$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa File: a63c59ce-5a49-3f3e-8855-0d302277390e.roa (raw, json) Hash identifier: 2wTJLhMB1rBCdFhGOhKrdlPMyCj1JHDLHPc+jsGm7dw= Subject key identifier: 7C:F9:09:26:A3:90:BF:30:54:E2:DF:D4:D1:31:A1:36:B0:15:CF:21 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A814650CCB5A786DB35089A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.24.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:50:cc:b5:a7:86:db:35:08:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=39ecae5e-be87-4d62-9dc3-6e3f0db369d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:35:20:f0:51:02:98:23:89:cc:05:d1:86: 06:ee:38:d3:2e:a7:0c:ea:7e:45:18:76:0b:1c:e7: 93:d9:c8:17:97:0d:ad:dc:f1:90:81:f0:82:28:f0: f0:e4:48:02:29:83:b7:1b:3b:51:df:1d:d9:5a:96: c4:c8:74:a2:17:59:ac:17:20:76:f8:e3:8d:89:58: ba:f1:ee:4c:f2:4f:68:5b:0c:2b:a1:3f:61:1f:53: 16:1f:2e:24:86:01:22:15:61:b7:29:9f:59:21:cb: 67:f2:b7:ed:9e:c3:b1:70:40:fb:a1:12:aa:bd:cc: a5:c5:4a:69:de:94:f1:ef:24:83:43:1e:9a:51:95: 1e:f9:41:80:da:9f:f1:97:4e:fa:f1:1e:16:8c:9b: 56:9f:04:0e:06:1b:7e:eb:f4:3f:98:61:0d:8e:f7: b2:e5:5e:b4:65:3f:18:3b:ea:ef:f8:95:e6:71:be: 5d:66:6c:94:84:d0:19:ec:ee:1b:30:d2:da:62:86: 73:57:27:ac:3d:9e:a7:a2:7e:59:02:53:60:80:07: 08:1f:dc:4e:f3:9e:30:40:2b:76:9f:a5:60:ff:0a: 86:af:98:04:bd:90:6f:28:8b:8f:55:ba:61:f6:b8: fa:ce:41:b0:1d:67:d0:4f:20:a6:02:00:5d:36:b6: 45:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F9:09:26:A3:90:BF:30:54:E2:DF:D4:D1:31:A1:36:B0:15:CF:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b4:63:df:75:11:75:9e:6c:d3:35:15:ac:14:28:95:93:b2: 9f:d1:d8:e1:e3:e6:06:6f:26:50:4d:3f:d4:e3:0d:52:a3:e8: b9:69:4f:e6:ae:68:20:37:11:bf:86:66:d5:63:ca:e1:4e:80: 54:a6:d7:9f:bf:7d:77:97:73:04:2f:40:d8:08:72:0d:78:8b: 09:09:c8:01:ef:45:72:07:e3:bd:6c:51:7e:30:26:6e:ba:72: 17:a5:87:80:8a:a1:51:4a:ba:1d:4f:ab:e2:e1:4f:5a:66:61: f4:ae:c4:be:aa:7c:67:3f:13:eb:cc:1e:c3:eb:be:c2:ce:ee: 57:71:7f:ce:5d:93:43:3d:f1:65:99:d0:2f:ae:97:bf:e1:4c: 16:4d:f1:cc:0f:b9:0b:d1:d5:53:1f:99:35:4f:d2:96:86:e4: a7:92:bb:97:85:0a:d0:06:c6:e8:be:39:49:89:90:b3:8f:df: 4d:3c:76:04:67:1a:eb:94:ba:93:c2:a2:4a:45:34:55:d6:0c: 9f:9e:c5:36:84:d2:c2:f2:e0:4e:81:b2:d0:e5:a3:c0:e9:7f: 80:96:f8:17:c4:14:bf:5c:97:5f:9f:e2:a0:c9:62:cf:b6:89: 78:51:cb:a4:37:04:7d:46:f8:29:27:30:51:1a:84:ad:42:c8: d6:6c:eb:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlDMtaeG2zUImoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzllY2FlNWUtYmU4Ny00ZDYyLTlkYzMtNmUzZjBkYjM2OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox01IPBRApgjicwF0YYG7jjTLqcM6n5FGHYL HOeT2cgXlw2t3PGQgfCCKPDw5EgCKYO3GztR3x3ZWpbEyHSiF1msFyB2+OONiVi6 8e5M8k9oWwwroT9hH1MWHy4khgEiFWG3KZ9ZIctn8rftnsOxcED7oRKqvcylxUpp 3pTx7ySDQx6aUZUe+UGA2p/xl0768R4WjJtWnwQOBht+6/Q/mGENjvey5V60ZT8Y O+rv+JXmcb5dZmyUhNAZ7O4bMNLaYoZzVyesPZ6non5ZAlNggAcIH9xO854wQCt2 n6Vg/wqGr5gEvZBvKIuPVbph9rj6zkGwHWfQTyCmAgBdNrZF/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHz5CSajkL8wVOLf1NExoTawFc8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYzYzU5Y2UtNWE0OS0z ZjNlLTg4NTUtMGQzMDIyNzczOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa0Y991EXWebNM1FawUKJWTsp/R2OHj5gZvJlBNP9TjDVKj6LlpT+au aCA3Eb+GZtVjyuFOgFSm15+/fXeXcwQvQNgIcg14iwkJyAHvRXIH471sUX4wJm66 chelh4CKoVFKuh1Pq+LhT1pmYfSuxL6qfGc/E+vMHsPrvsLO7ldxf85dk0M98WWZ 0C+ul7/hTBZN8cwPuQvR1VMfmTVP0paG5KeSu5eFCtAGxui+OUmJkLOP3008dgRn GuuUupPCokpFNFXWDJ+exTaE0sLy4E6BstDlo8Dpf4CW+BfEFL9cl1+f4qDJYs+2 iXhRy6Q3BH1G+CknMFEahK1CyNZs64A= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:54 2025 by rpki-client