$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa File: ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa (raw, json) Hash identifier: w6EZpXP8hDLIl6M9CUnH/C7OkfvOYh0iIc01lTaRsX8= Subject key identifier: 85:CF:A1:2D:4F:60:30:26:74:0E:8E:2E:37:FF:7D:15:54:42:A6:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410EB20372FF567E01B5780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.21.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:eb:20:37:2f:f5:67:e0:1b:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=20191350-8f11-4ee0-b5a5-913a8ebc9739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:d9:d3:e3:59:a7:fe:45:04:4b:47:c7:57: 50:c5:d5:4a:63:fc:0c:cc:9b:cc:8b:7b:7f:b9:36: af:22:6d:c3:c4:22:50:b2:3c:c9:84:44:7b:35:6a: 2f:6e:89:d0:df:29:a0:fe:95:d6:f3:9f:d1:49:c8: 1f:80:98:ea:42:75:34:0e:03:fc:68:dc:8c:02:c3: a3:fa:81:c6:36:63:4c:20:89:2c:95:4f:fd:8d:46: 96:3c:54:28:87:ab:65:0b:50:ca:a5:b5:ce:96:e3: e9:c9:e6:2f:0c:fc:93:58:fc:03:70:50:89:d9:60: 87:44:92:e0:71:84:60:ec:2d:88:f9:0b:4c:ee:51: ad:09:eb:7b:fc:6f:82:e9:24:4b:55:43:2c:05:cc: e3:63:33:5e:83:fa:f0:1b:3d:ac:15:49:23:a6:b5: 5a:74:85:9c:8f:e4:80:c3:73:1a:14:81:41:cc:87: 60:13:30:a6:64:fb:4f:a9:b0:52:d0:f8:f6:ee:fd: b2:26:f7:b5:57:90:70:08:8d:ba:f3:d5:46:e2:e1: a2:14:13:91:b1:4e:50:26:3b:5b:79:95:51:5f:c9: d8:7d:65:7f:a1:14:f6:fb:e8:82:68:87:29:70:9e: 17:c6:d9:4f:55:d2:26:17:9c:ea:6e:8b:5b:06:54: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CF:A1:2D:4F:60:30:26:74:0E:8E:2E:37:FF:7D:15:54:42:A6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:cb:48:d3:20:b1:6d:4a:9c:79:af:15:0d:25:bc:e2:05:18: d6:8d:76:0d:92:19:89:39:04:fb:c7:b1:72:5a:f9:6d:bc:24: 90:05:01:49:c2:2a:1f:cc:04:d0:5e:81:11:cb:d0:9d:88:29: b6:0d:22:9e:68:62:db:53:26:8c:69:08:a6:94:dc:d5:63:c6: 81:f1:0b:a7:69:cf:d1:8e:f6:eb:e0:b2:06:4e:2b:f4:05:de: e7:6a:d7:e9:ba:d5:83:fe:14:da:df:d8:e2:0b:ef:db:4a:50: 22:73:0b:65:1c:63:c5:95:c9:09:76:97:a3:82:39:ab:e7:ea: f4:9e:a4:86:c0:30:3e:b9:c6:49:1c:43:ea:cc:53:2e:14:63: fb:ea:a5:a3:ff:0f:bd:72:35:64:6a:1c:72:76:b9:5d:7b:b9: 6f:e6:82:87:e9:67:f4:2b:89:ef:15:0c:68:a7:3d:34:50:ef: 61:33:40:e8:3d:86:60:1f:eb:86:50:71:7c:7c:ec:e2:5a:32: 22:65:46:a3:7d:70:23:5f:7b:5e:fa:96:54:89:b1:80:3d:58: 15:f7:b7:ec:9f:af:c4:07:24:61:42:83:e5:66:04:9c:39:96: 20:14:ce:5c:61:1e:72:57:a9:6f:8a:90:9a:eb:54:22:e3:9c: 47:bd:ec:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOsgNy/1Z+AbV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjAxOTEzNTAtOGYxMS00ZWUwLWI1YTUtOTEzYThlYmM5NzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdrZ0+NZp/5FBEtHx1dQxdVKY/wMzJvMi3t/ uTavIm3DxCJQsjzJhER7NWovbonQ3ymg/pXW85/RScgfgJjqQnU0DgP8aNyMAsOj +oHGNmNMIIkslU/9jUaWPFQoh6tlC1DKpbXOluPpyeYvDPyTWPwDcFCJ2WCHRJLg cYRg7C2I+QtM7lGtCet7/G+C6SRLVUMsBczjYzNeg/rwGz2sFUkjprVadIWcj+SA w3MaFIFBzIdgEzCmZPtPqbBS0Pj27v2yJve1V5BwCI2689VG4uGiFBORsU5QJjtb eZVRX8nYfWV/oRT2++iCaIcpcJ4XxtlPVdImF5zqbotbBlSvEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXPoS1PYDAmdA6OLjf/fRVUQqYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQ4YjAyOTMtYTNjMC0z MDY3LWE5ZTQtNmQzNWQyOGMxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzLSNMgsW1KnHmvFQ0lvOIFGNaNdg2SGYk5BPvHsXJa+W28JJAFAUnC Kh/MBNBegRHL0J2IKbYNIp5oYttTJoxpCKaU3NVjxoHxC6dpz9GO9uvgsgZOK/QF 3udq1+m61YP+FNrf2OIL79tKUCJzC2UcY8WVyQl2l6OCOavn6vSepIbAMD65xkkc Q+rMUy4UY/vqpaP/D71yNWRqHHJ2uV17uW/mgofpZ/Qrie8VDGinPTRQ72EzQOg9 hmAf64ZQcXx87OJaMiJlRqN9cCNfe176llSJsYA9WBX3t+yfr8QHJGFCg+VmBJw5 liAUzlxhHnJXqW+KkJrrVCLjnEe97Oc= -----END CERTIFICATE-----Generated at Tue Aug 5 22:57:23 2025 by rpki-client