$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa File: afb3a249-923e-3a07-90f3-787e2b08b42a.roa (raw, json) Hash identifier: 6kl9WuHqbIj0qlvOXqGmClhHEqd2h/4lY/zUM/Wztiw= Subject key identifier: DC:07:6B:69:94:62:76:DF:B9:2F:BF:07:68:6F:89:CA:93:CB:36:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81462CEE9BC081A6F8E36700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.23.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:2c:ee:9b:c0:81:a6:f8:e3:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=54c2e391-7edc-4855-93f3-7455febe1297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:07:50:9c:d4:98:42:b8:ff:83:b9:c4:cb: ea:14:79:58:d3:80:a8:41:88:d8:b3:46:fe:fc:b5: e4:92:22:c3:70:c5:4e:ed:bc:1a:86:39:e1:ae:a8: 04:0c:5b:0d:5d:b1:af:39:97:75:6c:58:38:88:ed: 1a:9c:2f:e7:58:87:d5:02:09:36:38:5f:8b:fa:ef: 5a:ac:44:bf:16:5c:08:d9:06:4e:af:8c:d2:56:09: d7:e9:8b:3d:2d:3e:8c:b6:41:3c:db:47:67:8c:31: 3f:09:ac:a9:7e:82:56:a2:fa:4b:0a:ae:03:c2:09: 43:92:70:5d:f7:8d:d3:79:fe:65:71:71:f2:c3:f0: 07:3b:20:7b:89:3a:0f:0d:ac:c0:9f:8f:8b:7c:87: ac:8e:4d:dd:ac:d8:de:1a:5e:a9:5b:7f:6b:f1:6b: 82:52:b8:b7:77:74:ba:45:f5:75:02:cb:c1:ea:55: 58:ea:af:00:aa:a5:83:95:5f:5c:85:3f:2f:39:d0: 64:01:9b:dc:17:a8:70:75:5b:7f:f4:46:2a:47:07: 23:85:a5:24:38:d7:85:24:2e:af:0b:1c:7a:0b:21: 60:c7:5b:58:b6:28:b1:c9:2b:2a:20:53:09:d3:be: 69:75:b6:11:33:19:7f:a5:23:66:55:d9:6c:29:09: de:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:07:6B:69:94:62:76:DF:B9:2F:BF:07:68:6F:89:CA:93:CB:36:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c4:71:4b:6d:2b:cc:d1:70:3c:2d:d0:f7:a5:4e:3d:fa:92: 2d:0f:f8:55:c8:18:6c:f3:ea:e8:8a:f4:f8:23:3b:37:cd:a4: 8a:0a:0d:e0:cc:1b:7f:26:fd:d6:40:e1:a1:f9:2d:17:6b:25: e4:42:fc:e5:6f:7a:11:f2:d8:b7:da:0b:87:ab:f4:41:82:2d: 7e:f2:04:aa:a4:98:9e:d1:03:08:5a:5a:17:9b:0b:1b:98:68: a6:fd:e2:33:79:bf:83:ce:7c:b5:a2:c3:3a:d4:c9:b8:1f:b9: f1:76:5c:cf:e5:a8:2e:b2:cb:a1:e3:2f:c0:5e:b0:51:a5:5a: b5:c5:30:d9:47:39:2d:a5:d4:48:13:bb:31:23:7e:c0:4a:09: 2c:3e:f1:9e:31:c8:57:4b:ae:dd:85:13:3c:7e:61:b6:fb:4c: f4:71:5d:db:a6:15:3c:94:8d:d7:22:9c:f2:da:1f:fd:8d:17: eb:41:dc:48:23:ff:c3:e7:87:ab:b7:0b:3f:fc:fe:11:3c:19: cb:aa:97:91:60:cb:09:9c:bc:0e:e2:0b:ce:f3:30:09:0a:3a: b9:f8:03:8b:1c:ad:38:f0:02:8e:da:29:65:63:4d:b5:87:41: fe:db:55:26:91:f3:b9:a2:94:73:ec:c0:e7:d7:83:c7:b9:a1: d5:4f:9f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRizum8CBpvjjZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NTRjMmUzOTEtN2VkYy00ODU1LTkzZjMtNzQ1NWZlYmUxMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu30HUJzUmEK4/4O5xMvqFHlY04CoQYjYs0b+ /LXkkiLDcMVO7bwahjnhrqgEDFsNXbGvOZd1bFg4iO0anC/nWIfVAgk2OF+L+u9a rES/FlwI2QZOr4zSVgnX6Ys9LT6MtkE820dnjDE/CaypfoJWovpLCq4DwglDknBd 943Tef5lcXHyw/AHOyB7iToPDazAn4+LfIesjk3drNjeGl6pW39r8WuCUri3d3S6 RfV1AsvB6lVY6q8AqqWDlV9chT8vOdBkAZvcF6hwdVt/9EYqRwcjhaUkONeFJC6v Cxx6CyFgx1tYtiixySsqIFMJ075pdbYRMxl/pSNmVdlsKQnefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwHa2mUYnbfuS+/B2hvicqTyzZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWZiM2EyNDktOTIzZS0z YTA3LTkwZjMtNzg3ZTJiMDhiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvEcUttK8zRcDwt0PelTj36ki0P+FXIGGzz6uiK9PgjOzfNpIoKDeDM G38m/dZA4aH5LRdrJeRC/OVvehHy2LfaC4er9EGCLX7yBKqkmJ7RAwhaWhebCxuY aKb94jN5v4POfLWiwzrUybgfufF2XM/lqC6yy6HjL8BesFGlWrXFMNlHOS2l1EgT uzEjfsBKCSw+8Z4xyFdLrt2FEzx+Ybb7TPRxXdumFTyUjdcinPLaH/2NF+tB3Egj /8Pnh6u3Cz/8/hE8Gcuql5FgywmcvA7iC87zMAkKOrn4A4scrTjwAo7aKWVjTbWH Qf7bVSaR87milHPswOfXg8e5odVPn5I= -----END CERTIFICATE-----Generated at Tue Aug 5 08:20:09 2025 by rpki-client