$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2dc53d9-80cf-32de-aa99-2f117257a0db.roa File: b2dc53d9-80cf-32de-aa99-2f117257a0db.roa (raw, json) Hash identifier: 0OQ8h7WNV/nkrakbqDYsTM4+efH4a/bvPJa93iKUD+g= Subject key identifier: 41:A3:D1:83:A0:3C:90:97:85:27:B0:95:05:1C:A0:AB:C3:77:B1:01 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC059DD33B94BFCAF39080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2dc53d9-80cf-32de-aa99-2f117257a0db.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.19.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:05:9d:d3:3b:94:bf:ca:f3:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=54163327-4430-4e00-b865-16580da06aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:c6:6a:f9:63:89:a6:9a:28:3f:76:17:db: a9:dd:1e:69:89:19:c8:7f:72:28:57:f1:85:ff:52: f0:39:09:6d:31:73:bd:bd:91:16:fd:ce:69:24:45: db:45:3f:59:23:7c:68:c1:eb:f7:82:47:6c:81:99: 45:e6:bb:41:82:62:b5:98:77:e1:21:87:31:27:ce: 70:48:05:b8:e6:cc:78:6d:20:dd:de:67:f8:ce:de: cb:a2:9b:74:f8:4c:4d:4c:31:cc:e2:d0:e1:13:47: 47:d5:bd:e3:b1:2e:7c:98:d4:60:1e:6e:b5:ac:38: 2d:9b:a8:84:d6:84:7d:cd:90:e0:e2:13:e1:25:79: f8:6b:5b:33:05:29:0f:90:3a:b9:85:d0:72:4c:b8: 6a:b0:ec:02:92:63:73:0f:d0:43:d3:f0:f6:63:ba: 93:d8:85:32:a7:5c:2f:80:44:74:c0:ce:60:5c:00: 42:f0:2c:2b:e2:46:76:48:e3:7b:84:c6:80:67:39: 68:d4:56:a6:0a:e2:cc:62:13:d3:5c:1e:8e:4d:7f: f4:3d:b5:ba:a0:ec:c9:54:79:5a:83:bb:c6:9f:44: 7e:da:a9:0c:55:4f:8e:ae:2c:86:cb:1a:bb:0f:95: d5:5c:59:8b:99:95:4e:e4:b2:2f:b5:45:13:bc:79: 21:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A3:D1:83:A0:3C:90:97:85:27:B0:95:05:1C:A0:AB:C3:77:B1:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2dc53d9-80cf-32de-aa99-2f117257a0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c2:22:53:a7:e7:40:60:94:a4:c1:2e:fb:f3:71:7a:df:ac: 37:29:85:0b:06:81:28:ee:b9:64:35:a3:81:d7:7a:9b:cc:9c: ae:1c:61:9e:32:bd:95:4e:e9:1e:e7:82:b9:d8:38:06:02:31: 44:94:c0:a7:ad:5c:38:b9:d0:7b:91:27:48:63:fa:fa:27:59: 13:29:98:7c:42:7f:0f:1a:57:fc:e4:15:14:be:c7:85:97:87: 2c:c1:4b:dd:a0:8c:de:cd:7f:e1:c2:31:c8:c6:d9:c9:78:1f: a1:a2:26:a5:79:53:a7:0e:3b:43:b9:4d:54:bf:83:e0:93:73: f8:5b:a2:07:3e:f7:2a:a3:66:b1:0e:19:93:19:6b:f6:69:34: b8:ef:3f:0f:c1:34:09:ea:c1:cf:93:7b:4b:4e:d9:75:81:7f: 0a:cd:bd:e4:99:2a:12:1e:d4:2f:40:45:57:02:2f:50:77:1a: 84:9b:69:ec:df:93:4c:06:20:89:21:ab:87:e0:c7:84:bc:f0: f0:21:0d:30:08:c7:4f:15:b9:3e:58:76:b7:d3:d6:c8:14:c8: 40:63:a7:a0:d1:97:9b:ae:bd:55:59:73:a4:b3:15:43:ce:bb: 53:8a:a4:f1:c6:53:48:f2:bf:59:20:48:ee:c8:e2:a7:2c:2f: ec:6f:85:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3AWd0zuUv8rzkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NTQxNjMzMjctNDQzMC00ZTAwLWI4NjUtMTY1ODBkYTA2YWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDfGavljiaaaKD92F9up3R5piRnIf3IoV/GF /1LwOQltMXO9vZEW/c5pJEXbRT9ZI3xowev3gkdsgZlF5rtBgmK1mHfhIYcxJ85w SAW45sx4bSDd3mf4zt7Lopt0+ExNTDHM4tDhE0dH1b3jsS58mNRgHm61rDgtm6iE 1oR9zZDg4hPhJXn4a1szBSkPkDq5hdByTLhqsOwCkmNzD9BD0/D2Y7qT2IUyp1wv gER0wM5gXABC8Cwr4kZ2SON7hMaAZzlo1FamCuLMYhPTXB6OTX/0PbW6oOzJVHla g7vGn0R+2qkMVU+OriyGyxq7D5XVXFmLmZVO5LIvtUUTvHkhnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGj0YOgPJCXhSewlQUcoKvDd7EBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJkYzUzZDktODBjZi0z MmRlLWFhOTktMmYxMTcyNTdhMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRPiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7CIlOn50BglKTBLvvzcXrfrDcphQsGgSjuuWQ1o4HXepvMnK4cYZ4y vZVO6R7ngrnYOAYCMUSUwKetXDi50HuRJ0hj+vonWRMpmHxCfw8aV/zkFRS+x4WX hyzBS92gjN7Nf+HCMcjG2cl4H6GiJqV5U6cOO0O5TVS/g+CTc/hbogc+9yqjZrEO GZMZa/ZpNLjvPw/BNAnqwc+Te0tO2XWBfwrNveSZKhIe1C9ARVcCL1B3GoSbaezf k0wGIIkhq4fgx4S88PAhDTAIx08VuT5YdrfT1sgUyEBjp6DRl5uuvVVZc6SzFUPO u1OKpPHGU0jyv1kgSO7I4qcsL+xvhS4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:38:19 2025 by rpki-client