$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa File: af3520ed-e043-3001-b695-d4f401a42f6d.roa (raw, json) Hash identifier: 8ZKp89dbCCWW/+BgOFPLwdLb104O7auKh6fDneQWWYk= Subject key identifier: 52:EB:FD:45:7C:9C:73:23:DD:31:E0:76:C5:B6:CC:E5:37:9A:D0:7C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB6E2C5D89D9EA67FF0980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.24.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:6e:2c:5d:89:d9:ea:67:ff:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cfee0bc6-3ef4-4f56-ba68-cceec7eaabda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:b4:0c:62:4f:ff:2f:e8:50:f7:29:bf:55: 29:0b:fc:cb:8f:ee:38:f5:9f:1b:76:9d:30:f3:28: 32:b0:44:c1:5b:51:d5:f2:ee:45:15:8e:fa:b3:8b: 0d:b2:de:ff:e6:17:c6:f3:ad:59:44:66:42:7c:67: 78:12:36:63:eb:83:04:46:70:08:d8:45:91:9a:fd: 7f:38:3e:69:28:b0:25:a8:1a:49:7a:da:1f:b3:89: 55:0c:fb:1b:33:22:44:55:aa:08:7b:11:c9:14:ad: 32:e0:79:e0:b3:55:fb:61:dd:2d:95:4d:13:05:db: d0:0b:88:4f:b3:dd:20:9d:83:c3:9f:67:af:39:18: 3f:e8:f6:c4:60:ff:8f:97:77:a8:df:df:53:16:12: 3f:b7:ae:3c:ba:6a:c6:5d:12:84:1c:83:91:8e:47: 4c:d0:03:c4:f7:ea:cc:92:6a:05:7b:32:6f:36:ad: 83:48:21:0d:de:f6:8e:1e:c4:79:18:93:35:0c:13: da:73:94:82:ad:56:cc:24:e9:6e:db:e8:b3:3e:c3: 1d:96:f7:09:8c:75:56:f0:73:87:6e:ea:f6:01:64: f8:e1:2f:b2:f5:cb:a9:7e:02:63:55:56:2c:93:e3: c9:5e:3c:79:32:ff:3f:c0:1a:2c:96:f6:60:1e:48: c6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EB:FD:45:7C:9C:73:23:DD:31:E0:76:C5:B6:CC:E5:37:9A:D0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f4:de:8a:ee:27:5f:2d:b1:bc:c7:c7:d1:3e:ae:c9:c7:2f: 54:40:dd:ce:9d:19:01:35:4e:24:5f:6d:46:65:cf:b7:7a:db: f0:ac:8c:cb:7a:b6:c9:80:ab:f2:ac:28:9d:c6:59:ae:eb:bf: b5:72:89:f1:71:67:bb:cf:1c:54:f4:47:b3:5a:5e:1a:83:b8: ff:3e:3c:a9:63:79:4b:07:c3:fa:a5:f0:b5:08:c9:d9:ab:26: db:35:09:b8:87:e4:4e:59:84:4e:21:38:bc:ba:6e:4e:8d:dd: 7e:44:72:57:57:7e:be:6e:5c:5f:8c:47:f4:85:d8:6d:7d:08: c0:2d:34:ac:aa:31:d9:3e:87:c8:24:2d:b3:eb:ac:9f:fa:a0: 45:90:a8:63:08:4c:9c:b9:f8:4a:82:b3:77:8e:be:4e:7e:26: 1d:ec:d9:cf:6a:37:ee:9c:23:d4:61:9a:55:f9:0e:e7:ba:72: cb:f4:4b:bf:1e:7a:c3:bb:00:d7:4c:b6:78:39:f2:4a:39:bc: f5:db:65:69:6e:55:18:80:d3:53:2b:9b:8b:61:a7:b2:e5:d0: 0c:ad:4a:1e:b8:13:05:fd:5d:80:57:3f:1f:a9:bd:55:81:55: 6c:9b:7c:f5:91:14:7b:13:8d:c1:d7:55:4b:fd:19:26:c0:a6: 76:16:e5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG224sXYnZ6mf/CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2ZlZTBiYzYtM2VmNC00ZjU2LWJhNjgtY2NlZWM3ZWFhYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6m0DGJP/y/oUPcpv1UpC/zLj+449Z8bdp0w 8ygysETBW1HV8u5FFY76s4sNst7/5hfG861ZRGZCfGd4EjZj64MERnAI2EWRmv1/ OD5pKLAlqBpJetofs4lVDPsbMyJEVaoIexHJFK0y4Hngs1X7Yd0tlU0TBdvQC4hP s90gnYPDn2evORg/6PbEYP+Pl3eo399TFhI/t648umrGXRKEHIORjkdM0APE9+rM kmoFezJvNq2DSCEN3vaOHsR5GJM1DBPac5SCrVbMJOlu2+izPsMdlvcJjHVW8HOH bur2AWT44S+y9cupfgJjVVYsk+PJXjx5Mv8/wBoslvZgHkjGowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLr/UV8nHMj3THgdsW2zOU3mtB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYzNTIwZWQtZTA0My0z MDAxLWI2OTUtZDRmNDAxYTQyZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz03oruJ18tsbzHx9E+rsnHL1RA3c6dGQE1TiRfbUZlz7d62/CsjMt6 tsmAq/KsKJ3GWa7rv7VyifFxZ7vPHFT0R7NaXhqDuP8+PKljeUsHw/ql8LUIydmr Jts1CbiH5E5ZhE4hOLy6bk6N3X5EcldXfr5uXF+MR/SF2G19CMAtNKyqMdk+h8gk LbPrrJ/6oEWQqGMITJy5+EqCs3eOvk5+Jh3s2c9qN+6cI9RhmlX5Due6csv0S78e esO7ANdMtng58ko5vPXbZWluVRiA01Mrm4thp7Ll0AytSh64EwX9XYBXPx+pvVWB VWybfPWRFHsTjcHXVUv9GSbApnYW5Q4= -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:40 2025 by rpki-client