$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c12f5146-00f2-37fa-bbc1-202cd251a71d.roa File: c12f5146-00f2-37fa-bbc1-202cd251a71d.roa (raw, json) Hash identifier: R8s2xoXmRh3yrLbwAJezk5Cs6MXBF8gwfhCUb6Cgp3I= Subject key identifier: FA:4B:AC:41:11:2A:B7:EE:6C:EE:03:7A:0A:B1:95:A6:40:8F:B4:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410D80FAD1F96498F752300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c12f5146-00f2-37fa-bbc1-202cd251a71d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.27.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:d8:0f:ad:1f:96:49:8f:75:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=66a26ed5-b800-45d3-a54e-15764d15c118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:48:01:c5:8d:f6:09:fa:b4:1a:02:95:e2: 36:da:16:44:c7:d7:62:27:15:05:62:84:73:15:45: b6:69:c9:f1:d9:92:83:ed:16:d0:d9:97:ab:87:db: 89:de:d5:82:a9:76:b5:85:01:e9:2d:d2:68:e9:31: ef:c1:f3:1b:e8:fc:7c:05:fc:70:d8:79:09:ed:99: a3:17:f7:58:de:c6:e6:3e:22:5d:cf:7d:c8:58:7c: 53:84:5c:a3:28:a6:68:8a:fc:43:91:40:e2:b1:dd: b9:a8:15:c7:ce:bc:e6:4a:49:a6:1a:f2:47:5c:59: 4a:6e:c8:c3:a5:5e:c2:09:03:8c:d2:30:a4:ff:1b: eb:64:0c:40:8a:3c:69:51:a0:33:6d:29:4c:c2:00: a9:33:96:0c:b8:4c:35:35:f8:f1:19:c3:1a:37:32: db:ff:5f:9e:de:71:33:b0:fc:fa:24:6f:45:c2:82: e4:be:f5:0e:4d:0b:63:05:54:e7:9f:2d:97:ea:a9: b2:c9:28:89:e3:8d:32:1a:25:7f:e3:c2:ef:26:d6: ba:c1:be:33:ae:d5:d7:0c:91:f5:01:40:ba:25:d1: b6:bc:dd:31:ff:af:d4:35:4d:1f:32:fd:5b:11:e1: 8c:cb:cc:c6:32:3a:da:6f:a1:f9:91:e7:d5:8c:0c: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4B:AC:41:11:2A:B7:EE:6C:EE:03:7A:0A:B1:95:A6:40:8F:B4:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c12f5146-00f2-37fa-bbc1-202cd251a71d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:41:8d:cb:d4:40:11:8d:84:9c:d0:90:b8:1d:77:92:79:a2: 45:8b:ac:1d:b2:be:96:18:2f:1d:6d:bd:45:a9:dc:ff:82:a1: 1c:81:85:7c:65:85:c5:30:e1:9a:ee:57:32:ad:31:b9:38:9c: 3b:2b:7e:b1:55:f2:fd:c7:f1:f9:6e:5b:08:c6:b5:28:90:72: 14:62:a6:2a:80:df:27:88:83:e2:5d:9f:77:7f:42:fe:ff:4a: 8e:a4:3c:76:2f:b6:ca:e1:4e:0d:51:df:7b:75:b8:22:0d:19: bd:05:9e:f3:e7:03:81:33:27:cb:dc:d4:db:cd:ff:3e:39:a0: b8:0c:c0:ec:d0:73:ae:61:a6:be:8c:39:32:8b:60:f5:1c:45: 3c:e9:ca:57:3b:f9:9d:d8:c8:88:02:e3:88:5c:60:c4:c7:72: 3e:01:ee:41:11:7a:d9:7d:e4:e4:07:02:ed:88:91:a1:69:7e: 91:74:45:56:9b:65:cd:5e:7d:25:60:15:99:54:da:fc:96:8e: c3:c4:90:c7:79:98:6d:e9:58:30:ae:88:3d:d3:e1:e5:22:86: 45:79:c3:d4:f3:ea:bc:6c:f8:e8:94:cd:79:22:5e:e6:34:bd: 58:bc:e4:48:e7:ca:34:5a:07:02:1c:fc:3b:66:63:db:3a:26: 43:af:e9:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENgPrR+WSY91IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjZhMjZlZDUtYjgwMC00NWQzLWE1NGUtMTU3NjRkMTVjMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYVIAcWN9gn6tBoCleI22hZEx9diJxUFYoRz FUW2acnx2ZKD7RbQ2Zerh9uJ3tWCqXa1hQHpLdJo6THvwfMb6Px8Bfxw2HkJ7Zmj F/dY3sbmPiJdz33IWHxThFyjKKZoivxDkUDisd25qBXHzrzmSkmmGvJHXFlKbsjD pV7CCQOM0jCk/xvrZAxAijxpUaAzbSlMwgCpM5YMuEw1NfjxGcMaNzLb/1+e3nEz sPz6JG9FwoLkvvUOTQtjBVTnny2X6qmyySiJ440yGiV/48LvJta6wb4zrtXXDJH1 AUC6JdG2vN0x/6/UNU0fMv1bEeGMy8zGMjrab6H5kefVjAwQrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpLrEERKrfubO4DegqxlaZAj7S+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzEyZjUxNDYtMDBmMi0z N2ZhLWJiYzEtMjAyY2QyNTFhNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9BjcvUQBGNhJzQkLgdd5J5okWLrB2yvpYYLx1tvUWp3P+CoRyBhXxl hcUw4ZruVzKtMbk4nDsrfrFV8v3H8fluWwjGtSiQchRipiqA3yeIg+Jdn3d/Qv7/ So6kPHYvtsrhTg1R33t1uCINGb0FnvPnA4EzJ8vc1NvN/z45oLgMwOzQc65hpr6M OTKLYPUcRTzpylc7+Z3YyIgC44hcYMTHcj4B7kERetl95OQHAu2IkaFpfpF0RVab Zc1efSVgFZlU2vyWjsPEkMd5mG3pWDCuiD3T4eUihkV5w9Tz6rxs+OiUzXkiXuY0 vVi85EjnyjRaBwIc/DtmY9s6JkOv6TU= -----END CERTIFICATE-----Generated at Tue Aug 5 23:03:35 2025 by rpki-client