$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa File: 973cd140-cab6-388f-8e11-26b2f8fc5390.roa (raw, json) Hash identifier: g8uiGCqI0QmU2KbmSaQdEYjAKJRhD04m8uci/vpPKV4= Subject key identifier: 10:10:BA:66:DB:4E:4F:8F:64:4D:3A:45:59:70:36:E0:50:3A:06:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB7351ADDFDA76AC527FC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.21.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:73:51:ad:df:da:76:ac:52:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9a01bf36-d086-449b-946a-fa22d24336b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:b8:8b:bd:87:41:12:9b:f1:9a:c0:e0:f8: 6d:65:04:f4:51:83:7f:38:dc:7b:44:05:1a:b0:eb: d7:da:67:86:42:06:6a:f4:f0:9c:51:77:d9:f5:3e: 59:98:14:a2:60:99:60:37:1d:88:8c:cf:0f:36:7e: b7:42:d7:b6:01:bd:4e:4c:f2:ba:da:b2:e0:8a:b8: a5:03:d7:a5:9f:c2:db:a8:e8:38:74:2c:30:8e:ea: c7:b9:8e:1c:1c:07:3b:f3:c5:c6:f9:3c:9b:82:dc: a7:db:01:90:c3:41:2d:35:ab:fc:a2:be:bb:d3:16: 78:3c:ad:f5:b3:6a:ab:c7:b0:93:04:d7:88:00:a1: fd:55:fe:1b:85:2b:bd:d6:52:89:fa:4e:e9:b0:aa: cf:ac:a5:6a:25:d7:3a:37:60:3f:49:c8:44:16:c5: e9:92:63:df:79:7a:7f:16:5e:63:f7:67:af:e5:57: f5:e0:40:f8:dd:35:87:bd:e7:e9:ce:9c:8f:b4:b9: 33:63:75:16:2d:a5:81:7d:c7:d2:10:6e:9e:9a:2d: d0:2c:87:dc:bb:e3:45:74:2a:a5:e8:82:98:9f:0b: c6:32:b0:14:72:e9:87:9a:3d:33:2e:79:16:5a:ab: b6:bc:cc:6e:ec:e2:bd:a0:e3:93:d5:a0:e7:82:ec: be:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:10:BA:66:DB:4E:4F:8F:64:4D:3A:45:59:70:36:E0:50:3A:06:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:53:1e:dd:38:eb:e0:32:4d:85:4b:ba:83:42:7b:a4:1d:f6: 13:e1:ed:02:b8:a1:3c:79:8e:b2:08:f0:90:43:e6:72:cf:9b: 70:e1:9b:07:47:c9:60:90:8b:60:c2:1f:d8:55:9d:85:02:fd: c6:12:08:0b:f0:56:78:ff:22:7a:63:56:b4:09:00:b2:d0:fc: 51:19:b9:de:60:d1:f5:87:d1:c8:2d:e8:55:85:20:37:2d:b2: 33:d9:3e:45:db:bf:a1:4a:36:50:c7:7f:75:7b:15:d7:23:9a: 1b:49:ef:ce:ab:45:c5:88:0c:f9:40:af:59:eb:ed:ff:1e:4e: 80:fc:d6:ee:d2:a5:21:1d:91:32:ae:4b:10:17:5b:44:23:32: 0e:d6:53:12:0a:5a:16:04:e7:1d:ee:38:37:9d:57:26:94:81: f3:81:eb:ef:b6:cd:44:8f:8f:5b:b8:b8:34:a2:db:a9:42:06: ab:82:8e:6d:26:d7:20:1d:4d:6c:23:5a:bc:b7:23:f6:20:8a: db:f8:96:eb:d0:8f:d0:96:85:7e:83:1c:10:92:c9:94:00:33: 5f:e9:73:72:f4:e4:f3:a1:f9:00:c2:f3:e2:c5:8f:57:71:bb: 21:48:89:77:03:23:55:cc:d1:91:90:bb:01:e7:90:33:f0:e4: cf:6e:95:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23NRrd/adqxSf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWEwMWJmMzYtZDA4Ni00NDliLTk0NmEtZmEyMmQyNDMzNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib64i72HQRKb8ZrA4PhtZQT0UYN/ONx7RAUa sOvX2meGQgZq9PCcUXfZ9T5ZmBSiYJlgNx2IjM8PNn63Qte2Ab1OTPK62rLgiril A9eln8LbqOg4dCwwjurHuY4cHAc788XG+Tybgtyn2wGQw0EtNav8or670xZ4PK31 s2qrx7CTBNeIAKH9Vf4bhSu91lKJ+k7psKrPrKVqJdc6N2A/SchEFsXpkmPfeXp/ Fl5j92ev5Vf14ED43TWHvefpzpyPtLkzY3UWLaWBfcfSEG6emi3QLIfcu+NFdCql 6IKYnwvGMrAUcumHmj0zLnkWWqu2vMxu7OK9oOOT1aDnguy+rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAQumbbTk+PZE06RVlwNuBQOgYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTczY2QxNDAtY2FiNi0z ODhmLThlMTEtMjZiMmY4ZmM1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFTHt046+AyTYVLuoNCe6Qd9hPh7QK4oTx5jrII8JBD5nLPm3DhmwdH yWCQi2DCH9hVnYUC/cYSCAvwVnj/InpjVrQJALLQ/FEZud5g0fWH0cgt6FWFIDct sjPZPkXbv6FKNlDHf3V7FdcjmhtJ786rRcWIDPlAr1nr7f8eToD81u7SpSEdkTKu SxAXW0QjMg7WUxIKWhYE5x3uODedVyaUgfOB6++2zUSPj1u4uDSi26lCBquCjm0m 1yAdTWwjWry3I/Ygitv4luvQj9CWhX6DHBCSyZQAM1/pc3L05POh+QDC8+LFj1dx uyFIiXcDI1XM0ZGQuwHnkDPw5M9ulaE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:16 2025 by rpki-client