$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa File: b85ae6d7-e6f8-347c-9094-7c500122ea64.roa (raw, json) Hash identifier: oZi4w424pybDXeJ3at3V8k4qNgKhBbLe3YM8iW4PRwU= Subject key identifier: 95:7B:8C:52:D2:2C:8A:B7:68:F5:9E:62:31:BB:DB:43:5A:8B:18:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC03B9B97B328622904D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.16.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:03:b9:b9:7b:32:86:22:90:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0d623e51-268a-4edf-b2fb-3198a5b28f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:05:c8:b3:c5:6e:d4:f7:9d:91:a0:89:5e:e9: 57:47:48:1b:bf:68:65:e8:6f:db:51:9c:9f:cb:df: 47:60:b8:2b:eb:02:4b:b0:77:83:36:d9:1f:ac:82: d3:2f:ca:c7:06:30:ea:9e:11:e3:2c:2c:be:db:87: f9:f0:d2:0d:98:eb:13:96:ff:b7:6d:a1:59:1f:a8: 28:11:90:cf:7f:ee:19:76:30:d3:37:79:e0:e6:c8: c8:53:57:5a:50:25:05:b9:eb:b9:94:3d:78:93:ac: 1e:50:28:5e:c9:99:f4:d0:4a:c5:a7:0d:5a:70:9d: 71:c1:2b:d1:55:29:13:5b:86:a5:03:c8:2b:27:2f: 3e:13:c3:9a:e0:96:3c:50:59:a6:a2:ce:e5:bf:1e: 97:e8:3c:67:fd:ab:d9:f3:60:56:82:b1:42:81:82: 5d:fc:25:5b:5b:58:95:99:15:ff:8e:e8:a9:e6:7e: 5c:88:47:88:39:85:1d:46:a6:ca:01:b0:df:b4:95: fe:1b:6f:42:db:0d:d9:25:f8:d1:7b:86:d4:eb:8d: 38:8d:2f:b2:9f:7d:c1:51:21:26:4c:d4:f1:7d:0f: 92:25:d3:6b:3e:8c:c4:c7:e3:b2:72:74:b6:b3:1c: 87:06:eb:86:1b:b6:75:92:a0:61:71:f9:d6:02:81: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:8C:52:D2:2C:8A:B7:68:F5:9E:62:31:BB:DB:43:5A:8B:18:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fb:bb:59:8f:db:3b:f2:f5:aa:01:6e:6b:e4:08:e5:53:61: 03:16:80:d5:06:48:b7:38:46:4b:55:ac:d5:39:96:0e:a5:75: 14:61:3c:c9:2b:d7:26:6e:46:5d:1c:74:2b:10:5e:a5:01:18: c8:1f:7f:3e:ad:95:8d:4d:df:4c:89:0b:4f:6a:89:bf:62:3a: a6:dd:a9:f6:1b:f8:8c:0c:e9:50:45:82:43:f8:c6:8c:54:3c: 07:c4:8c:b5:ca:2d:67:d2:f0:9c:60:85:72:0a:76:2e:56:06: 95:50:3d:8b:23:55:7d:a2:8c:5a:c0:40:1e:ba:5b:f5:5b:cc: 3d:03:42:18:cf:5e:83:fe:55:cd:76:21:8d:f1:0a:7a:0c:a4: 77:e6:02:30:3a:e5:74:43:67:9d:23:89:5e:bf:78:9d:83:a4: f5:99:c7:e2:b0:40:e0:72:a2:72:60:92:ec:d4:63:a0:fe:07: ef:1d:d6:17:77:39:40:94:6c:2d:07:ec:34:35:ca:8a:bd:f9: 44:71:d9:05:6f:c5:1f:bf:82:f3:00:f6:49:5c:84:72:64:3f: 23:39:51:92:a8:a8:c2:c2:72:6d:84:2e:25:f4:11:1c:50:0a: fd:96:37:a3:18:8c:72:5c:70:f1:30:8c:e1:65:89:bb:5a:6c: fa:dc:29:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3AO5uXsyhiKQTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGQ2MjNlNTEtMjY4YS00ZWRmLWIyZmItMzE5OGE1YjI4Zjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gXIs8Vu1PedkaCJXulXR0gbv2hl6G/bUZyf y99HYLgr6wJLsHeDNtkfrILTL8rHBjDqnhHjLCy+24f58NINmOsTlv+3baFZH6go EZDPf+4ZdjDTN3ng5sjIU1daUCUFueu5lD14k6weUCheyZn00ErFpw1acJ1xwSvR VSkTW4alA8grJy8+E8Oa4JY8UFmmos7lvx6X6Dxn/avZ82BWgrFCgYJd/CVbW1iV mRX/juip5n5ciEeIOYUdRqbKAbDftJX+G29C2w3ZJfjRe4bU6404jS+yn33BUSEm TNTxfQ+SJdNrPozEx+OycnS2sxyHBuuGG7Z1kqBhcfnWAoHGXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV7jFLSLIq3aPWeYjG720NaixifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjg1YWU2ZDctZTZmOC0z NDdjLTkwOTQtN2M1MDAxMjJlYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr7u1mP2zvy9aoBbmvkCOVTYQMWgNUGSLc4RktVrNU5lg6ldRRhPMkr 1yZuRl0cdCsQXqUBGMgffz6tlY1N30yJC09qib9iOqbdqfYb+IwM6VBFgkP4xoxU PAfEjLXKLWfS8JxghXIKdi5WBpVQPYsjVX2ijFrAQB66W/VbzD0DQhjPXoP+Vc12 IY3xCnoMpHfmAjA65XRDZ50jiV6/eJ2DpPWZx+KwQOByonJgkuzUY6D+B+8d1hd3 OUCUbC0H7DQ1yoq9+URx2QVvxR+/gvMA9klchHJkPyM5UZKoqMLCcm2ELiX0ERxQ Cv2WN6MYjHJccPEwjOFlibtabPrcKYw= -----END CERTIFICATE-----Generated at Wed Aug 6 04:11:49 2025 by rpki-client