$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa File: a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa (raw, json) Hash identifier: HeBFbFFUl29Jw01OdtdwERjyHkMseHudOjSZpb2Cz7U= Subject key identifier: FD:B4:92:4D:D8:C5:D5:C0:F1:8B:CC:25:48:B3:D1:75:05:89:2E:94 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A7BB0AEA59E25B8453F7FFFB0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 173.21.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:ae:a5:9e:25:b8:45:3f:7f:ff:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=ad0ee4cd-346f-4cef-8c48-3836c5f47550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:25:64:fd:99:45:51:d6:6e:71:d9:4b:62: 84:07:5c:bc:a5:33:c8:a3:05:e3:60:77:53:42:11: 9b:ef:72:ff:3e:57:3b:31:bd:ba:52:65:ee:31:0b: 56:27:61:5f:07:2a:48:d7:7c:64:ae:b8:a9:c8:64: 77:db:b4:1e:f3:6e:9f:55:a5:e4:44:c5:24:22:5f: db:92:42:f2:6c:c2:54:4d:fa:e9:a0:3c:3f:25:b5: c3:e0:ba:56:d2:d3:ed:15:39:f8:54:92:c0:e1:b1: 05:01:ac:bb:ba:16:07:a8:84:2f:18:6b:5e:94:7d: cd:4e:d2:38:2a:87:7c:97:ec:7e:f8:f2:3a:2e:1b: 7b:e9:b6:47:18:cf:00:4e:59:e4:16:30:82:74:c1: af:eb:7e:13:4c:2e:9f:69:e0:d9:ff:10:8f:d2:80: cd:68:e8:fc:cb:6c:1e:35:fb:e1:50:72:ed:80:f8: a9:90:85:dc:75:fe:82:94:a9:cc:b2:42:9b:d6:db: 54:93:c0:db:e6:52:bf:dd:17:76:50:09:70:66:2e: b1:b3:1d:b4:9b:44:2b:89:ec:10:fe:3d:3c:a0:b0: 04:4b:82:bd:17:77:b8:6c:4d:a2:9b:65:0b:72:e4: c2:8a:e7:99:28:71:4d:23:08:13:ff:86:9d:89:90: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:92:4D:D8:C5:D5:C0:F1:8B:CC:25:48:B3:D1:75:05:89:2E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:92:85:1e:33:69:fb:dd:14:76:96:ca:b2:9f:33:66:a4:cb: 3d:12:18:63:63:ae:9b:11:74:08:0c:c7:5a:de:83:87:20:a7: 96:3c:ea:99:5b:f1:09:b2:25:42:99:ff:d9:11:97:0e:dd:fb: b8:d7:e9:ab:a6:fb:33:b6:10:76:85:14:b3:70:67:5a:d9:45: da:85:8a:32:ba:6b:85:79:24:de:54:df:94:2f:11:cc:01:a2: f7:0d:7c:67:21:1d:c3:14:3a:cb:1c:74:48:78:b4:7e:7f:5f: 43:5d:f1:07:a4:cc:28:de:7d:82:c4:2e:ad:c6:b2:a3:ff:ea: c3:9d:15:11:64:02:10:0a:22:e2:65:38:e9:71:5a:43:fa:c5: aa:d0:11:50:f6:8a:7f:0b:73:1c:8d:e4:e7:fd:10:62:37:c6: d6:b2:60:c9:ee:de:58:92:77:38:62:83:2c:92:4b:9a:e1:05: 0d:19:e8:8f:06:cc:71:8e:fa:22:f4:12:f1:f7:6f:61:b0:ff: 65:d0:1a:01:58:b2:83:9a:12:00:e6:58:0c:39:82:26:5d:cf: f7:56:df:c8:a2:21:46:de:6c:08:af:0d:30:4e:f2:53:d9:0d: b1:06:94:e9:e2:d5:72:75:a8:79:ac:f1:ce:50:de:32:79:27: fc:31:62:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sK6lniW4RT9//7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk YWQwZWU0Y2QtMzQ2Zi00Y2VmLThjNDgtMzgzNmM1ZjQ3NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WQlZP2ZRVHWbnHZS2KEB1y8pTPIowXjYHdT QhGb73L/Plc7Mb26UmXuMQtWJ2FfBypI13xkrripyGR327Qe826fVaXkRMUkIl/b kkLybMJUTfrpoDw/JbXD4LpW0tPtFTn4VJLA4bEFAay7uhYHqIQvGGtelH3NTtI4 Kod8l+x++PI6Lht76bZHGM8ATlnkFjCCdMGv634TTC6faeDZ/xCP0oDNaOj8y2we NfvhUHLtgPipkIXcdf6ClKnMskKb1ttUk8Db5lK/3Rd2UAlwZi6xsx20m0QriewQ /j08oLAES4K9F3e4bE2im2ULcuTCiueZKHFNIwgT/4adiZCl4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP20kk3YxdXA8YvMJUiz0XUFiS6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTQwZWM4NWEtZDZiZS0z NTEwLWI4MWMtZWNiZTNlZGUyMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeShR4zafvdFHaWyrKfM2akyz0SGGNjrpsRdAgMx1reg4cgp5Y86plb 8QmyJUKZ/9kRlw7d+7jX6aum+zO2EHaFFLNwZ1rZRdqFijK6a4V5JN5U35QvEcwB ovcNfGchHcMUOsscdEh4tH5/X0Nd8QekzCjefYLELq3GsqP/6sOdFRFkAhAKIuJl OOlxWkP6xarQEVD2in8LcxyN5Of9EGI3xtayYMnu3liSdzhigyySS5rhBQ0Z6I8G zHGO+iL0EvH3b2Gw/2XQGgFYsoOaEgDmWAw5giZdz/dW38iiIUbebAivDTBO8lPZ DbEGlOni1XJ1qHms8c5Q3jJ5J/wxYu4= -----END CERTIFICATE-----Generated at Tue Aug 5 08:19:10 2025 by rpki-client