$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa File: d3423c42-0777-371a-82d7-800c36f0e32f.roa (raw, json) Hash identifier: Ko2jD45wyXlatKg4iO/j862sB1RubXmpPKoBY5qpjgQ= Subject key identifier: 62:FE:77:3A:F3:DA:14:53:79:6C:3F:AE:BB:A2:CF:30:E7:6D:A4:53 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81465F667BCFDF3FD0A56F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.19.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:5f:66:7b:cf:df:3f:d0:a5:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b6a1643d-9f67-4546-9124-1e28887e9b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:43:b3:ac:a4:f4:b2:be:76:73:44:e7:f5: 34:f6:b4:d5:be:74:ed:f1:4a:ee:90:f6:f3:09:9b: 19:73:4d:d0:91:ee:69:bf:9b:40:ed:32:a7:dd:c9: 2a:bf:99:29:0f:98:86:c6:d0:31:6d:c3:e0:27:97: f0:74:f4:19:bd:a3:18:f1:24:b2:1e:66:04:d4:77: 60:34:ed:bb:0d:7d:d4:9d:53:9c:f5:67:5e:7d:4f: 09:6a:73:fc:7c:71:13:d1:98:40:7b:77:e2:5b:27: c7:0f:39:11:2f:b4:fa:64:93:3c:ff:b6:09:08:ba: a4:d2:28:62:16:cd:4b:37:0e:16:25:00:72:42:f9: e9:39:00:f5:1f:58:50:22:16:74:84:eb:65:b7:88: 68:d0:9f:08:8a:6e:13:de:95:40:b4:33:6c:0f:00: 47:22:16:dd:3f:37:e2:4b:93:2c:4c:16:97:35:3d: 1e:25:b9:a8:d9:29:c0:ce:00:e4:ac:55:73:68:a4: 8f:fd:d6:9d:08:f2:2f:8b:67:ca:03:c0:c8:81:84: 0d:ec:b7:0d:d0:53:c3:c0:b7:c0:2e:40:2b:91:44: 8e:fb:f0:b7:ba:41:52:ab:63:39:09:e4:4f:6a:25: c3:25:cf:fb:19:45:0f:94:d2:a9:71:89:fe:00:a0: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FE:77:3A:F3:DA:14:53:79:6C:3F:AE:BB:A2:CF:30:E7:6D:A4:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:de:0b:41:55:ec:bf:3e:84:aa:96:59:0c:4c:ee:66:c3:7c: 11:21:f5:5d:24:fb:7e:31:5c:6e:66:ed:3d:d3:32:c4:42:ce: d3:62:4e:44:0c:e2:69:69:19:cf:24:9e:41:c7:0a:b0:27:e1: 49:16:36:28:ed:98:90:ac:f6:3f:27:13:1e:6d:6d:5e:48:30: 11:8b:d2:c5:78:b4:7a:21:70:dd:6b:5b:38:d2:f9:8b:96:2b: c1:73:4f:19:8c:fb:76:56:c3:47:19:64:10:86:14:c6:52:ee: 7e:83:66:0c:0f:62:6f:e5:9e:6e:72:67:a8:fb:cb:f9:54:8e: ed:93:81:b5:81:50:1f:e6:a9:44:a1:bb:95:75:b0:f1:b7:ba: 8f:ed:9c:3d:d6:cd:f6:a7:4f:48:c6:b6:0f:4c:84:f6:d0:26: 51:5d:ab:6b:52:de:c3:5a:0a:08:cb:a6:28:c8:fd:19:ee:9c: 75:b3:6c:50:c7:2d:b2:64:ba:2c:f0:4b:97:c6:a8:38:e3:31: 0c:91:44:a5:08:c0:50:3a:34:51:4b:4f:bd:fb:e7:22:7a:96: b9:91:83:0f:ac:11:9b:61:94:d1:25:05:1b:eb:d6:1b:a9:b1: de:47:41:d7:4e:6d:43:00:5f:e1:a8:42:c3:d1:9c:0b:23:b6: 6f:64:0f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRl9me8/fP9ClbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjZhMTY0M2QtOWY2Ny00NTQ2LTkxMjQtMWUyODg4N2U5YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTlDs6yk9LK+dnNE5/U09rTVvnTt8UrukPbz CZsZc03Qke5pv5tA7TKn3ckqv5kpD5iGxtAxbcPgJ5fwdPQZvaMY8SSyHmYE1Hdg NO27DX3UnVOc9WdefU8JanP8fHET0ZhAe3fiWyfHDzkRL7T6ZJM8/7YJCLqk0ihi Fs1LNw4WJQByQvnpOQD1H1hQIhZ0hOtlt4ho0J8Iim4T3pVAtDNsDwBHIhbdPzfi S5MsTBaXNT0eJbmo2SnAzgDkrFVzaKSP/dadCPIvi2fKA8DIgYQN7LcN0FPDwLfA LkArkUSO+/C3ukFSq2M5CeRPaiXDJc/7GUUPlNKpcYn+AKCbBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL+dzrz2hRTeWw/rruizzDnbaRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM0MjNjNDItMDc3Ny0z NzFhLTgyZDctODAwYzM2ZjBlMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXeC0FV7L8+hKqWWQxM7mbDfBEh9V0k+34xXG5m7T3TMsRCztNiTkQM 4mlpGc8knkHHCrAn4UkWNijtmJCs9j8nEx5tbV5IMBGL0sV4tHohcN1rWzjS+YuW K8FzTxmM+3ZWw0cZZBCGFMZS7n6DZgwPYm/lnm5yZ6j7y/lUju2TgbWBUB/mqUSh u5V1sPG3uo/tnD3WzfanT0jGtg9MhPbQJlFdq2tS3sNaCgjLpijI/RnunHWzbFDH LbJkuizwS5fGqDjjMQyRRKUIwFA6NFFLT7375yJ6lrmRgw+sEZthlNElBRvr1hup sd5HQddObUMAX+GoQsPRnAsjtm9kD3Q= -----END CERTIFICATE-----Generated at Wed Aug 6 04:11:57 2025 by rpki-client