$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4609-d101-352c-9d5b-eed15afd315c.roa File: ae1c4609-d101-352c-9d5b-eed15afd315c.roa (raw, json) Hash identifier: kfMF4LICaZE+S26W4ev/htvMV5x29ddAy7MMq/LpW14= Subject key identifier: 77:FF:D9:11:17:06:A0:72:7F:9A:06:51:83:CC:71:FA:93:B8:BA:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81462D30BC061B749F390B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4609-d101-352c-9d5b-eed15afd315c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.24.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:2d:30:bc:06:1b:74:9f:39:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=4fc6fa0a-a524-4927-907a-f86c36599848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:e5:1d:e4:d7:72:3b:36:6e:82:1f:25:98: 87:1c:1a:8c:29:4e:50:9d:f7:a5:90:8e:a7:3a:ba: 3e:81:ad:f6:3c:33:45:7b:87:22:50:52:73:66:2d: ab:23:c5:11:ed:43:66:d3:e4:3b:25:f0:b5:ff:d2: f5:66:0e:76:03:53:b7:30:58:99:0b:ae:6a:3f:0e: 3b:ab:6c:75:e6:5a:55:16:3f:7e:e7:2a:8a:d3:00: fb:2c:ee:18:d6:c4:63:6c:92:6f:b2:6f:45:c2:2c: b1:f2:4a:48:f5:0e:bb:61:c3:c0:c5:63:af:6a:f9: 1f:05:e3:49:93:5f:89:34:fb:f2:ef:e8:f0:a7:da: c8:c3:0c:af:d5:76:57:8b:36:ba:79:0a:d3:ef:8b: 05:f7:9d:90:9f:df:07:77:4b:40:dd:3f:06:fc:bd: dc:c0:05:08:42:39:95:37:5d:eb:1d:5c:43:a1:b2: 25:33:c2:61:26:16:68:f1:38:64:df:f6:cf:04:50: c8:e5:f4:56:e2:e8:ca:4a:d6:dd:43:ac:30:5e:30: e0:48:a9:c0:1f:20:b2:be:bc:36:1c:40:c3:75:d6: de:00:50:b8:e4:fb:7e:87:fa:38:a4:74:be:89:47: 5d:cf:3b:54:93:15:fa:03:9d:3e:ae:da:a1:d0:dd: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FF:D9:11:17:06:A0:72:7F:9A:06:51:83:CC:71:FA:93:B8:BA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4609-d101-352c-9d5b-eed15afd315c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:64:93:42:e9:b5:d1:93:c8:df:1c:fc:33:17:fb:64:f1:6b: 1c:fb:87:16:18:94:23:78:c8:f8:0b:58:8e:9a:3d:e7:e3:dc: 87:7f:a2:ac:db:82:13:03:4a:4f:3f:d8:32:b6:92:ac:a2:a3: af:b4:d5:fc:cb:41:2b:70:5e:88:5f:14:30:6a:66:f2:bb:92: 7f:c7:e6:63:fa:b8:b9:ab:7b:cc:33:8f:c2:65:93:4a:35:fe: e2:7f:8d:46:30:f7:91:20:77:4c:33:6a:55:3e:c6:5c:f0:be: e0:d8:e5:d5:f9:da:08:22:40:b6:1d:75:26:7f:0f:4e:0d:02: 60:90:44:01:ca:30:bb:b9:43:7d:f7:62:dd:27:58:1c:bf:fa: 4f:14:a1:2e:10:e1:96:a4:cb:0d:e0:ec:67:0c:cd:47:83:08: 83:06:24:b3:4a:29:e5:a0:47:0f:b3:c3:ab:2c:d8:f0:26:ac: 78:a2:e7:3a:92:46:1d:63:df:ae:28:47:39:9e:07:18:5a:e1: c2:48:1d:95:94:a2:cc:dc:ca:4a:c7:d8:31:10:4d:cd:c0:e9: b7:3c:95:87:fd:60:1d:0c:40:7c:62:ee:8b:5e:0d:24:50:60: 0d:60:8c:28:af:34:87:36:32:bd:61:b6:fe:9b:1b:15:10:40: e4:99:b2:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRi0wvAYbdJ85C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NGZjNmZhMGEtYTUyNC00OTI3LTkwN2EtZjg2YzM2NTk5ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBjlHeTXcjs2boIfJZiHHBqMKU5QnfelkI6n Oro+ga32PDNFe4ciUFJzZi2rI8UR7UNm0+Q7JfC1/9L1Zg52A1O3MFiZC65qPw47 q2x15lpVFj9+5yqK0wD7LO4Y1sRjbJJvsm9Fwiyx8kpI9Q67YcPAxWOvavkfBeNJ k1+JNPvy7+jwp9rIwwyv1XZXiza6eQrT74sF952Qn98Hd0tA3T8G/L3cwAUIQjmV N13rHVxDobIlM8JhJhZo8Thk3/bPBFDI5fRW4ujKStbdQ6wwXjDgSKnAHyCyvrw2 HEDDddbeAFC45Pt+h/o4pHS+iUddzztUkxX6A50+rtqh0N1WYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf/2REXBqByf5oGUYPMcfqTuLozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWUxYzQ2MDktZDEwMS0z NTJjLTlkNWItZWVkMTVhZmQzMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVkk0LptdGTyN8c/DMX+2Txaxz7hxYYlCN4yPgLWI6aPefj3Id/oqzb ghMDSk8/2DK2kqyio6+01fzLQStwXohfFDBqZvK7kn/H5mP6uLmre8wzj8Jlk0o1 /uJ/jUYw95Egd0wzalU+xlzwvuDY5dX52ggiQLYddSZ/D04NAmCQRAHKMLu5Q333 Yt0nWBy/+k8UoS4Q4Zakyw3g7GcMzUeDCIMGJLNKKeWgRw+zw6ss2PAmrHii5zqS Rh1j364oRzmeBxha4cJIHZWUoszcykrH2DEQTc3A6bc8lYf9YB0MQHxi7oteDSRQ YA1gjCivNIc2Mr1htv6bGxUQQOSZsqM= -----END CERTIFICATE-----Generated at Mon Aug 4 22:13:44 2025 by rpki-client