$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa File: ce428618-de55-3e8b-b406-5b19a1cf388c.roa (raw, json) Hash identifier: otzQRPI71+XkqPM03zixvGGVEglJaVq5f4LcaSZ6LRg= Subject key identifier: 22:D2:D5:AD:3E:14:17:34:1D:72:86:74:BC:BA:74:96:2E:00:FC:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A857605C7C6E85A33E8779580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.22.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:05:c7:c6:e8:5a:33:e8:77:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=d3173062-0690-4e72-afc2-7382026a9332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:ae:14:69:34:c0:91:e7:c5:29:34:9b:64: 4d:69:fe:bb:8c:f1:ac:99:77:51:c3:2f:5e:cc:12: 9c:87:d3:51:e5:a8:54:d8:e4:38:f8:a3:d2:53:b8: d0:18:d1:ca:37:9e:ab:4b:23:65:d3:5a:af:de:09: d0:2b:59:f0:8d:96:90:2b:14:42:e5:06:36:83:ca: a2:86:75:4b:ec:2f:ee:f6:e7:92:23:80:b6:0a:ca: 05:28:0b:d7:a8:9f:63:ba:cf:cf:0d:3b:52:8d:af: f9:b8:aa:65:04:f4:d6:e1:f7:a2:e4:82:3a:af:89: 1b:5a:e8:94:3b:7d:f7:f9:7e:a6:d3:02:46:0f:86: 8c:01:d4:dd:d0:99:ca:16:6b:65:44:1f:30:47:b6: b4:f0:cc:d7:2e:5f:18:64:c5:03:87:16:59:e9:a6: 77:20:da:51:3c:14:ea:77:5b:67:b8:08:63:2f:7a: bc:b6:41:b8:1b:17:5c:7e:3a:24:68:41:f0:ec:10: ea:ec:28:e4:0a:9e:c8:84:eb:61:f1:f9:2d:b6:d1: cd:17:54:98:dc:99:30:58:37:29:06:56:f3:33:e6: 94:a4:9b:a7:16:64:20:4a:87:de:19:9e:61:a6:46: d3:68:3b:84:2f:c2:04:ca:da:04:5d:6d:05:ca:76: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:D5:AD:3E:14:17:34:1D:72:86:74:BC:BA:74:96:2E:00:FC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce428618-de55-3e8b-b406-5b19a1cf388c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:05:41:26:77:35:99:cf:6d:9e:84:dc:f0:4b:95:93:17:69: 52:a4:85:09:3a:56:a1:97:b3:4f:1f:7e:de:f1:bb:6b:d7:ef: b3:15:a6:7c:cf:61:eb:52:14:ae:5d:58:39:5a:d2:f9:9b:40: 19:8c:e7:d6:8f:39:72:79:e8:a5:38:8e:32:cd:4c:37:fd:df: 26:18:0b:2e:4b:c9:54:8e:c1:ee:01:e1:8c:72:b1:2d:b4:00: e5:26:8c:2e:df:89:81:1d:95:31:a6:f9:b9:d8:53:71:1d:c9: f6:49:5c:53:3f:30:a3:28:58:8c:4b:38:92:8c:8f:d2:1b:47: 62:c1:5d:c2:fb:53:75:3f:51:4d:35:3c:26:89:70:2d:0f:eb: 24:c4:57:1a:68:da:54:65:3b:d6:0d:8b:ae:c1:ff:84:09:5b: ff:68:d8:be:41:65:39:e8:00:c9:cd:15:18:b7:58:66:d5:f9: f2:f9:bf:db:bc:b7:af:db:cd:23:34:fd:b4:84:a1:c8:4e:8c: 78:99:74:e0:bc:a3:f5:8c:22:aa:14:16:79:12:78:7c:9b:28: 64:cc:6f:64:21:67:85:2c:30:41:43:84:68:aa:22:61:c4:29: 0a:61:a7:5b:ca:74:48:a6:8c:f7:f6:45:2a:d7:d3:10:5e:86: 69:2b:12:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgXHxuhaM+h3lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDMxNzMwNjItMDY5MC00ZTcyLWFmYzItNzM4MjAyNmE5MzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaquFGk0wJHnxSk0m2RNaf67jPGsmXdRwy9e zBKch9NR5ahU2OQ4+KPSU7jQGNHKN56rSyNl01qv3gnQK1nwjZaQKxRC5QY2g8qi hnVL7C/u9ueSI4C2CsoFKAvXqJ9jus/PDTtSja/5uKplBPTW4fei5II6r4kbWuiU O333+X6m0wJGD4aMAdTd0JnKFmtlRB8wR7a08MzXLl8YZMUDhxZZ6aZ3INpRPBTq d1tnuAhjL3q8tkG4GxdcfjokaEHw7BDq7CjkCp7IhOth8fktttHNF1SY3JkwWDcp BlbzM+aUpJunFmQgSofeGZ5hpkbTaDuEL8IEytoEXW0FynYvOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLS1a0+FBc0HXKGdLy6dJYuAPzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2U0Mjg2MTgtZGU1NS0z ZThiLWI0MDYtNWIxOWExY2YzODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQFQSZ3NZnPbZ6E3PBLlZMXaVKkhQk6VqGXs08fft7xu2vX77MVpnzP YetSFK5dWDla0vmbQBmM59aPOXJ56KU4jjLNTDf93yYYCy5LyVSOwe4B4YxysS20 AOUmjC7fiYEdlTGm+bnYU3EdyfZJXFM/MKMoWIxLOJKMj9IbR2LBXcL7U3U/UU01 PCaJcC0P6yTEVxpo2lRlO9YNi67B/4QJW/9o2L5BZTnoAMnNFRi3WGbV+fL5v9u8 t6/bzSM0/bSEochOjHiZdOC8o/WMIqoUFnkSeHybKGTMb2QhZ4UsMEFDhGiqImHE KQphp1vKdEimjPf2RSrX0xBehmkrEhU= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:03 2025 by rpki-client