$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce7b92e-4609-3c18-8be1-3716e1141488.roa File: cce7b92e-4609-3c18-8be1-3716e1141488.roa (raw, json) Hash identifier: xcTcMuUme2syVd0cBJFBl7vN6j83FNSRvg8fOeB01og= Subject key identifier: 2A:95:A9:90:48:94:7A:44:83:83:0F:7A:61:37:D8:DC:47:D7:FD:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AAE87EA0011B00FD9FB546A40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce7b92e-4609-3c18-8be1-3716e1141488.roa Signing time: Tue 29 Jul 2025 18:05:16 +0000 ROA not before: Tue 29 Jul 2025 18:05:16 +0000 ROA not after: Mon 27 Oct 2025 18:05:16 +0000 asID: 19905 IP address blocks: 173.25.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:87:ea:00:11:b0:0f:d9:fb:54:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 18:05:16 2025 GMT Not After : Oct 27 18:05:16 2025 GMT Subject: CN=80f16bad-f7de-4ce1-8845-6f0923eb8a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:95:6b:56:dd:2d:28:0e:60:a8:be:64:2a: cb:15:58:59:fe:26:61:e9:a6:2c:33:ea:24:4d:0e: 16:13:2a:65:20:3d:ae:d0:a5:7d:1b:ae:1f:38:bc: 8f:cf:67:4f:e9:f8:8d:8a:cd:55:d8:c5:51:ae:f2: 94:07:9e:3d:3b:9c:e9:fb:21:07:9e:ba:d5:77:1c: 2a:8f:4d:38:58:ce:1c:c5:91:7f:a1:55:c1:97:52: 14:22:ce:60:17:c8:de:c4:7f:6d:25:8c:89:24:d1: 89:ee:29:3c:1d:7d:ae:6b:d5:b1:2a:8c:81:15:f6: a7:4b:c1:02:f4:aa:2c:84:7c:4b:80:07:b0:bd:44: 2a:d5:b4:0f:4e:6b:bd:bb:04:29:38:4d:27:f0:09: ad:a3:86:91:4b:f3:d5:f5:ef:4d:b7:f1:73:8c:f1: aa:cf:81:ac:d5:e4:25:ee:f9:e9:b9:1e:45:99:40: 96:2e:8f:ae:cb:60:2e:2a:ae:d0:42:54:13:dd:cf: 7d:9e:1a:d1:27:c4:a0:91:93:b0:48:82:78:16:14: 17:9a:42:96:63:78:24:d6:90:ea:3f:c2:fe:bd:0c: c6:a0:d2:bd:2a:da:d9:47:55:0b:82:6e:0d:81:d0: 0f:53:7c:89:c7:5c:d4:e5:b9:da:97:e9:44:65:9d: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:95:A9:90:48:94:7A:44:83:83:0F:7A:61:37:D8:DC:47:D7:FD:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce7b92e-4609-3c18-8be1-3716e1141488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:07:48:7f:03:38:87:36:3e:56:ba:fc:3c:d5:d6:94:78:9d: 42:cd:a0:a7:b9:31:c1:a1:51:f5:90:d8:2e:64:90:b8:6a:d4: 36:5c:d5:27:a9:96:d6:30:0a:8d:28:3a:d0:10:1b:fe:77:8c: d5:2b:88:f8:29:ba:7a:2f:36:e1:f9:42:c3:9d:87:e7:15:cb: 8e:9d:ce:c8:89:7f:82:d7:8b:0a:64:98:9d:b2:e4:5c:b6:54: 59:15:67:b5:1c:64:9a:b7:70:18:88:52:56:b3:c7:28:96:56: 7c:10:5a:41:d0:e9:b4:76:c4:19:81:6d:64:fd:16:e3:92:26: a5:d7:73:03:17:2c:00:55:b2:be:e1:b8:59:a6:83:3f:47:44: c8:d9:35:87:9d:5e:eb:33:93:ab:46:42:9e:4f:ce:10:f7:40: 21:86:20:43:10:8f:16:a6:de:c3:bd:75:15:87:83:53:71:88: 06:9e:08:04:7e:63:1d:94:d6:51:a0:1e:1b:78:90:6a:61:64: a0:b1:88:12:5a:8b:1c:f9:18:1c:98:d1:a5:89:28:b4:ee:89: 6f:57:2c:ce:fe:60:f6:26:55:20:f2:52:67:84:e2:00:cc:86: c6:8a:30:62:d3:e2:3a:21:7c:d3:fa:4c:80:78:f2:f9:72:b6: d9:5e:2a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEquh+oAEbAP2ftUakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcyOTE4MDUxNloXDTI1MTAyNzE4MDUxNlowLzEtMCsGA1UEAxMk ODBmMTZiYWQtZjdkZS00Y2UxLTg4NDUtNmYwOTIzZWI4YTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE+Va1bdLSgOYKi+ZCrLFVhZ/iZh6aYsM+ok TQ4WEyplID2u0KV9G64fOLyPz2dP6fiNis1V2MVRrvKUB549O5zp+yEHnrrVdxwq j004WM4cxZF/oVXBl1IUIs5gF8jexH9tJYyJJNGJ7ik8HX2ua9WxKoyBFfanS8EC 9KoshHxLgAewvUQq1bQPTmu9uwQpOE0n8Amto4aRS/PV9e9Nt/FzjPGqz4Gs1eQl 7vnpuR5FmUCWLo+uy2AuKq7QQlQT3c99nhrRJ8SgkZOwSIJ4FhQXmkKWY3gk1pDq P8L+vQzGoNK9KtrZR1ULgm4NgdAPU3yJx1zU5bnal+lEZZ30rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqVqZBIlHpEg4MPemE32NxH1/1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2NlN2I5MmUtNDYwOS0z YzE4LThiZTEtMzcxNmUxMTQxNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8HSH8DOIc2Pla6/DzV1pR4nULNoKe5McGhUfWQ2C5kkLhq1DZc1Sep ltYwCo0oOtAQG/53jNUriPgpunovNuH5QsOdh+cVy46dzsiJf4LXiwpkmJ2y5Fy2 VFkVZ7UcZJq3cBiIUlazxyiWVnwQWkHQ6bR2xBmBbWT9FuOSJqXXcwMXLABVsr7h uFmmgz9HRMjZNYedXuszk6tGQp5PzhD3QCGGIEMQjxam3sO9dRWHg1NxiAaeCAR+ Yx2U1lGgHht4kGphZKCxiBJaixz5GByY0aWJKLTuiW9XLM7+YPYmVSDyUmeE4gDM hsaKMGLT4johfNP6TIB48vlyttleKnw= -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:57 2025 by rpki-client