$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa File: 98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa (raw, json) Hash identifier: BLNrUdcUflkGurVQp4y2E+Wk4GKUCcRW677M5pZuvxg= Subject key identifier: 27:06:D5:FF:81:F5:42:C8:6D:7B:90:56:28:A4:CA:9A:72:AE:09:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8575FB16B1B11FC6B08A6B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.20.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:fb:16:b1:b1:1f:c6:b0:8a:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=298165dc-44ce-459b-8225-b3e193d84554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:97:3a:cd:d5:ad:f9:c7:b5:63:09:02:67: f2:e1:bd:fb:08:a2:01:3c:36:a9:4c:1a:cb:3f:92: 3a:3c:22:e1:e9:05:72:e5:c4:a5:4a:2f:f5:4e:26: 66:45:e3:5a:a4:5e:42:76:2c:9a:13:de:b5:20:c5: bd:d9:84:f5:93:66:cc:a3:8f:e6:e2:bd:6d:72:f6: e8:b8:36:6c:ce:98:62:ce:ff:1b:45:32:f7:12:ba: 49:4b:9c:f7:2e:6a:2b:7a:f0:b5:86:e1:ce:97:f6: 5b:1e:41:15:a8:08:09:23:43:4f:80:aa:bc:57:8b: f0:aa:f7:91:4e:44:b9:47:47:02:0b:79:34:77:ba: 2b:74:09:ad:f2:69:ac:4b:d8:06:75:cf:47:60:d3: b9:f2:7c:cb:db:97:f3:d1:ea:66:63:20:90:24:4f: 2a:26:d2:e5:3d:bb:ba:9e:e5:1a:f3:4a:b9:2e:e8: 60:36:12:c8:34:f8:54:d5:65:75:65:27:b8:0a:2b: 5e:e2:22:21:43:4d:9b:79:0e:1c:31:1c:ac:fd:f1: ae:14:2c:36:b2:0a:17:ee:d4:eb:67:66:24:2c:4f: 43:af:65:4e:f1:24:df:bd:80:83:67:f4:8f:0f:5e: 47:28:88:30:2d:e0:4e:61:68:7a:5c:82:d2:eb:7d: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:06:D5:FF:81:F5:42:C8:6D:7B:90:56:28:A4:CA:9A:72:AE:09:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98191945-c21f-3a59-98a7-8ffbbf9d2eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d9:b7:13:d5:fe:5c:16:65:37:fb:b8:4e:68:29:6f:db:c5: bb:d1:3b:0f:99:4e:52:8f:1e:e1:de:1e:fe:6c:6a:3d:ce:fc: 64:73:1a:a1:69:d8:52:36:a5:b2:43:36:8a:7d:50:fb:97:0d: d9:ca:51:fb:e3:01:e0:b6:cc:d6:01:eb:75:5c:b2:f9:d7:cd: 9a:a8:9f:95:40:a2:e0:56:2d:fa:60:cf:2b:44:00:3c:dc:b4: 72:84:9d:ea:b6:95:c6:e5:59:ea:71:f4:42:b1:bd:28:69:06: 7a:2f:28:b2:48:93:32:f7:90:bc:cc:e6:8d:12:f8:5c:f2:78: cc:7b:4e:43:6f:1d:67:f1:0a:58:c3:83:ef:1d:93:09:6b:39: fd:a9:6f:85:08:a6:bb:33:f3:d6:d4:73:49:c1:4a:fd:12:24: c0:6a:ad:a1:a9:99:77:c4:f3:cc:15:f0:ae:b9:b8:7e:ed:9b: e7:e0:c0:fd:32:bb:25:d1:49:b5:45:0d:e7:f5:de:e7:9a:23: cb:ea:55:7d:c1:68:e5:5d:5d:4e:50:7a:b6:3c:25:8c:89:04: 1a:0f:6d:fa:82:26:00:82:48:2b:6c:2d:5d:f5:ce:f6:8f:5b: 28:56:b3:4a:e1:e3:9f:bf:10:a7:c0:fa:97:ca:d7:34:1c:b9: d2:44:7c:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfsWsbEfxrCKawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk Mjk4MTY1ZGMtNDRjZS00NTliLTgyMjUtYjNlMTkzZDg0NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQyXOs3VrfnHtWMJAmfy4b37CKIBPDapTBrL P5I6PCLh6QVy5cSlSi/1TiZmReNapF5CdiyaE961IMW92YT1k2bMo4/m4r1tcvbo uDZszphizv8bRTL3ErpJS5z3LmorevC1huHOl/ZbHkEVqAgJI0NPgKq8V4vwqveR TkS5R0cCC3k0d7ordAmt8mmsS9gGdc9HYNO58nzL25fz0epmYyCQJE8qJtLlPbu6 nuUa80q5LuhgNhLINPhU1WV1ZSe4Cite4iIhQ02beQ4cMRys/fGuFCw2sgoX7tTr Z2YkLE9Dr2VO8STfvYCDZ/SPD15HKIgwLeBOYWh6XILS630t5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcG1f+B9ULIbXuQViikyppyrgm0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTgxOTE5NDUtYzIxZi0z YTU5LTk4YTctOGZmYmJmOWQyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPZtxPV/lwWZTf7uE5oKW/bxbvROw+ZTlKPHuHeHv5saj3O/GRzGqFp 2FI2pbJDNop9UPuXDdnKUfvjAeC2zNYB63VcsvnXzZqon5VAouBWLfpgzytEADzc tHKEneq2lcblWepx9EKxvShpBnovKLJIkzL3kLzM5o0S+FzyeMx7TkNvHWfxCljD g+8dkwlrOf2pb4UIprsz89bUc0nBSv0SJMBqraGpmXfE88wV8K65uH7tm+fgwP0y uyXRSbVFDef13ueaI8vqVX3BaOVdXU5QerY8JYyJBBoPbfqCJgCCSCtsLV31zvaP WyhWs0rh45+/EKfA+pfK1zQcudJEfLw= -----END CERTIFICATE-----Generated at Wed Aug 6 03:59:42 2025 by rpki-client