$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa File: a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa (raw, json) Hash identifier: rG3Vb7dLpZzNSteodh/P8wMrrNuf/qgRKi4mqw5GE4E= Subject key identifier: 90:27:63:D7:85:E9:2D:82:0A:15:C9:92:D3:13:A5:FD:10:42:39:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84125287BFEECC1F53805340 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:52:87:bf:ee:cc:1f:53:80:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=52e50708-e6f6-4b22-9016-2c4de9db72ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:3b:e2:36:b4:71:4b:a5:71:50:d2:2d:ee: 09:93:31:a9:61:92:c6:be:88:c1:f7:a0:e0:7f:65: 6e:95:d3:08:8e:dd:eb:2a:a6:f2:e9:a0:1b:2d:2d: 0a:e3:f7:b7:c3:92:4e:e9:23:ce:e2:6f:5f:9e:2a: 97:42:fa:11:9b:5b:fc:2f:06:5a:81:6f:a0:6e:7a: ec:ff:44:87:53:2c:14:4e:3a:19:bf:18:4f:a9:13: 1e:85:54:fd:5b:ad:be:bc:7c:6c:07:a8:4b:d8:ca: b9:33:af:49:da:90:4b:32:a6:f7:af:5a:74:69:e3: b2:39:25:83:ea:42:bb:aa:76:2d:ac:df:b5:6d:7b: 6e:50:64:91:37:10:3d:e1:5a:f6:59:f7:35:8e:14: 9a:f8:ed:97:d4:23:e5:47:81:d7:fb:05:3d:3a:fc: 21:01:d9:68:f4:31:34:30:e0:a9:76:60:02:92:c6: 00:e7:0b:3e:7e:59:2e:b4:7e:dd:f7:4d:74:fb:19: 39:19:c8:51:3a:e8:23:25:4c:52:f0:e0:0d:d0:f0: 4a:10:4a:51:f9:67:e2:75:b0:4b:1d:33:97:10:a4: 55:12:62:d1:44:d2:85:ac:b6:93:b2:cf:33:46:08: cc:ef:6e:01:df:1d:3f:d0:f1:8d:df:93:95:aa:40: 12:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:27:63:D7:85:E9:2D:82:0A:15:C9:92:D3:13:A5:FD:10:42:39:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:15:b3:7f:00:ec:7c:fd:3d:4a:ef:0e:b5:7a:89:02:2f:99: a8:e3:38:27:dc:88:04:a7:83:dd:c8:20:cd:04:49:bd:5e:d8: a0:f9:76:52:32:d3:af:1c:84:f2:e5:d9:f9:46:64:11:7c:ee: 33:58:ff:de:73:75:11:9d:8e:73:aa:6f:ca:8d:93:52:dd:31: 16:8b:00:4a:eb:8d:4c:ad:69:7e:de:4b:52:47:4f:22:df:5c: f4:6b:0e:86:36:b1:64:52:f4:f0:de:f7:de:78:64:dc:c5:67: 6d:f3:86:e5:0a:6c:2c:eb:7b:ee:92:93:0d:3c:86:cf:78:6b: 71:da:ef:58:cf:0e:ea:ea:7c:2e:40:23:4e:66:96:23:25:0e: 99:54:10:8a:fc:e2:9c:26:12:de:c2:45:b6:b5:e7:7c:8b:ea: ec:ab:d8:c6:37:67:2e:74:19:bd:9c:b0:50:c9:88:8d:db:d2: 90:f4:8a:a3:6c:5d:12:7a:76:7b:ca:fa:7b:be:fa:fa:84:43: 77:23:f9:81:47:89:50:3f:be:40:2f:c7:91:8e:f3:2f:bb:b6: 30:d5:f0:72:46:10:50:e2:e0:8c:1a:72:29:08:df:79:31:aa: f2:fc:df:88:eb:54:78:12:d6:c7:53:38:b9:ae:6a:b1:af:7e: c7:75:8d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElKHv+7MH1OAU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTJlNTA3MDgtZTZmNi00YjIyLTkwMTYtMmM0ZGU5ZGI3MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1c74ja0cUulcVDSLe4JkzGpYZLGvojB96Dg f2VuldMIjt3rKqby6aAbLS0K4/e3w5JO6SPO4m9fniqXQvoRm1v8LwZagW+gbnrs /0SHUywUTjoZvxhPqRMehVT9W62+vHxsB6hL2Mq5M69J2pBLMqb3r1p0aeOyOSWD 6kK7qnYtrN+1bXtuUGSRNxA94Vr2Wfc1jhSa+O2X1CPlR4HX+wU9OvwhAdlo9DE0 MOCpdmACksYA5ws+flkutH7d9010+xk5GchROugjJUxS8OAN0PBKEEpR+WfidbBL HTOXEKRVEmLRRNKFrLaTss8zRgjM724B3x0/0PGN35OVqkASrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAnY9eF6S2CChXJktMTpf0QQjm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTU0YWMyMmEtY2NhYi0z ZTI4LWI4OTctZTViMWE2ZDQ2ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEVs38A7Hz9PUrvDrV6iQIvmajjOCfciASng93IIM0ESb1e2KD5dlIy 068chPLl2flGZBF87jNY/95zdRGdjnOqb8qNk1LdMRaLAErrjUytaX7eS1JHTyLf XPRrDoY2sWRS9PDe9954ZNzFZ23zhuUKbCzre+6Skw08hs94a3Ha71jPDurqfC5A I05mliMlDplUEIr84pwmEt7CRba153yL6uyr2MY3Zy50Gb2csFDJiI3b0pD0iqNs XRJ6dnvK+nu++vqEQ3cj+YFHiVA/vkAvx5GO8y+7tjDV8HJGEFDi4IwacikI33kx qvL834jrVHgS1sdTOLmuarGvfsd1jVk= -----END CERTIFICATE-----Generated at Tue Aug 5 23:12:27 2025 by rpki-client