$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d452681f-4165-3640-ad07-f8199c8aff88.roa File: d452681f-4165-3640-ad07-f8199c8aff88.roa (raw, json) Hash identifier: XCbmJeT7q52hW8BedwLX/H0MgyVX1icn1J4MPHTDhJQ= Subject key identifier: C5:2F:C2:22:AA:EF:48:7B:D2:4C:AA:41:20:0C:9F:AB:01:FE:88:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A7BB0AED8928D2658AE195B18 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d452681f-4165-3640-ad07-f8199c8aff88.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 173.22.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:ae:d8:92:8d:26:58:ae:19:5b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=5ad4e6bc-f023-4a9b-aaa5-ad874f80f21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:23:c9:d7:75:4a:2f:70:77:e9:a6:55:c7: 12:34:a9:80:01:b4:f5:9f:47:9a:22:8d:bb:ac:c2: 6b:10:6b:f9:d5:d8:8a:c6:73:04:d6:16:d6:ff:3b: de:02:a5:81:bc:e8:fd:82:9d:e1:11:8b:27:e5:eb: a4:d5:e8:da:a7:80:20:dc:c3:a4:07:54:59:b6:c7: 26:63:ef:1e:d6:b3:ac:81:a9:49:8a:84:ba:a7:ea: 13:9c:8a:cd:1a:32:1c:30:0b:89:ff:35:41:c0:a8: 01:2a:5a:c0:26:ce:66:c1:32:88:b3:78:09:b2:f8: a1:a4:b7:e1:e3:eb:ca:41:40:1f:29:2f:6f:c9:04: 87:d8:e6:7e:5d:9c:04:c1:87:3a:46:5c:22:0e:13: 16:c3:0a:26:b3:67:f1:96:03:e3:e4:df:b4:9c:1c: 67:3a:a7:f3:03:c0:22:d0:f1:b2:09:24:12:4f:21: 8d:00:12:d9:ee:02:5d:be:38:39:f1:67:ab:d3:12: 6b:7e:2c:b6:34:2b:bf:1e:6e:2b:2d:2f:7d:a0:83: 84:10:f7:e4:dd:63:85:10:05:b3:26:50:06:1e:6b: bd:b6:8d:df:43:35:a8:11:4b:98:df:7d:64:c3:a1: a0:56:87:13:21:8d:fc:94:9b:06:e9:a6:dd:44:6c: c8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2F:C2:22:AA:EF:48:7B:D2:4C:AA:41:20:0C:9F:AB:01:FE:88:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d452681f-4165-3640-ad07-f8199c8aff88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fc:dd:61:2d:2c:aa:2f:99:dc:dc:23:e1:39:9b:80:a8:22: 91:09:b7:84:fd:c1:c8:29:86:58:a8:7b:7e:e2:56:68:35:da: e7:c5:d5:14:1c:62:71:9f:5d:cb:84:54:37:a8:a0:3e:7f:9d: 63:13:ec:54:f2:64:6b:7c:0c:90:50:fe:50:2c:39:76:2f:7f: f7:49:cf:12:9a:3d:0d:74:b3:ec:4a:20:51:19:21:73:a4:96: 47:54:c4:41:5a:34:84:f4:ce:f5:8b:00:db:f9:f3:e5:c9:5a: 85:1c:90:4a:0d:ea:95:1c:08:d3:4d:59:33:1d:50:51:e4:11: 63:6e:73:5e:74:17:aa:ad:fe:f4:46:55:48:13:b7:5b:1f:dc: df:27:10:b2:ca:b7:97:0d:12:7e:96:dc:82:48:b1:a6:69:e5: 40:f9:b1:7d:e6:e1:eb:0f:81:8c:44:c3:71:a6:5e:49:f7:ca: bc:70:47:6d:24:b7:4e:87:08:22:fa:06:1c:ec:91:4d:f0:a1: 15:56:b7:39:10:39:24:3a:32:01:7e:c4:fa:7b:06:0c:6c:ee: 0c:b8:39:55:7a:8e:bb:d3:81:f3:f1:4a:4e:bf:b4:dd:31:61: 6c:10:a1:cb:7b:97:23:53:4a:30:31:a6:3b:76:d9:af:28:36: 6c:18:90:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sK7Yko0mWK4ZWxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk NWFkNGU2YmMtZjAyMy00YTliLWFhYTUtYWQ4NzRmODBmMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBMjydd1Si9wd+mmVccSNKmAAbT1n0eaIo27 rMJrEGv51diKxnME1hbW/zveAqWBvOj9gp3hEYsn5euk1ejap4Ag3MOkB1RZtscm Y+8e1rOsgalJioS6p+oTnIrNGjIcMAuJ/zVBwKgBKlrAJs5mwTKIs3gJsvihpLfh 4+vKQUAfKS9vyQSH2OZ+XZwEwYc6RlwiDhMWwwoms2fxlgPj5N+0nBxnOqfzA8Ai 0PGyCSQSTyGNABLZ7gJdvjg58Wer0xJrfiy2NCu/Hm4rLS99oIOEEPfk3WOFEAWz JlAGHmu9to3fQzWoEUuY331kw6GgVocTIY38lJsG6abdRGzI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUvwiKq70h70kyqQSAMn6sB/oi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ1MjY4MWYtNDE2NS0z NjQwLWFkMDctZjgxOTljOGFmZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb83WEtLKovmdzcI+E5m4CoIpEJt4T9wcgphlioe37iVmg12ufF1RQc YnGfXcuEVDeooD5/nWMT7FTyZGt8DJBQ/lAsOXYvf/dJzxKaPQ10s+xKIFEZIXOk lkdUxEFaNIT0zvWLANv58+XJWoUckEoN6pUcCNNNWTMdUFHkEWNuc150F6qt/vRG VUgTt1sf3N8nELLKt5cNEn6W3IJIsaZp5UD5sX3m4esPgYxEw3GmXkn3yrxwR20k t06HCCL6BhzskU3woRVWtzkQOSQ6MgF+xPp7Bgxs7gy4OVV6jrvTgfPxSk6/tN0x YWwQoct7lyNTSjAxpjt22a8oNmwYkLA= -----END CERTIFICATE-----Generated at Wed Aug 6 00:51:58 2025 by rpki-client