:37:39:23:20:5a:94:a3: 57:01:a9:1c:33:d9:9c:e5:67:cc:8a:5d:b5:f0:09: ad:ec:40:c5:42:e6:81:17:5b:60:7c:ef:69:19:e5: c5:fa:5a:e0:cd:49:a2:e2:85:e0:e6:f1:18:f0:12: ed:1e:d2:13:2a:fe:23:f6:75:9b:f7:77:f9:80:e6: 55:d6:e8:39:77:b3:61:06:3c:a5:03:31:db:87:b1: f8:70:24:a5:61:82:df:b3:32:df:e3:ee:25:7a:41: 0a:5d:8c:0e:f1:df:93:24:1b:74:32:de:5a:22:5e: a3:33:16:6f:63:f4:04:26:f2:65:f2:af:70:bd:84: d5:c7:8e:ab:68:53:66:af:79:70:b2:3a:29:41:c0: 8b:15:b2:fc:69:69:79:2f:19:27:d6:6a:2f:78:07: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E8:7A:33:FC:00:F4:1C:A9:70:DB:13:69:F3:84:F1:D3:76:C2:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84b5df57-c963-3224-b71c-932349312f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b5:49:86:4e:1e:1b:7f:ef:43:8c:4f:37:38:d6:95:c8:f9: f5:6f:81:0b:6c:58:6c:e5:a8:fb:78:14:f3:2b:59:d1:a8:7b: eb:64:2e:8c:ab:80:f2:6a:4a:b9:23:cb:c3:66:ad:37:12:2c: 4a:b0:98:23:2c:64:74:69:22:89:ba:ed:0e:a2:66:0d:ad:5b: 94:bb:f2:b4:a6:bd:0a:96:5b:dc:f7:8f:90:5f:70:21:9f:ac: ae:65:63:4c:6c:50:d2:bf:93:a2:fe:11:1f:63:de:01:d1:4c: c4:e9:f2:54:2b:be:cb:78:06:87:40:6f:8f:9f:7b:05:20:24: 5a:93:df:14:ca:44:f6:ea:54:d5:18:6e:47:bc:88:4b:ec:e6: ed:d2:f8:1c:d5:2b:a4:c9:6a:7e:92:39:f5:cc:12:74:a6:f8: 2d:30:ca:80:24:45:23:e7:9e:24:fa:51:c4:54:23:af:ab:c6: 96:84:28:96:bf:32:45:f9:4b:00:0b:d7:07:0a:ef:24:0a:65: 24:5f:fe:60:c9:9e:9f:b4:69:f9:03:94:ce:7f:65:bc:8c:1a: 1e:3c:a1:b6:6a:3b:12:32:ae:01:c1:b3:04:59:ef:a9:ba:44: af:ec:5c:02:69:b7:ab:95:80:e9:0b:a2:ad:4f:28:d7:4d:c0: 0d:fb:c0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOxtlNx5tbAasgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODZmZDI1ZjctOWRjNi00Yjg5LWFkZTgtMzU3NGMyOWRjN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7NxwyD3bflDoRQJ2mzhfXE0KezIz/9iNgrN zyjigsDY7B7OK+QspdIj5vI3Orb6MkCWLLyscaaLJP7we9PaT8ikk0tOu3Dz05dI VDfFyVCW9WOszAZRrcxIWSYy5dLJFTc5IyBalKNXAakcM9mc5WfMil218Amt7EDF QuaBF1tgfO9pGeXF+lrgzUmi4oXg5vEY8BLtHtITKv4j9nWb93f5gOZV1ug5d7Nh BjylAzHbh7H4cCSlYYLfszLf4+4lekEKXYwO8d+TJBt0Mt5aIl6jMxZvY/QEJvJl 8q9wvYTVx46raFNmr3lwsjopQcCLFbL8aWl5Lxkn1moveAc9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOboejP8APQcqXDbE2nzhPHTdsJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRiNWRmNTctYzk2My0z MjI0LWI3MWMtOTMyMzQ5MzEyZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm1SYZOHht/70OMTzc41pXI+fVvgQtsWGzlqPt4FPMrWdGoe+tkLoyr gPJqSrkjy8NmrTcSLEqwmCMsZHRpIom67Q6iZg2tW5S78rSmvQqWW9z3j5BfcCGf rK5lY0xsUNK/k6L+ER9j3gHRTMTp8lQrvst4BodAb4+fewUgJFqT3xTKRPbqVNUY bke8iEvs5u3S+BzVK6TJan6SOfXMEnSm+C0wyoAkRSPnniT6UcRUI6+rxpaEKJa/ MkX5SwAL1wcK7yQKZSRf/mDJnp+0afkDlM5/ZbyMGh48obZqOxIyrgHBswRZ76m6 RK/sXAJpt6uVgOkLoq1PKNdNwA37wAE= -----END CERTIFICATE-----Generated at Wed Aug 6 03:59:44 2025 by rpki-client