$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa File: 8af8a31e-2de6-3582-8263-f79aff9c711e.roa (raw, json) Hash identifier: OUHkMpZPVvzmIT7z1IvYncwf+2ILw/o6WtfTlYxsR/8= Subject key identifier: C9:5A:72:DB:0A:2F:B3:02:A8:BE:3E:30:41:60:1A:08:B0:68:6C:9A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124B61A201F247D21CC580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.24.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4b:61:a2:01:f2:47:d2:1c:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fedbb489-2e70-49f8-951d-46ad550231e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:00:f2:ac:9f:87:15:a7:c8:3b:11:1e:65: 5d:71:e9:56:be:61:5c:78:b0:31:41:75:5d:07:b5: 54:d7:cd:dc:15:b9:7c:cf:26:0e:15:51:a3:57:a6: 0a:c8:75:a9:aa:66:28:e0:46:eb:71:a6:d3:c7:49: e8:85:10:95:77:ed:76:95:af:1e:21:dd:a8:22:21: d8:74:0e:2d:3a:96:fb:5a:01:2b:6d:cb:27:b1:37: 85:ec:bc:f7:22:39:ba:de:51:b9:2c:93:24:82:65: 07:2a:ee:d0:8a:c9:95:f5:8c:ca:f0:fe:d3:34:ea: 99:4a:c6:ff:b8:6c:e2:0f:31:fc:e7:d3:fc:98:f6: 6d:c6:2b:15:97:96:8b:99:04:2f:c1:3a:e2:d0:91: ea:a7:e7:71:7a:5f:2b:64:d2:47:7c:6b:da:c8:88: a1:d8:7b:bc:61:b7:8f:1b:a7:9f:db:a7:30:88:3b: 94:95:80:97:6b:ca:92:22:65:29:e0:5a:01:c5:ab: ce:3c:b8:bc:3b:cd:a1:1b:27:97:f0:02:d4:9e:c7: d5:02:3c:b2:31:38:5e:76:14:aa:8a:9f:2e:0c:ea: 4e:a9:14:a0:f1:ab:5b:dc:95:e6:be:60:f8:e7:ef: d4:9a:88:61:e8:3d:a5:43:65:aa:c5:36:67:37:da: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5A:72:DB:0A:2F:B3:02:A8:BE:3E:30:41:60:1A:08:B0:68:6C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7f:ef:90:2d:29:21:3a:3b:21:93:1e:17:b6:b1:c9:c4:d4: 3b:e4:56:2a:83:4c:fd:d3:44:e1:15:f1:9c:a6:df:34:d4:f0: f0:ec:c6:0b:24:40:f8:f3:d6:ae:eb:9c:23:ae:c2:de:a9:42: 13:2c:8c:9d:00:a5:98:ea:25:9b:03:d5:63:7e:c9:b3:2c:79: 1b:c4:c1:a4:5a:33:26:63:f7:40:b2:9b:58:9d:fa:3b:5f:57: d6:c9:31:d5:eb:4c:54:e6:76:97:94:25:c6:9a:00:eb:24:c9: aa:8e:59:67:30:d8:86:72:93:f4:ab:ca:af:82:9f:cd:4d:1b: 54:07:2a:40:98:ee:11:30:57:2e:91:f3:1e:1e:b1:94:9f:d9: 64:19:37:f1:b8:71:ad:3e:1f:a7:49:34:87:5f:2f:fb:73:0b: b2:7f:7f:d1:6a:26:b9:d6:9d:e7:0f:2b:59:63:80:9a:09:41: e3:80:c6:3c:69:10:d2:97:60:8b:ec:02:01:92:d8:e2:ca:b5: 5b:8f:c4:8a:04:92:bf:fc:3a:8a:21:ce:33:fb:6d:d6:db:2a: 5d:53:0c:04:d4:09:49:70:8d:c1:9b:87:49:87:7b:5a:e9:fa: 35:88:d5:52:43:c1:6f:d3:2b:5f:ce:0f:63:26:b8:a3:a3:57: 33:74:1d:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkthogHyR9IcxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmVkYmI0ODktMmU3MC00OWY4LTk1MWQtNDZhZDU1MDIzMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBkA8qyfhxWnyDsRHmVdcelWvmFceLAxQXVd B7VU183cFbl8zyYOFVGjV6YKyHWpqmYo4EbrcabTx0nohRCVd+12la8eId2oIiHY dA4tOpb7WgErbcsnsTeF7Lz3Ijm63lG5LJMkgmUHKu7QismV9YzK8P7TNOqZSsb/ uGziDzH859P8mPZtxisVl5aLmQQvwTri0JHqp+dxel8rZNJHfGvayIih2Hu8YbeP G6ef26cwiDuUlYCXa8qSImUp4FoBxavOPLi8O82hGyeX8ALUnsfVAjyyMThedhSq ip8uDOpOqRSg8atb3JXmvmD45+/Umohh6D2lQ2WqxTZnN9ruuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlactsKL7MCqL4+MEFgGgiwaGyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmOGEzMWUtMmRlNi0z NTgyLTgyNjMtZjc5YWZmOWM3MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1/75AtKSE6OyGTHhe2scnE1DvkViqDTP3TROEV8Zym3zTU8PDsxgsk QPjz1q7rnCOuwt6pQhMsjJ0ApZjqJZsD1WN+ybMseRvEwaRaMyZj90Cym1id+jtf V9bJMdXrTFTmdpeUJcaaAOskyaqOWWcw2IZyk/Sryq+Cn81NG1QHKkCY7hEwVy6R 8x4esZSf2WQZN/G4ca0+H6dJNIdfL/tzC7J/f9FqJrnWnecPK1ljgJoJQeOAxjxp ENKXYIvsAgGS2OLKtVuPxIoEkr/8OoohzjP7bdbbKl1TDATUCUlwjcGbh0mHe1rp +jWI1VJDwW/TK1/OD2MmuKOjVzN0HZQ= -----END CERTIFICATE-----Generated at Wed Aug 6 04:00:09 2025 by rpki-client