$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa File: c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa (raw, json) Hash identifier: 9Km8braJkCyhheaDlPjvVX+k4LOHZvFfImxkjYVZCRU= Subject key identifier: 68:14:07:CF:0A:EA:9C:D1:4D:42:AC:D3:F5:53:AF:AA:C2:ED:5B:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DBFC199CE93408C302E140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.21.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:fc:19:9c:e9:34:08:c3:02:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cd87b8fb-ef15-4b0f-a912-9f9a26c8b9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:03:91:f2:9c:0e:1a:ec:49:09:b8:b5:06:ad: e6:d2:2d:08:90:61:a6:93:1c:91:bb:47:6b:0c:51: 83:5d:5c:20:56:e6:51:87:58:4c:6c:4c:71:62:23: 78:40:79:58:f6:b5:7d:25:c1:3d:be:6b:2b:08:ba: 84:5d:9c:1d:ab:64:bd:66:f4:c3:3d:75:25:89:e0: 84:ca:56:cb:e0:09:16:9e:4b:46:7d:95:b7:0b:6c: d8:b4:69:00:ad:cf:35:4b:f3:70:95:5d:08:97:32: 49:e1:e4:08:c4:92:24:71:9b:31:bb:09:9f:a3:79: 96:de:94:79:3b:a5:e4:5b:d5:28:50:8b:ee:f7:55: 7d:42:bf:09:b9:80:69:83:8c:6a:8c:f7:e1:bb:0f: f0:64:a5:c1:ff:0c:6a:60:9e:57:c6:ce:e9:70:32: bf:67:6d:f4:c2:1e:68:c9:50:63:80:ea:66:fb:f5: 3e:d5:d2:96:3a:1a:83:b8:f3:e8:75:ef:34:fc:d7: b6:12:73:13:85:09:63:23:97:48:85:9f:d0:1f:c5: b7:6b:d8:d1:2f:3e:dd:d1:cc:4e:b0:18:92:39:10: 88:b7:42:e9:e6:96:e2:7f:d4:d6:9c:8b:88:c6:e5: 9a:0f:75:44:58:75:94:e5:43:17:27:2d:d5:4e:a8: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:07:CF:0A:EA:9C:D1:4D:42:AC:D3:F5:53:AF:AA:C2:ED:5B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7c:5e:55:f4:f8:5d:c8:92:a5:c4:57:aa:65:3f:8f:32:35: 41:b2:19:be:f8:da:b9:5b:07:db:dc:ff:23:14:cb:29:54:8e: 36:e1:03:06:6f:df:7c:f0:85:f1:53:81:e8:43:1d:5c:91:c7: 4d:2a:60:a9:a3:9a:5b:55:a4:a6:cc:a2:dc:0d:c4:c0:f6:c7: a7:27:ef:00:ba:a2:4b:9e:44:85:73:bc:65:19:42:6d:a9:92: f1:75:18:70:d9:8d:bb:2a:ae:e5:fd:6c:0e:6a:23:39:ca:2a: 3d:ea:cf:fd:2e:47:98:87:e9:18:7d:a5:75:50:ed:af:6f:8e: f4:a7:d8:1b:c7:96:3a:e0:d8:4f:80:d9:6b:d8:6b:37:ca:11: e2:6a:1f:69:ba:8e:9a:8b:22:9d:c1:68:22:01:2c:21:76:d0: d9:01:76:79:a4:2b:3d:2d:f4:62:cb:ec:7c:df:0c:fc:ef:24: 11:c4:fb:c7:42:37:f7:cc:1b:bf:7d:37:d1:be:87:7a:8a:dc: 4a:74:7a:7b:34:78:05:43:84:40:e5:53:53:88:b2:61:d0:4a: 4e:90:0f:16:8c:7e:4e:30:e7:d6:82:62:ef:89:cc:84:37:6b: 1b:cd:f6:49:1c:29:0d:a1:00:a6:c6:2d:de:89:96:d7:6d:7e: fb:e1:39:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/wZnOk0CMMC4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2Q4N2I4ZmItZWYxNS00YjBmLWE5MTItOWY5YTI2YzhiOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggOR8pwOGuxJCbi1Bq3m0i0IkGGmkxyRu0dr DFGDXVwgVuZRh1hMbExxYiN4QHlY9rV9JcE9vmsrCLqEXZwdq2S9ZvTDPXUlieCE ylbL4AkWnktGfZW3C2zYtGkArc81S/NwlV0IlzJJ4eQIxJIkcZsxuwmfo3mW3pR5 O6XkW9UoUIvu91V9Qr8JuYBpg4xqjPfhuw/wZKXB/wxqYJ5Xxs7pcDK/Z230wh5o yVBjgOpm+/U+1dKWOhqDuPPode80/Ne2EnMThQljI5dIhZ/QH8W3a9jRLz7d0cxO sBiSORCIt0Lp5pbif9TWnIuIxuWaD3VEWHWU5UMXJy3VTqgHSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgUB88K6pzRTUKs0/VTr6rC7VsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMzZjNhMmUtNmIxYS0z NmNjLWE4NzktN2ViZTA4NTY4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE58XlX0+F3IkqXEV6plP48yNUGyGb742rlbB9vc/yMUyylUjjbhAwZv 33zwhfFTgehDHVyRx00qYKmjmltVpKbMotwNxMD2x6cn7wC6okueRIVzvGUZQm2p kvF1GHDZjbsqruX9bA5qIznKKj3qz/0uR5iH6Rh9pXVQ7a9vjvSn2BvHljrg2E+A 2WvYazfKEeJqH2m6jpqLIp3BaCIBLCF20NkBdnmkKz0t9GLL7HzfDPzvJBHE+8dC N/fMG799N9G+h3qK3Ep0ens0eAVDhEDlU1OIsmHQSk6QDxaMfk4w59aCYu+JzIQ3 axvN9kkcKQ2hAKbGLd6JltdtfvvhOQY= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:53 2025 by rpki-client