$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf8cf821-9175-30d6-8d22-bb61d0de08f5.roa File: bf8cf821-9175-30d6-8d22-bb61d0de08f5.roa (raw, json) Hash identifier: 9SyoEZp0kAQDj4T8rChxUnuDGXXw8yKDa8WEtcdcoqA= Subject key identifier: C9:AF:61:E7:98:87:32:CA:6F:C6:15:A3:03:3E:6B:D7:6B:DA:26:AF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A7BB0ABB4A880B38367518980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf8cf821-9175-30d6-8d22-bb61d0de08f5.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 173.19.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:ab:b4:a8:80:b3:83:67:51:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=d72f2b1b-6f89-420f-b1ae-9c0a2954a2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:42:f3:38:69:fa:1a:a4:bb:a9:4e:85:ff: 31:0c:fa:ef:8b:f4:5e:ed:93:e3:13:86:ee:25:57: 63:1b:af:96:b9:92:72:0e:3d:bb:09:5b:90:6d:0d: b0:11:ce:fe:46:b8:2d:31:36:f9:d8:45:3a:a8:49: 2c:fa:67:b1:29:86:64:b4:89:e2:62:94:02:08:0a: b2:aa:78:06:1c:e3:b6:55:e8:ae:00:f5:b1:d7:6a: 56:49:5b:64:30:50:9e:cc:34:a4:c9:31:57:91:53: b5:71:f3:5f:a1:99:4e:53:aa:c8:59:7d:d2:50:9f: 50:40:15:43:ce:d4:e0:d3:22:a9:8c:18:2d:7d:a5: 10:01:63:af:18:c8:24:9b:10:68:13:4d:bf:a5:9f: 15:31:d4:a9:eb:e5:bb:af:13:08:a6:4a:98:00:8e: 92:9c:a7:8a:6b:7a:b7:67:61:3b:69:8d:2b:09:b6: cc:9c:1f:38:8e:4c:69:2f:a0:9a:1a:8f:47:d0:19: a2:ce:78:ed:ae:78:5e:f2:ce:be:c6:23:85:aa:80: b8:e0:70:34:1c:0e:a5:cb:be:7e:e5:79:4c:14:87: bc:bc:78:f6:33:18:20:b1:69:00:0d:30:e0:d5:71: 34:41:78:59:2c:48:be:47:44:a7:96:ae:2e:74:e8: a8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AF:61:E7:98:87:32:CA:6F:C6:15:A3:03:3E:6B:D7:6B:DA:26:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf8cf821-9175-30d6-8d22-bb61d0de08f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1b:8a:6c:6e:ce:28:0d:d9:32:28:34:8f:c4:e2:04:f5:dc: 83:37:a6:f1:78:5e:3a:1f:34:3c:a5:97:fb:23:cc:a6:2c:47: 59:ee:73:02:a3:64:14:63:67:a9:f7:e9:c0:2f:a7:f6:80:14: 26:f6:a5:9a:4a:12:94:b3:33:63:5c:62:f6:84:b7:b5:ec:94: a5:b7:36:5a:b3:a7:ba:7e:95:aa:30:d7:ea:a1:6a:a4:ab:88: f7:61:a2:81:1c:59:44:51:ba:cd:35:48:65:aa:23:ec:1c:6f: d0:24:36:1a:8a:e7:9e:04:de:fb:03:49:ab:3c:31:1a:7d:bc: cf:80:ea:2a:1d:62:f0:cc:32:8a:f3:82:b0:1d:f2:e8:c3:3e: 93:35:74:9f:de:bf:94:30:02:6e:d7:79:07:08:20:07:e6:0b: 19:85:92:29:d2:73:f4:e7:b6:c2:12:2a:42:90:3d:0c:e5:88: 5a:e7:84:99:36:eb:44:a4:0c:08:6f:b9:db:d3:06:1f:e7:38: 89:c0:85:dd:1b:c4:53:a1:66:5c:25:c6:c7:63:f3:53:3f:41: 8f:18:dd:41:a9:db:47:63:3c:70:a5:3b:e1:c0:11:98:37:77: 48:4a:42:57:70:22:a0:0c:79:3c:84:e5:40:62:8f:dc:7f:39: 0e:23:af:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sKu0qICzg2dRiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZDcyZjJiMWItNmY4OS00MjBmLWIxYWUtOWMwYTI5NTRhMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngZC8zhp+hqku6lOhf8xDPrvi/Re7ZPjE4bu JVdjG6+WuZJyDj27CVuQbQ2wEc7+RrgtMTb52EU6qEks+mexKYZktIniYpQCCAqy qngGHOO2VeiuAPWx12pWSVtkMFCezDSkyTFXkVO1cfNfoZlOU6rIWX3SUJ9QQBVD ztTg0yKpjBgtfaUQAWOvGMgkmxBoE02/pZ8VMdSp6+W7rxMIpkqYAI6SnKeKa3q3 Z2E7aY0rCbbMnB84jkxpL6CaGo9H0Bmiznjtrnhe8s6+xiOFqoC44HA0HA6ly75+ 5XlMFIe8vHj2MxggsWkADTDg1XE0QXhZLEi+R0Snlq4udOiohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmvYeeYhzLKb8YVowM+a9dr2iavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmY4Y2Y4MjEtOTE3NS0z MGQ2LThkMjItYmI2MWQwZGUwOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrROwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgbimxuzigN2TIoNI/E4gT13IM3pvF4XjofNDyll/sjzKYsR1nucwKj ZBRjZ6n36cAvp/aAFCb2pZpKEpSzM2NcYvaEt7XslKW3Nlqzp7p+laow1+qhaqSr iPdhooEcWURRus01SGWqI+wcb9AkNhqK554E3vsDSas8MRp9vM+A6iodYvDMMorz grAd8ujDPpM1dJ/ev5QwAm7XeQcIIAfmCxmFkinSc/TntsISKkKQPQzliFrnhJk2 60SkDAhvudvTBh/nOInAhd0bxFOhZlwlxsdj81M/QY8Y3UGp20djPHClO+HAEZg3 d0hKQldwIqAMeTyE5UBij9x/OQ4jr9Q= -----END CERTIFICATE-----Generated at Mon Aug 4 22:19:05 2025 by rpki-client