$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae284185-8331-36fb-ac10-4add73c3919c.roa File: ae284185-8331-36fb-ac10-4add73c3919c.roa (raw, json) Hash identifier: 3+oIy2FA+rLzCnqeU++g8h3wxGhfshvpzKivodjxVE0= Subject key identifier: AB:2A:14:E0:56:06:E9:D7:23:9A:72:49:4F:E6:D9:B2:5B:06:5C:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412584CF7F09E61C1C1D520 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae284185-8331-36fb-ac10-4add73c3919c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.26.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:58:4c:f7:f0:9e:61:c1:c1:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fa274b2d-c8e5-4263-824f-6704c0eb7a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:80:4c:34:e8:ab:91:bc:93:27:99:c6:e7: dc:af:14:bf:65:09:59:0d:61:96:b5:a5:91:be:35: be:b8:ff:b7:63:1e:a3:fd:2c:cb:16:47:39:de:88: 20:7d:df:e2:ea:08:15:74:6c:bf:ba:c2:68:3d:b1: bf:3e:73:2d:3c:2e:a2:04:e1:df:84:6c:38:f5:82: 84:a6:3b:a5:e1:f9:ee:01:ab:63:ed:5e:3f:97:d3: 23:42:5d:ef:00:31:c7:ab:c7:de:9c:dd:59:1f:bd: ac:7a:89:88:79:02:ca:0c:a3:21:80:bf:40:18:7d: 07:9c:e3:e3:42:b6:f2:f6:45:79:dd:77:23:2f:8b: 11:04:b2:18:ae:65:41:1a:6d:49:bf:09:23:0d:64: 55:a2:56:15:7c:c7:f6:50:5f:51:16:05:0b:93:b1: 81:12:0a:d5:7a:d2:fe:bc:98:cb:03:b7:fa:8f:51: f4:36:2d:ed:65:1b:c3:5e:54:42:c2:8c:f2:9b:d3: 1d:77:9b:7c:09:c5:bd:1b:01:f7:a0:6e:ee:50:df: 45:67:06:44:8f:07:e6:ea:10:86:78:71:95:fc:92: 37:ea:26:6e:b5:a5:b3:ef:77:37:30:4e:65:48:14: 0b:dc:ec:0b:6b:b8:94:0b:bc:6b:1e:4d:0d:15:ae: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:14:E0:56:06:E9:D7:23:9A:72:49:4F:E6:D9:B2:5B:06:5C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae284185-8331-36fb-ac10-4add73c3919c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a3:1f:af:7e:92:2c:7a:fd:26:23:81:d1:b0:ef:6d:97:d1: f3:54:20:53:b0:c4:fa:03:51:1a:bc:0d:85:49:30:78:be:65: da:c8:48:54:5c:44:7f:8d:f8:bc:7c:dc:99:3b:7a:8a:84:cc: 2b:50:8b:30:75:f3:bd:39:03:a8:ba:48:49:55:af:cd:e0:c6: 45:bf:54:4d:df:fc:a5:7b:4a:c4:47:34:84:64:88:11:14:fb: 7a:3e:ae:cc:46:f7:ff:21:02:24:fb:7c:d8:36:0b:a4:65:3f: 2f:d3:ae:b1:2a:c0:e2:47:4f:af:e2:84:ee:af:13:5c:0f:f4: 11:ab:f9:bc:81:0d:e5:73:68:f8:d7:d8:ee:f9:18:7f:47:54: 25:cc:89:30:7d:38:ba:75:d7:d4:2e:49:eb:a9:ef:0c:12:ce: c1:0d:29:66:2b:df:29:d6:32:f7:aa:7f:31:b7:bf:ba:19:67: dd:72:1f:e2:95:96:d7:9b:d9:87:58:96:75:6a:be:c2:a3:8a: c9:88:1d:6d:2d:ce:20:5a:6f:a8:6b:50:8d:e0:50:cf:3e:a2: 7c:ea:52:0d:2d:d5:c2:9f:ef:4f:44:ca:a0:b4:17:7a:b3:13: 1e:f4:87:2c:5e:e6:8c:84:36:fb:d6:19:fd:8a:21:f8:2b:e4: 32:c3:41:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElhM9/CeYcHB1SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmEyNzRiMmQtYzhlNS00MjYzLTgyNGYtNjcwNGMwZWI3YTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU6ATDToq5G8kyeZxufcrxS/ZQlZDWGWtaWR vjW+uP+3Yx6j/SzLFkc53oggfd/i6ggVdGy/usJoPbG/PnMtPC6iBOHfhGw49YKE pjul4fnuAatj7V4/l9MjQl3vADHHq8fenN1ZH72seomIeQLKDKMhgL9AGH0HnOPj Qrby9kV53XcjL4sRBLIYrmVBGm1JvwkjDWRVolYVfMf2UF9RFgULk7GBEgrVetL+ vJjLA7f6j1H0Ni3tZRvDXlRCwozym9Mdd5t8CcW9GwH3oG7uUN9FZwZEjwfm6hCG eHGV/JI36iZutaWz73c3ME5lSBQL3OwLa7iUC7xrHk0NFa4ByQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsqFOBWBunXI5pySU/m2bJbBlyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWUyODQxODUtODMzMS0z NmZiLWFjMTAtNGFkZDczYzM5MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGjH69+kix6/SYjgdGw722X0fNUIFOwxPoDURq8DYVJMHi+ZdrISFRc RH+N+Lx83Jk7eoqEzCtQizB18705A6i6SElVr83gxkW/VE3f/KV7SsRHNIRkiBEU +3o+rsxG9/8hAiT7fNg2C6RlPy/TrrEqwOJHT6/ihO6vE1wP9BGr+byBDeVzaPjX 2O75GH9HVCXMiTB9OLp119QuSeup7wwSzsENKWYr3ynWMveqfzG3v7oZZ91yH+KV lteb2YdYlnVqvsKjismIHW0tziBab6hrUI3gUM8+onzqUg0t1cKf709EyqC0F3qz Ex70hyxe5oyENvvWGf2KIfgr5DLDQR0= -----END CERTIFICATE-----Generated at Wed Aug 6 10:01:35 2025 by rpki-client