$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa File: d459b9b8-1adb-320f-9bf2-ba30866194c7.roa (raw, json) Hash identifier: SPIMBpCLS9FX1QPsOrs6u6CZzeeN2/4Gh5SxBGADgcU= Subject key identifier: 9E:23:6B:F3:31:50:10:A5:B9:D9:06:2E:7F:B5:5E:6D:B3:56:65:2E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412594172A94A9C557837F8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.16.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:59:41:72:a9:4a:9c:55:78:37:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=15d8a985-9652-4258-a7ac-7e6c7dff318b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:d4:22:69:fc:bb:cf:c8:67:e5:e3:9a:b5: 4e:b1:27:6a:ee:f5:ad:58:b8:90:b1:a3:68:ae:16: ab:6d:6f:28:a5:73:69:28:bd:2c:00:90:b4:fa:01: 07:bf:a4:09:5c:fc:1e:3e:4e:2c:92:79:e4:48:79: 79:14:7f:cf:b4:a5:2a:fc:a2:e5:7c:9a:85:e7:4f: 03:66:8a:38:0a:82:06:79:14:9d:ca:36:3b:71:25: 72:c7:a1:49:af:b5:a1:79:21:b1:3d:28:ea:ef:44: ce:2c:f8:28:dc:cb:93:85:65:7f:12:c6:c6:cc:f0: 20:a9:67:d7:c3:56:04:46:13:35:da:24:c1:8b:57: 5f:50:73:b9:a0:56:30:0b:2f:a2:d7:c2:e7:c6:e5: a0:f0:99:99:45:7e:3f:e0:9c:b9:51:fe:50:f5:eb: 74:b9:53:95:f4:c7:b3:cf:89:10:30:4a:1e:34:ef: 0a:f6:ff:d5:8a:e4:2c:cc:94:54:82:82:3f:f3:9a: d7:c7:8e:ca:79:07:1d:b1:e9:e5:84:06:a0:63:7a: 20:05:f1:1e:ff:4a:fb:eb:2a:44:66:5f:e5:1f:42: 57:5e:53:04:06:0f:5f:ba:a3:da:93:cc:fc:24:98: 04:00:9b:74:60:b1:14:da:15:b5:66:97:ac:a5:4d: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:6B:F3:31:50:10:A5:B9:D9:06:2E:7F:B5:5E:6D:B3:56:65:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d459b9b8-1adb-320f-9bf2-ba30866194c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e1:20:43:2d:20:03:cb:7f:ec:e0:2e:37:f5:5d:82:6c:4e: c3:be:dc:68:b1:73:67:4d:e0:c9:c0:07:51:a7:d5:5d:f3:c0: 13:36:e1:7a:db:e4:22:1c:1f:ad:4a:86:86:5a:ee:37:10:e6: b5:b0:03:20:ad:59:c3:83:2e:5b:ed:56:76:64:bf:71:3e:12: a6:2a:e6:e2:d9:f6:be:e5:75:3b:51:f9:e1:34:0e:20:5e:9b: a7:b0:45:63:93:c6:57:1a:20:a8:12:c0:2a:77:96:b3:e4:4c: ac:02:dd:5a:7c:c6:e1:7f:fa:c2:84:0c:f2:01:7b:b6:e6:5b: 78:07:59:30:85:a3:9a:f1:c9:e2:26:31:ee:ed:c9:a9:44:59: 65:0e:ed:76:f2:bb:67:98:c3:36:44:29:34:14:d6:13:40:7e: 02:33:f5:cd:4f:93:ed:14:ec:13:f6:56:b8:77:d3:0a:f2:87: 19:82:c6:ba:1a:ac:27:ed:36:ae:1f:65:ee:3c:10:24:02:2b: 99:4a:3f:d3:ce:6f:f9:c4:9e:3b:23:93:cd:ac:7f:9b:12:b1: 39:04:18:13:b5:da:8c:a2:a7:e5:c1:26:5b:1c:3c:40:77:08: bd:07:ca:d2:67:4c:fe:21:93:22:6e:dd:91:09:89:ee:dd:af: bb:cf:69:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEllBcqlKnFV4N/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTVkOGE5ODUtOTY1Mi00MjU4LWE3YWMtN2U2YzdkZmYzMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry3UImn8u8/IZ+XjmrVOsSdq7vWtWLiQsaNo rharbW8opXNpKL0sAJC0+gEHv6QJXPwePk4sknnkSHl5FH/PtKUq/KLlfJqF508D Zoo4CoIGeRSdyjY7cSVyx6FJr7WheSGxPSjq70TOLPgo3MuThWV/EsbGzPAgqWfX w1YERhM12iTBi1dfUHO5oFYwCy+i18LnxuWg8JmZRX4/4Jy5Uf5Q9et0uVOV9Mez z4kQMEoeNO8K9v/ViuQszJRUgoI/85rXx47KeQcdsenlhAagY3ogBfEe/0r76ypE Zl/lH0JXXlMEBg9fuqPak8z8JJgEAJt0YLEU2hW1ZpespU1l9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4ja/MxUBCludkGLn+1Xm2zVmUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ1OWI5YjgtMWFkYi0z MjBmLTliZjItYmEzMDg2NjE5NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3hIEMtIAPLf+zgLjf1XYJsTsO+3Gixc2dN4MnAB1Gn1V3zwBM24Xrb 5CIcH61KhoZa7jcQ5rWwAyCtWcODLlvtVnZkv3E+EqYq5uLZ9r7ldTtR+eE0DiBe m6ewRWOTxlcaIKgSwCp3lrPkTKwC3Vp8xuF/+sKEDPIBe7bmW3gHWTCFo5rxyeIm Me7tyalEWWUO7Xbyu2eYwzZEKTQU1hNAfgIz9c1Pk+0U7BP2Vrh30wryhxmCxroa rCftNq4fZe48ECQCK5lKP9POb/nEnjsjk82sf5sSsTkEGBO12oyip+XBJlscPEB3 CL0HytJnTP4hkyJu3ZEJie7dr7vPaZ8= -----END CERTIFICATE-----Generated at Tue Aug 5 23:03:37 2025 by rpki-client