$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa File: b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa (raw, json) Hash identifier: XdPM6Lb+rBGXdT7rctPnxVEzaDY9gg0fyNtb8saT7b8= Subject key identifier: A7:C2:20:42:6A:7B:D1:22:F1:58:21:CD:1A:E2:7F:EF:C2:6D:08:EE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412457334D099A058B46900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.25.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:45:73:34:d0:99:a0:58:b4:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3a6a3330-42c9-497d-ad87-1b7124d9598d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:54:9e:e2:54:1b:8d:01:ea:b4:5b:be:0e: fd:94:93:c1:73:da:63:10:71:0b:e6:50:af:02:8c: bb:ef:f9:63:ab:91:92:a2:fa:c9:70:f7:ad:eb:47: 3b:f5:b4:ce:92:a9:59:97:c3:a8:a1:56:49:ac:22: e8:cf:06:19:d3:40:92:e0:52:59:d4:25:22:45:ef: f2:5d:04:4f:94:17:cf:0c:35:5c:c5:2b:da:aa:6f: bd:47:da:e3:fc:07:be:9d:dc:51:01:6d:e4:08:a5: 6c:f4:7c:e0:1e:b0:c9:39:e7:55:9f:ca:84:f2:3d: 1e:00:24:74:fb:4a:c4:77:ca:b8:9e:8c:e3:62:fa: 4f:81:bd:f2:44:01:0c:b8:61:98:1d:c5:b8:09:0b: 67:82:68:93:89:bc:7e:df:fa:d5:e2:7b:e4:b7:8d: e8:d6:ec:47:55:19:67:47:8b:26:78:f6:6c:1c:53: 5e:99:2a:82:d9:6a:0a:6d:03:70:1d:e9:cb:f2:f1: b9:39:9a:2f:f4:0f:8e:ad:60:26:96:58:ba:f7:e8: 65:51:8d:17:26:79:7a:f8:2a:b6:e8:68:6a:d0:d0: a0:84:38:d6:2c:e5:9b:50:38:5c:b0:11:35:6e:db: bb:f4:e9:41:87:a3:32:64:c9:05:81:c9:7e:bc:1e: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C2:20:42:6A:7B:D1:22:F1:58:21:CD:1A:E2:7F:EF:C2:6D:08:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5a:b1:84:3f:20:35:57:65:86:25:b7:6a:52:68:a4:13:4f: 3a:19:a1:f1:4e:dc:f3:3b:4f:a4:8f:de:b5:39:74:9f:15:21: 87:51:2a:52:8b:28:86:19:71:4e:bf:39:de:bc:f9:d3:5d:e9: df:ac:d1:8c:a7:90:00:53:16:7a:d1:37:4a:54:2f:e2:aa:63: ba:b1:7e:bf:73:2e:c4:56:ad:00:8e:f7:08:6f:9c:22:79:66: 54:fd:79:34:b9:7d:a0:63:6d:44:ba:b4:e7:f5:f6:fe:db:db: 9f:bc:3f:06:d0:63:81:b6:68:c5:de:aa:c7:b8:e2:95:48:88: 04:53:c2:d8:57:68:22:49:82:74:e1:e3:bd:1d:f5:7a:95:9c: b3:b6:fd:66:d9:f3:42:e0:4f:6f:59:39:e2:c1:ec:53:e8:00: 18:cc:59:7d:bf:12:7e:e5:51:7f:ac:e6:bc:6a:c7:0d:15:bb: c8:79:ab:06:50:55:36:2a:7c:e2:2c:84:47:69:30:50:dd:23: 03:78:50:de:95:2e:47:c4:48:b1:5c:0e:d2:c9:15:ef:0d:33: c7:7e:f5:d0:0a:ae:c7:64:3c:bb:2d:a7:a3:d2:d9:81:e9:09: 1c:6a:f1:b8:5a:5f:d0:7f:ae:1a:a5:cb:64:8a:af:29:ee:54: 17:65:3c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkVzNNCZoFi0aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2E2YTMzMzAtNDJjOS00OTdkLWFkODctMWI3MTI0ZDk1OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0FUnuJUG40B6rRbvg79lJPBc9pjEHEL5lCv Aoy77/ljq5GSovrJcPet60c79bTOkqlZl8OooVZJrCLozwYZ00CS4FJZ1CUiRe/y XQRPlBfPDDVcxSvaqm+9R9rj/Ae+ndxRAW3kCKVs9HzgHrDJOedVn8qE8j0eACR0 +0rEd8q4nozjYvpPgb3yRAEMuGGYHcW4CQtngmiTibx+3/rV4nvkt43o1uxHVRln R4smePZsHFNemSqC2WoKbQNwHenL8vG5OZov9A+OrWAmlli69+hlUY0XJnl6+Cq2 6Ghq0NCghDjWLOWbUDhcsBE1btu79OlBh6MyZMkFgcl+vB5ohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfCIEJqe9Ei8VghzRrif+/CbQjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjVjYmE2YjAtNDA3My0z ZGFhLWIyOTctZWFjYThkMDk1ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRasYQ/IDVXZYYlt2pSaKQTTzoZofFO3PM7T6SP3rU5dJ8VIYdRKlKL KIYZcU6/Od68+dNd6d+s0YynkABTFnrRN0pUL+KqY7qxfr9zLsRWrQCO9whvnCJ5 ZlT9eTS5faBjbUS6tOf19v7b25+8PwbQY4G2aMXeqse44pVIiARTwthXaCJJgnTh 470d9XqVnLO2/WbZ80LgT29ZOeLB7FPoABjMWX2/En7lUX+s5rxqxw0Vu8h5qwZQ VTYqfOIshEdpMFDdIwN4UN6VLkfESLFcDtLJFe8NM8d+9dAKrsdkPLstp6PS2YHp CRxq8bhaX9B/rhqly2SKrynuVBdlPK0= -----END CERTIFICATE-----Generated at Tue Aug 5 23:03:06 2025 by rpki-client