$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa File: a4698492-8bf7-3bc4-bf6c-137506aace77.roa (raw, json) Hash identifier: XB0tKQi0gGIb4c54I+4R53lxrUixGVh0EpsIJINcSMU= Subject key identifier: FA:3D:A5:91:46:2B:A8:7B:1C:8C:3B:6F:74:0F:57:AF:05:B0:EC:8A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E5F1B23299A1A5EDFA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.16.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e5:f1:b2:32:99:a1:a5:ed:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8b55db12-d3dd-4fdc-9c71-8da28a864214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:a9:75:0a:8f:33:e1:5b:16:9b:93:43:f9: 4e:fe:af:3e:da:a7:cb:e2:b3:3b:50:99:71:6e:dc: bb:cc:7a:97:b7:b5:58:97:1a:6a:05:d5:86:e8:08: d5:bf:56:c7:12:6c:d9:d3:b4:84:02:c2:89:30:d6: 33:8c:a9:a0:65:3b:8c:10:18:20:b1:87:b7:90:d2: 0d:e6:f5:20:cf:e9:19:8c:ea:43:4d:19:67:3e:6f: 75:8a:5f:7d:c2:5a:56:e5:aa:a3:f6:03:3d:7e:ac: 3f:65:2e:a2:b9:71:98:00:3a:0c:53:07:5c:c6:b1: 74:82:a6:9e:7d:c7:95:78:60:52:90:82:c3:5a:ba: 1e:8c:bb:e1:fb:70:1b:e6:9a:9d:bc:29:d4:c9:3c: 66:5c:22:d1:6d:a7:5f:4f:11:1e:5a:3a:ba:4e:e7: b8:f6:8a:5d:55:cf:c1:b3:6f:62:7b:ed:64:2e:19: b8:a2:77:64:aa:2c:2b:80:b3:d2:ee:13:8d:5f:f1: f6:92:b2:70:2e:52:eb:b1:3a:62:c2:72:08:e8:72: 51:72:6a:1c:42:f3:74:d2:14:33:7a:6b:90:d8:e2: 8d:e1:18:3c:0b:3e:a8:e8:c8:1e:87:56:14:60:97: 6a:bf:d3:c7:e8:27:60:40:df:9d:8b:3c:0b:59:6e: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3D:A5:91:46:2B:A8:7B:1C:8C:3B:6F:74:0F:57:AF:05:B0:EC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4a:80:9e:40:30:13:bc:3f:35:46:0f:40:ed:81:91:ed:c3: ce:b9:48:99:a4:06:80:c3:94:6c:4c:15:46:df:c1:dd:7d:77: d7:1f:d0:26:5a:b8:74:7d:d0:4d:d5:32:8d:63:5a:6d:16:08: 30:48:42:5d:d6:37:c5:d3:87:7f:45:e3:e6:de:15:bd:39:d4: 92:07:f1:88:ad:d3:10:70:91:0d:8c:dc:0c:60:ff:c3:e5:7e: d2:6b:21:f9:65:8a:35:bb:1f:ea:fe:84:14:63:f4:07:29:f4: 3e:b9:8e:9b:4b:bb:12:bb:a1:b0:15:69:8e:aa:a7:2c:e7:51: e8:63:b4:98:ef:5c:b8:28:02:72:d4:68:ae:54:a7:be:9e:2b: 3a:e9:5e:7a:0c:ba:5b:e8:ac:73:ab:39:f7:de:3e:18:6d:72: 41:b2:1e:e1:34:3c:fc:89:96:5e:0a:41:4c:8a:87:79:1a:b0: 17:3f:e8:44:0f:2e:5c:59:cd:b7:66:8c:e3:6b:5c:f8:37:8b: 26:66:6e:d9:2d:d3:37:03:86:bf:5b:03:f8:07:b4:07:c8:e0: 55:53:3c:0b:2d:16:39:f2:43:f5:68:3a:96:9b:33:9f:a8:a1: 49:e3:6c:cd:10:0c:48:71:fd:e4:98:58:7d:fd:af:48:5a:47: 74:99:dc:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOXxsjKZoaXt+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGI1NWRiMTItZDNkZC00ZmRjLTljNzEtOGRhMjhhODY0MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgipdQqPM+FbFpuTQ/lO/q8+2qfL4rM7UJlx bty7zHqXt7VYlxpqBdWG6AjVv1bHEmzZ07SEAsKJMNYzjKmgZTuMEBggsYe3kNIN 5vUgz+kZjOpDTRlnPm91il99wlpW5aqj9gM9fqw/ZS6iuXGYADoMUwdcxrF0gqae fceVeGBSkILDWroejLvh+3Ab5pqdvCnUyTxmXCLRbadfTxEeWjq6Tue49opdVc/B s29ie+1kLhm4ondkqiwrgLPS7hONX/H2krJwLlLrsTpiwnII6HJRcmocQvN00hQz emuQ2OKN4Rg8Cz6o6Mgeh1YUYJdqv9PH6CdgQN+dizwLWW7iLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo9pZFGK6h7HIw7b3QPV68FsOyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTQ2OTg0OTItOGJmNy0z YmM0LWJmNmMtMTM3NTA2YWFjZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARKgJ5AMBO8PzVGD0DtgZHtw865SJmkBoDDlGxMFUbfwd19d9cf0CZa uHR90E3VMo1jWm0WCDBIQl3WN8XTh39F4+beFb051JIH8Yit0xBwkQ2M3Axg/8Pl ftJrIfllijW7H+r+hBRj9Acp9D65jptLuxK7obAVaY6qpyznUehjtJjvXLgoAnLU aK5Up76eKzrpXnoMulvorHOrOffePhhtckGyHuE0PPyJll4KQUyKh3kasBc/6EQP LlxZzbdmjONrXPg3iyZmbtkt0zcDhr9bA/gHtAfI4FVTPAstFjnyQ/VoOpabM5+o oUnjbM0QDEhx/eSYWH39r0haR3SZ3Dg= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:04 2025 by rpki-client