$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/deaa97b8-195a-3960-b879-d8793e965c68.roa File: deaa97b8-195a-3960-b879-d8793e965c68.roa (raw, json) Hash identifier: UMRDqEQJZ25nMabPMqdIPLAH+pqjEHoY76xa2XJPNEk= Subject key identifier: 9D:F1:7B:2D:55:5D:67:C2:34:B9:8D:C7:0F:3B:97:21:2D:B9:2D:80 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124D500314AD9521989C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/deaa97b8-195a-3960-b879-d8793e965c68.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.22.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4d:50:03:14:ad:95:21:98:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7acd2a08-efab-4b3d-83a1-bb70f8b42860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:f7:93:c6:1d:18:7d:19:57:cf:30:27:a0: d1:60:4e:27:9b:9b:ba:4e:b0:56:f3:e8:d5:54:2b: ff:02:eb:28:13:ce:e9:19:7e:31:ef:c7:2b:c0:7f: 68:64:2e:51:47:c8:36:30:96:d1:97:56:3d:e4:d9: 59:7a:9d:0f:20:90:37:ce:ea:62:be:7b:6a:be:da: 62:01:7a:89:9f:99:91:4f:bf:88:85:3c:e7:a2:cc: fa:a8:b2:bd:2a:cb:4a:be:52:47:2f:cd:f1:44:9a: a6:6a:ce:18:7d:85:d1:79:41:4b:21:3f:ca:fd:3e: 51:f4:a6:14:9b:59:67:5d:ba:21:4c:55:eb:25:f1: 18:15:97:4c:76:8b:96:73:cb:ad:47:f8:a7:9c:be: d8:23:52:72:06:27:3d:15:c8:f9:9b:6f:78:23:c6: fe:7b:12:41:dc:37:2e:0f:9e:9a:16:0e:c1:07:52: 96:7c:ea:8a:74:12:69:5a:cd:b4:d9:a4:76:72:fa: 53:37:4c:53:0d:de:ff:53:b1:6a:d9:e9:2b:43:6a: eb:df:5a:a8:ac:af:21:6d:5f:0e:4e:89:44:30:6f: 1c:4b:a1:83:15:fa:e3:4f:0a:66:91:00:1c:4d:f0: da:9f:e6:ce:c8:81:15:36:b2:b6:cb:e6:46:f2:67: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F1:7B:2D:55:5D:67:C2:34:B9:8D:C7:0F:3B:97:21:2D:B9:2D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/deaa97b8-195a-3960-b879-d8793e965c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8a:2d:64:32:78:b6:6e:54:30:24:88:ef:1f:85:97:04:cc: b0:68:85:47:fb:af:51:e0:a4:1a:aa:c5:fc:28:4c:2f:a9:4e: 84:de:14:a2:bb:03:e4:c0:09:eb:1b:29:1d:d7:86:d4:e1:9d: ca:13:5c:33:a2:d3:39:c2:f3:79:97:f4:10:de:df:d7:40:fa: cb:44:d8:95:3d:34:31:68:74:ed:b7:0d:b0:38:d8:ad:ee:44: 24:e7:64:52:df:d2:33:bf:de:c5:77:86:5b:4f:57:70:e0:9e: 59:6c:8b:eb:40:ae:9a:19:7d:85:40:21:4e:9d:83:08:67:56: a9:67:ec:3f:87:e8:20:6d:96:59:2e:47:6e:7e:37:e0:bb:8f: 3c:86:2b:62:8b:a6:f5:a9:2e:58:9e:96:bb:e4:99:f1:31:0f: 37:2e:d0:72:21:f2:40:3b:e3:8b:c2:a2:10:97:52:52:48:14: 69:ee:1a:55:5a:aa:58:c1:70:95:94:da:af:21:a3:c6:09:88: 43:48:04:98:2e:cf:26:42:38:00:46:90:dc:e2:57:63:2c:dd: a3:65:cd:9d:55:c2:8a:c8:26:55:82:2b:9d:95:a9:83:44:dc: 4c:81:35:91:c4:b3:7d:bf:5c:e0:f5:c4:61:45:94:42:00:12: 69:c2:87:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEk1QAxStlSGYnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk N2FjZDJhMDgtZWZhYi00YjNkLTgzYTEtYmI3MGY4YjQyODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjn3k8YdGH0ZV88wJ6DRYE4nm5u6TrBW8+jV VCv/AusoE87pGX4x78crwH9oZC5RR8g2MJbRl1Y95NlZep0PIJA3zupivntqvtpi AXqJn5mRT7+IhTznosz6qLK9KstKvlJHL83xRJqmas4YfYXReUFLIT/K/T5R9KYU m1lnXbohTFXrJfEYFZdMdouWc8utR/innL7YI1JyBic9Fcj5m294I8b+exJB3Dcu D56aFg7BB1KWfOqKdBJpWs202aR2cvpTN0xTDd7/U7Fq2ekrQ2rr31qorK8hbV8O TolEMG8cS6GDFfrjTwpmkQAcTfDan+bOyIEVNrK2y+ZG8mcPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3xey1VXWfCNLmNxw87lyEtuS2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGVhYTk3YjgtMTk1YS0z OTYwLWI4NzktZDg3OTNlOTY1YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+KLWQyeLZuVDAkiO8fhZcEzLBohUf7r1HgpBqqxfwoTC+pToTeFKK7 A+TACesbKR3XhtThncoTXDOi0znC83mX9BDe39dA+stE2JU9NDFodO23DbA42K3u RCTnZFLf0jO/3sV3hltPV3Dgnllsi+tArpoZfYVAIU6dgwhnVqln7D+H6CBtllku R25+N+C7jzyGK2KLpvWpLlielrvkmfExDzcu0HIh8kA744vCohCXUlJIFGnuGlVa qljBcJWU2q8ho8YJiENIBJguzyZCOABGkNziV2Ms3aNlzZ1VworIJlWCK52VqYNE 3EyBNZHEs32/XOD1xGFFlEIAEmnCh0U= -----END CERTIFICATE-----Generated at Wed Aug 6 09:39:22 2025 by rpki-client