$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa File: 96e6c965-0587-3b22-ae88-904374045cbc.roa (raw, json) Hash identifier: yz9AkDdXIw3iOx1+yKf92/LbqmzqgIcnaKDxgGYsS5I= Subject key identifier: 74:FD:1A:29:E9:9A:26:D6:06:08:27:C3:22:88:73:DB:20:67:71:DB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A814626275110001529CD8E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.21.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:26:27:51:10:00:15:29:cd:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=be6a64ab-caee-47b9-bc73-68a393d26e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:1a:9c:80:85:5d:53:bd:e3:20:f0:11:f5: e6:36:f2:ff:92:6d:42:59:71:00:dd:cd:0d:56:64: 37:6c:cf:f3:51:4f:ac:0c:d3:2e:7b:06:73:0d:38: b6:18:c2:96:30:0f:00:d9:99:f4:ca:f8:80:18:77: 68:a5:15:8e:73:4c:3e:f4:db:6f:1c:89:a4:6e:70: 23:9d:0d:fb:b1:07:f9:57:15:11:4d:ff:71:41:a8: 3e:92:4e:7a:33:2a:7b:90:8f:e4:73:fd:1c:c0:8c: 00:25:c2:8e:2c:15:2b:ba:03:3a:35:e0:f7:fa:75: d6:33:1b:ec:0b:52:e4:00:74:4c:33:85:ba:62:35: be:e1:b6:96:5d:7a:28:1b:86:34:4d:14:11:ff:45: 8f:3a:ec:0b:68:ec:0d:a1:40:e5:7a:18:f0:b5:fa: 6d:21:49:32:d0:f8:7d:9e:8f:3b:44:76:14:dc:17: c0:11:8e:8f:6b:9d:b0:b3:35:ae:64:98:de:0f:b7: c6:63:0a:ad:e5:5c:83:72:71:ed:cf:74:66:7f:71: d2:cc:6b:01:e7:c9:84:9c:ba:ca:a1:28:7d:86:2e: 1a:20:1d:b9:0e:85:9b:b5:9b:fe:55:1b:9f:40:11: 2d:00:cc:1a:c0:85:4e:ab:b0:1d:48:64:2c:8e:60: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FD:1A:29:E9:9A:26:D6:06:08:27:C3:22:88:73:DB:20:67:71:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3d:8c:d1:73:fa:01:18:60:d8:64:dd:22:16:0f:b4:60:4c: c4:4b:1e:64:cf:34:ec:a6:2c:e3:1b:de:d6:1e:b1:64:2e:5c: 87:44:e1:20:02:17:d9:c1:2f:14:70:cb:7b:bb:56:af:dc:2c: 3d:f6:3f:ef:f8:2a:6e:5e:ed:b2:53:85:29:f6:e8:22:61:92: f6:53:95:43:25:59:ad:e1:55:b5:57:de:03:0a:4f:f1:38:84: cb:bb:7a:ab:e7:fe:85:c4:35:62:d6:08:eb:2b:04:3d:6b:1a: a5:cc:d1:58:af:1b:a4:32:d6:c0:3e:4f:c9:53:01:3c:d9:3e: 72:4d:38:9f:ab:99:0d:c0:f4:f3:f9:62:6d:1f:6f:6b:7c:9f: 29:a1:2d:1f:d4:50:96:35:29:98:e8:ce:47:7a:75:99:f4:d4: 5d:d1:eb:60:95:71:16:db:ee:1c:68:26:93:46:49:5b:8f:92: 6e:29:fb:4f:5b:cf:80:ea:a2:c4:01:1f:dd:a9:27:cb:b7:87: 17:67:49:d5:e8:38:51:e9:12:62:fb:51:42:ee:96:43:dc:00: 5b:1c:9c:3b:2b:47:ff:29:b5:82:8e:43:e5:37:c5:30:7f:81: a9:ff:9f:a1:04:79:04:ac:15:1f:a4:a1:ae:ef:d8:d7:29:bc: fa:25:01:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiYnURAAFSnNjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YmU2YTY0YWItY2FlZS00N2I5LWJjNzMtNjhhMzkzZDI2ZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD4anICFXVO94yDwEfXmNvL/km1CWXEA3c0N VmQ3bM/zUU+sDNMuewZzDTi2GMKWMA8A2Zn0yviAGHdopRWOc0w+9NtvHImkbnAj nQ37sQf5VxURTf9xQag+kk56Myp7kI/kc/0cwIwAJcKOLBUrugM6NeD3+nXWMxvs C1LkAHRMM4W6YjW+4baWXXooG4Y0TRQR/0WPOuwLaOwNoUDlehjwtfptIUky0Ph9 no87RHYU3BfAEY6Pa52wszWuZJjeD7fGYwqt5VyDcnHtz3Rmf3HSzGsB58mEnLrK oSh9hi4aIB25DoWbtZv+VRufQBEtAMwawIVOq7AdSGQsjmB28wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHT9GinpmibWBggnwyKIc9sgZ3HbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTZlNmM5NjUtMDU4Ny0z YjIyLWFlODgtOTA0Mzc0MDQ1Y2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU9jNFz+gEYYNhk3SIWD7RgTMRLHmTPNOymLOMb3tYesWQuXIdE4SAC F9nBLxRwy3u7Vq/cLD32P+/4Km5e7bJThSn26CJhkvZTlUMlWa3hVbVX3gMKT/E4 hMu7eqvn/oXENWLWCOsrBD1rGqXM0VivG6Qy1sA+T8lTATzZPnJNOJ+rmQ3A9PP5 Ym0fb2t8nymhLR/UUJY1KZjozkd6dZn01F3R62CVcRbb7hxoJpNGSVuPkm4p+09b z4DqosQBH92pJ8u3hxdnSdXoOFHpEmL7UULulkPcAFscnDsrR/8ptYKOQ+U3xTB/ gan/n6EEeQSsFR+koa7v2NcpvPolAQ8= -----END CERTIFICATE-----Generated at Wed Aug 6 13:02:40 2025 by rpki-client