$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df296db7-8cfa-3c5e-b884-573f396b2509.roa File: df296db7-8cfa-3c5e-b884-573f396b2509.roa (raw, json) Hash identifier: dWM54ULk6ucb2edLvlOY7GzBPPK8IRjI97PaeM0L1ok= Subject key identifier: 76:4E:8F:01:5A:8A:55:46:22:DA:FC:27:FD:9E:90:A5:94:3D:DD:F6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412406B312ADEABD9A4EF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df296db7-8cfa-3c5e-b884-573f396b2509.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:40:6b:31:2a:de:ab:d9:a4:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=223c3c2e-ff1f-4393-a3b4-839b11f5995f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:0d:52:8a:49:4a:7e:fe:36:70:42:e9:58: e4:39:b8:df:41:41:5f:dd:77:18:31:2d:dd:36:f8: 3c:a0:30:70:7a:da:42:ac:68:f3:31:aa:7e:32:6f: f5:5e:14:1f:2d:5b:ee:c7:77:70:9c:50:d2:4b:fa: f2:c5:7e:6c:60:40:cb:9e:ac:18:98:06:77:24:6e: 0b:8b:c1:2d:2b:39:50:01:68:c8:07:7e:c2:d1:e5: 55:3b:c5:3c:36:fd:cd:33:e7:62:df:de:2d:e1:d5: f1:cb:b4:d9:50:44:ce:b1:9a:af:0b:ff:c2:b1:96: 37:d4:cc:66:c3:ac:39:40:15:a4:5d:e4:ef:8d:c3: e2:5f:b4:6d:8a:7c:9c:8d:13:ca:32:14:a6:2c:90: c2:17:60:51:fc:7f:63:da:59:58:b6:3c:17:70:26: 7a:42:68:b5:81:a9:37:59:d2:cf:af:b1:3c:d4:1e: 39:74:a5:de:2e:01:57:dc:44:41:f9:6f:33:e7:55: 5c:04:e3:a1:23:a1:e5:c9:b8:62:88:14:9f:34:24: f5:86:e0:21:24:fc:49:aa:96:81:af:e7:49:a3:75: 90:27:bb:fa:df:f2:52:d0:15:77:82:22:24:a8:20: b8:d9:7b:98:e5:89:59:90:3c:4b:4d:ad:5a:41:21: 6a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4E:8F:01:5A:8A:55:46:22:DA:FC:27:FD:9E:90:A5:94:3D:DD:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df296db7-8cfa-3c5e-b884-573f396b2509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b8:45:03:22:6f:97:96:3f:89:8d:f9:c9:fb:26:f1:b1:4a: 2d:5b:ad:c5:7f:d7:95:1d:07:3d:1e:df:42:e8:ea:fb:34:9d: 8c:91:d0:3a:8f:7a:57:0c:c3:91:bc:f4:dd:3e:b5:36:d1:72: 9a:7c:fb:c1:c8:4a:f1:17:3b:d4:92:2b:77:a1:70:fc:c6:34: de:ca:98:8b:07:49:5f:18:2c:e9:f2:67:83:bc:ce:e4:d2:9b: 16:8e:09:ef:3d:01:21:cd:e0:3b:dc:77:14:0e:bb:7b:66:ee: 54:f3:e1:14:18:88:fe:10:6c:f6:ff:e3:4d:29:11:7e:42:6b: c3:e6:35:8d:6a:f5:66:db:03:81:35:f5:97:8b:3e:4a:12:56: 8d:a0:49:d3:ce:7b:52:1f:c5:4b:38:76:58:e5:1d:11:2a:bf: 71:1a:8c:d6:12:a5:27:a6:3f:0b:d5:3d:8a:f2:19:a9:cd:7a: 1e:da:ac:fc:8e:ab:7b:48:8b:27:67:a4:f5:34:56:ad:e6:8b: fd:d7:6b:36:c4:22:67:5a:57:25:26:7f:69:09:40:c1:e3:1d: 97:8f:1e:9a:dc:90:4a:1a:9f:26:da:b6:59:7d:31:8b:db:0c: dd:8a:e5:fe:a2:12:52:34:9b:a6:e4:3d:c1:34:0e:e9:3d:b9: 9a:9f:38:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkBrMSreq9mk74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjIzYzNjMmUtZmYxZi00MzkzLWEzYjQtODM5YjExZjU5OTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFcNUopJSn7+NnBC6VjkObjfQUFf3XcYMS3d Nvg8oDBwetpCrGjzMap+Mm/1XhQfLVvux3dwnFDSS/ryxX5sYEDLnqwYmAZ3JG4L i8EtKzlQAWjIB37C0eVVO8U8Nv3NM+di394t4dXxy7TZUETOsZqvC//CsZY31Mxm w6w5QBWkXeTvjcPiX7RtinycjRPKMhSmLJDCF2BR/H9j2llYtjwXcCZ6Qmi1gak3 WdLPr7E81B45dKXeLgFX3ERB+W8z51VcBOOhI6HlybhiiBSfNCT1huAhJPxJqpaB r+dJo3WQJ7v63/JS0BV3giIkqCC42XuY5YlZkDxLTa1aQSFqkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZOjwFailVGItr8J/2ekKWUPd32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGYyOTZkYjctOGNmYS0z YzVlLWI4ODQtNTczZjM5NmIyNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW4RQMib5eWP4mN+cn7JvGxSi1brcV/15UdBz0e30Lo6vs0nYyR0DqP elcMw5G89N0+tTbRcpp8+8HISvEXO9SSK3ehcPzGNN7KmIsHSV8YLOnyZ4O8zuTS mxaOCe89ASHN4DvcdxQOu3tm7lTz4RQYiP4QbPb/400pEX5Ca8PmNY1q9WbbA4E1 9ZeLPkoSVo2gSdPOe1IfxUs4dljlHREqv3EajNYSpSemPwvVPYryGanNeh7arPyO q3tIiydnpPU0Vq3mi/3XazbEImdaVyUmf2kJQMHjHZePHprckEoanybatll9MYvb DN2K5f6iElI0m6bkPcE0Duk9uZqfOEw= -----END CERTIFICATE-----Generated at Wed Aug 6 04:14:23 2025 by rpki-client