$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c828fead-4341-3345-920a-a94cb8fba70b.roa File: c828fead-4341-3345-920a-a94cb8fba70b.roa (raw, json) Hash identifier: 24NqHjhon9dd23zqE6nfkxoly3eL8v5QDH68Dyqxx3A= Subject key identifier: 06:51:D0:F8:90:D3:0E:A8:CA:23:7F:3C:97:BE:E5:CE:04:3E:9B:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A814641FFF20AC4FFF09E3B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c828fead-4341-3345-920a-a94cb8fba70b.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.19.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:41:ff:f2:0a:c4:ff:f0:9e:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a637b033-e5b7-440c-830f-5c295cc215be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:28:48:5b:28:97:e0:5c:04:d8:b3:e3:59: ac:d0:0e:86:d8:87:28:f9:e4:54:8e:6c:11:e3:2a: f7:76:ef:12:51:ee:65:d6:65:a2:50:18:48:63:42: 0a:a4:b5:6f:3d:62:77:7c:c3:a6:35:c0:9f:bc:c4: d4:e8:12:90:73:24:9e:9e:04:ed:ad:22:20:32:88: c5:81:59:8b:fc:f5:db:47:11:e9:3a:8d:1b:bf:50: ba:1c:8c:17:9d:da:3d:27:d8:89:02:18:1f:3c:bc: 8a:9f:63:0f:9d:32:66:0a:9a:89:be:48:90:ae:00: a5:54:a4:26:ad:dc:1c:93:16:cf:64:12:68:c4:46: aa:37:0c:13:12:52:d5:3e:ca:1a:f4:72:c6:7c:a6: 05:d4:ac:fc:b4:8a:28:3a:37:86:0e:34:8d:e0:48: cb:62:42:94:c8:6d:85:f6:1c:76:7a:44:fe:02:7b: 33:68:d5:a0:b8:4c:8f:a6:15:95:c6:57:68:59:df: e6:42:ca:59:63:72:a6:03:c9:31:1b:66:40:42:bf: c1:29:3d:65:ce:65:6b:19:14:7a:77:9c:ec:77:4b: d8:05:2f:48:ff:b1:3d:80:40:f9:08:56:9c:5b:2b: 05:b1:e8:37:58:1c:b4:49:ee:34:e4:b4:34:08:bc: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:D0:F8:90:D3:0E:A8:CA:23:7F:3C:97:BE:E5:CE:04:3E:9B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c828fead-4341-3345-920a-a94cb8fba70b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:78:88:7c:f3:ec:4e:d3:1f:98:56:9c:25:05:4d:55:7b:d7: a7:49:62:df:9d:c0:7e:6a:cb:df:c7:46:eb:b2:ba:5a:d9:d8: 02:0c:e6:bb:c6:17:bf:be:29:27:6b:66:5c:8f:a2:46:8e:d7: c7:c8:23:6e:c0:b1:a6:60:bd:92:a0:1a:35:27:ba:cc:40:b3: 1d:f8:57:39:55:db:77:e5:6f:b7:7a:15:15:d5:06:76:62:a4: 81:6c:ac:f9:5c:12:cf:68:fd:f7:2d:8f:e9:58:c8:98:df:1d: cc:8a:81:dc:f8:73:48:01:db:d5:a3:fd:d3:00:c0:f0:39:9e: 6d:21:21:96:d6:18:6f:5f:22:ea:f8:c8:7c:8f:ce:0d:a8:a7: 6c:c8:a3:df:56:21:78:3b:cd:23:ec:49:b0:f9:e3:32:8a:db: b8:22:1e:d5:7d:f6:36:c9:22:ef:38:40:89:ce:71:05:1e:45: 4c:3d:a6:1b:28:e3:dc:ce:91:93:6d:fb:c9:1b:7f:ba:09:13: 41:e4:da:fb:a0:3a:84:ba:1e:b9:34:83:35:55:18:54:31:47: 4a:6f:60:6c:db:ac:d8:a8:b7:e2:8f:bf:d5:67:1f:bf:5f:ce: d8:51:da:f7:be:39:66:56:5b:50:58:72:2e:39:09:31:33:d5: bc:9c:d0:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkH/8grE//CeO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTYzN2IwMzMtZTViNy00NDBjLTgzMGYtNWMyOTVjYzIxNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLkoSFsol+BcBNiz41ms0A6G2Ico+eRUjmwR 4yr3du8SUe5l1mWiUBhIY0IKpLVvPWJ3fMOmNcCfvMTU6BKQcySengTtrSIgMojF gVmL/PXbRxHpOo0bv1C6HIwXndo9J9iJAhgfPLyKn2MPnTJmCpqJvkiQrgClVKQm rdwckxbPZBJoxEaqNwwTElLVPsoa9HLGfKYF1Kz8tIooOjeGDjSN4EjLYkKUyG2F 9hx2ekT+AnszaNWguEyPphWVxldoWd/mQspZY3KmA8kxG2ZAQr/BKT1lzmVrGRR6 d5zsd0vYBS9I/7E9gED5CFacWysFseg3WBy0Se405LQ0CLz20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZR0PiQ0w6oyiN/PJe+5c4EPptnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzgyOGZlYWQtNDM0MS0z MzQ1LTkyMGEtYTk0Y2I4ZmJhNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd4iHzz7E7TH5hWnCUFTVV716dJYt+dwH5qy9/HRuuyulrZ2AIM5rvG F7++KSdrZlyPokaO18fII27AsaZgvZKgGjUnusxAsx34VzlV23flb7d6FRXVBnZi pIFsrPlcEs9o/fctj+lYyJjfHcyKgdz4c0gB29Wj/dMAwPA5nm0hIZbWGG9fIur4 yHyPzg2op2zIo99WIXg7zSPsSbD54zKK27giHtV99jbJIu84QInOcQUeRUw9phso 49zOkZNt+8kbf7oJE0Hk2vugOoS6Hrk0gzVVGFQxR0pvYGzbrNiot+KPv9VnH79f zthR2ve+OWZWW1BYci45CTEz1byc0Ig= -----END CERTIFICATE-----Generated at Wed Aug 6 07:59:19 2025 by rpki-client