$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa File: dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa (raw, json) Hash identifier: V2bgKtSzF0Gw0wIOP+ThsrAMml0RKWj8JK46KS81SUs= Subject key identifier: 3E:F5:49:89:F7:EE:B9:40:F5:2F:EF:D8:9F:5D:A4:3A:B2:24:41:32 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB6659DB99255B4A697E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.19.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:66:59:db:99:25:5b:4a:69:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=435a899a-66a3-4907-b16e-ac6e9b5d05aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9b:8f:b2:22:32:68:37:e8:c8:40:07:ca:ae: 9d:3d:9d:1d:fe:de:f7:1f:1a:94:1d:8e:f9:aa:3b: aa:b9:4d:31:4b:1b:04:7e:1e:a1:a3:4f:9c:3d:cf: 65:ec:f8:ae:bd:dd:37:45:e0:22:38:00:a4:69:46: 57:45:df:c3:9e:82:48:b8:b8:de:80:37:e5:3e:8a: c8:fb:91:ac:18:04:2f:50:84:a3:07:a3:b3:6a:f9: c6:03:18:69:ce:03:67:4e:0c:32:11:43:8c:61:9d: 7b:2c:7f:9b:cc:cf:e8:4d:b2:54:3c:45:5b:06:2d: 74:59:d0:98:fa:c4:a1:fb:db:ff:66:1a:4c:47:9a: 76:bb:44:f2:5c:ca:bd:70:1f:2b:64:63:93:e2:3d: 84:81:8d:fb:20:9a:b0:95:93:ad:ff:d7:60:25:ac: 64:21:57:10:db:9b:19:9a:d1:73:a5:da:4b:21:0e: 9d:c6:57:52:6e:d9:c6:e7:db:c8:8e:c0:a1:6f:7e: 4f:c2:9f:55:82:27:4d:23:52:47:04:dd:f9:2d:5b: a2:cf:8a:57:1f:53:9d:e7:80:77:aa:06:f8:b1:d9: f6:23:f8:86:73:c3:5b:45:3b:9f:36:dc:d7:0a:5c: 97:31:43:91:bd:65:9f:2d:b5:df:27:aa:89:23:26: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F5:49:89:F7:EE:B9:40:F5:2F:EF:D8:9F:5D:A4:3A:B2:24:41:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:90:5c:86:d7:2c:f7:98:69:52:c1:75:1d:1b:81:ab:e2:8e: 43:b3:45:a8:a1:82:1d:04:e2:23:b4:27:a4:4a:17:7c:4d:69: de:88:c6:f6:e7:fc:4a:16:97:08:d1:56:8a:67:1c:1f:2e:4e: c0:ad:e3:a1:76:98:fd:d8:93:f8:71:e2:29:ca:ba:d9:af:f8: b7:a9:a1:f6:c6:68:52:6f:9e:35:fb:72:85:bd:3e:aa:8d:37: c3:e2:71:9d:12:48:d0:99:82:b3:dd:94:61:7a:bb:ce:ff:4a: 95:5b:a0:b9:d7:29:1a:32:5e:96:b7:b1:8b:8d:e1:f4:0f:6c: f5:7f:48:6c:e3:36:65:12:c5:5b:7a:ec:02:f1:d1:4c:cd:17: 50:0e:d1:cd:22:89:1f:6e:9c:0d:f6:41:0d:7d:f2:00:fc:4f: 88:e3:31:6f:ea:36:f2:f2:81:c7:b2:15:52:e4:7f:0d:23:78: 34:c3:ff:5b:42:90:81:1a:a0:55:f1:82:cb:c6:71:bb:cb:5d: 34:ce:98:0c:92:5b:47:71:f2:0e:40:37:45:f4:6f:23:91:57: 80:ff:15:b5:c4:1d:c9:26:a4:30:ab:32:06:6c:09:aa:a3:d5: d8:9f:01:18:53:50:6b:6f:b6:4d:d8:53:8c:44:e7:94:9b:81: e0:13:88:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG22ZZ25klW0ppfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NDM1YTg5OWEtNjZhMy00OTA3LWIxNmUtYWM2ZTliNWQwNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5uPsiIyaDfoyEAHyq6dPZ0d/t73HxqUHY75 qjuquU0xSxsEfh6ho0+cPc9l7Piuvd03ReAiOACkaUZXRd/DnoJIuLjegDflPorI +5GsGAQvUISjB6OzavnGAxhpzgNnTgwyEUOMYZ17LH+bzM/oTbJUPEVbBi10WdCY +sSh+9v/ZhpMR5p2u0TyXMq9cB8rZGOT4j2EgY37IJqwlZOt/9dgJaxkIVcQ25sZ mtFzpdpLIQ6dxldSbtnG59vIjsChb35Pwp9VgidNI1JHBN35LVuiz4pXH1Od54B3 qgb4sdn2I/iGc8NbRTufNtzXClyXMUORvWWfLbXfJ6qJIyYnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD71SYn37rlA9S/v2J9dpDqyJEEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGZhN2IwNWQtMTNiNy0z NWM2LThkZTAtOTkyODIxNTFiN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGQXIbXLPeYaVLBdR0bgavijkOzRaihgh0E4iO0J6RKF3xNad6Ixvbn /EoWlwjRVopnHB8uTsCt46F2mP3Yk/hx4inKutmv+LepofbGaFJvnjX7coW9PqqN N8PicZ0SSNCZgrPdlGF6u87/SpVboLnXKRoyXpa3sYuN4fQPbPV/SGzjNmUSxVt6 7ALx0UzNF1AO0c0iiR9unA32QQ198gD8T4jjMW/qNvLygceyFVLkfw0jeDTD/1tC kIEaoFXxgsvGcbvLXTTOmAySW0dx8g5AN0X0byORV4D/FbXEHckmpDCrMgZsCaqj 1difARhTUGtvtk3YU4xE55SbgeATiLc= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:44 2025 by rpki-client