$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f1fd92-6b43-316d-93e0-55602719f73d.roa File: 84f1fd92-6b43-316d-93e0-55602719f73d.roa (raw, json) Hash identifier: 59uNdsD/Y7BYZ0ZZFGfjB8/eSUmDaU27tU1pP17V4Yk= Subject key identifier: C4:41:25:A4:BC:5A:A5:15:F8:AF:16:0D:FA:73:44:26:D4:76:05:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841256C6AE05BD5940517100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f1fd92-6b43-316d-93e0-55602719f73d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.26.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:56:c6:ae:05:bd:59:40:51:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5174323c-94f5-4b2c-9e68-7b97b92fc8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7b:64:61:84:6f:8c:23:5f:53:b4:e4:5e:c0: 94:4d:cb:97:7e:23:67:03:fd:dd:cb:1b:de:d1:92: ad:57:a4:9a:16:58:a9:9d:03:cc:9d:0d:c3:c9:6d: 2c:25:19:ba:6b:80:b3:16:d4:cf:23:bf:6e:50:0f: d5:1d:29:32:e6:81:a6:8e:9b:15:a6:fa:d0:57:a6: 76:a7:a7:59:56:cf:31:ec:04:b8:ff:a7:95:06:ac: d4:ed:6e:55:9d:43:5c:a3:85:ef:9d:d2:ba:e5:fc: c1:02:b0:26:25:9d:26:70:0c:5d:6b:69:65:fc:6c: 56:c7:d7:34:0d:1b:d9:9b:8f:18:96:c5:db:95:6e: 9f:47:8d:87:2a:6b:42:32:0e:80:e1:f9:5a:83:83: 56:a6:0d:4c:53:63:8a:22:6f:e0:4e:b5:f1:e2:a6: 85:a3:5e:f0:18:c1:22:bc:04:34:ce:90:2e:e2:e7: 97:1e:1f:9d:ad:7a:41:d5:a6:45:56:72:b9:d7:60: 1a:71:a6:26:ab:98:53:d0:d8:43:cd:68:76:cc:73: 08:73:1e:99:15:72:75:23:1d:c1:20:ca:1c:6e:de: b4:89:29:5b:5f:42:6d:f2:01:eb:a8:a5:82:1e:91: b6:64:95:6c:49:4d:8a:c1:95:2f:02:e7:d9:f2:25: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:25:A4:BC:5A:A5:15:F8:AF:16:0D:FA:73:44:26:D4:76:05:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f1fd92-6b43-316d-93e0-55602719f73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f1:b4:87:7c:b8:a3:30:0f:1f:aa:60:a2:13:d5:ab:39:a4: 51:e6:dd:99:70:c1:bb:b7:4c:15:0a:71:9f:70:6d:65:f0:86: 5b:56:f8:2b:8b:b6:1d:b6:54:3f:2a:a9:2f:d4:bd:97:a5:14: 3c:fb:9b:1b:fb:03:19:70:04:c4:37:d8:fe:5b:05:b4:b1:3f: 3a:fc:fe:3c:bb:9e:2c:14:16:2b:ea:48:c6:93:e3:6d:61:55: bb:84:4e:25:7d:37:a8:38:09:f3:d3:ea:a8:8c:07:d1:3e:de: 64:b2:53:89:fe:52:10:ef:57:44:9f:8b:bd:1f:b5:52:e3:2b: 7a:42:00:79:84:19:ea:20:0d:f6:ac:c9:26:fd:85:3b:a7:9c: f9:1d:98:8e:de:7b:84:4a:6b:5e:75:a2:ab:19:bd:80:54:22: 52:a8:c6:25:e7:ea:d5:dc:5f:87:fb:60:14:71:3f:d3:51:59: 9d:61:77:08:07:08:2d:f9:1f:3f:93:3d:4a:54:f9:7f:0f:73: 4e:35:bc:12:01:6f:d5:cc:6c:3b:0f:df:f5:64:34:44:77:cd: 93:ed:10:88:df:39:97:21:e9:52:30:2e:3f:2f:5d:61:ca:a3: 2e:e1:12:7a:10:de:1f:da:66:4a:4e:be:ad:4d:45:4a:6c:09: 9b:66:d7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElbGrgW9WUBRcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTE3NDMyM2MtOTRmNS00YjJjLTllNjgtN2I5N2I5MmZjOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAintkYYRvjCNfU7TkXsCUTcuXfiNnA/3dyxve 0ZKtV6SaFlipnQPMnQ3DyW0sJRm6a4CzFtTPI79uUA/VHSky5oGmjpsVpvrQV6Z2 p6dZVs8x7AS4/6eVBqzU7W5VnUNco4XvndK65fzBArAmJZ0mcAxda2ll/GxWx9c0 DRvZm48YlsXblW6fR42HKmtCMg6A4flag4NWpg1MU2OKIm/gTrXx4qaFo17wGMEi vAQ0zpAu4ueXHh+drXpB1aZFVnK512AacaYmq5hT0NhDzWh2zHMIcx6ZFXJ1Ix3B IMocbt60iSlbX0Jt8gHrqKWCHpG2ZJVsSU2KwZUvAufZ8iUM0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRBJaS8WqUV+K8WDfpzRCbUdgVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRmMWZkOTItNmI0My0z MTZkLTkzZTAtNTU2MDI3MTlmNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnxtId8uKMwDx+qYKIT1as5pFHm3Zlwwbu3TBUKcZ9wbWXwhltW+CuL th22VD8qqS/UvZelFDz7mxv7AxlwBMQ32P5bBbSxPzr8/jy7niwUFivqSMaT421h VbuETiV9N6g4CfPT6qiMB9E+3mSyU4n+UhDvV0Sfi70ftVLjK3pCAHmEGeogDfas ySb9hTunnPkdmI7ee4RKa151oqsZvYBUIlKoxiXn6tXcX4f7YBRxP9NRWZ1hdwgH CC35Hz+TPUpU+X8Pc041vBIBb9XMbDsP3/VkNER3zZPtEIjfOZch6VIwLj8vXWHK oy7hEnoQ3h/aZkpOvq1NRUpsCZtm1xw= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:01 2025 by rpki-client