$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef1ccb0e-3f54-3124-a6c4-23ab08c70599.roa File: ef1ccb0e-3f54-3124-a6c4-23ab08c70599.roa (raw, json) Hash identifier: NTMZsMdT3nSuBq+dkkj24BeIEjfnKJjdBoyNLDw4GIo= Subject key identifier: 40:6C:72:AA:1F:26:E0:A0:27:9C:62:C7:71:9D:73:3C:D1:81:57:07 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81462B7A248761AFDECD7920 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef1ccb0e-3f54-3124-a6c4-23ab08c70599.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.17.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:2b:7a:24:87:61:af:de:cd:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a471c6d0-8c17-40bf-96c3-dc0283561512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:98:79:9b:08:52:15:3c:7c:cb:33:85:42: bd:65:ef:d6:4a:6d:d1:dd:41:a5:b9:0c:be:48:27: 77:bb:27:08:6f:11:b5:8d:82:db:f8:dc:3a:08:bf: d6:64:62:e7:8a:ed:6d:ed:40:fe:8b:d7:c0:88:50: 6e:15:02:4b:08:a5:88:45:ee:51:7b:33:97:6e:f4: 68:8a:ac:20:2b:e7:d7:82:5f:4c:12:e9:c4:f8:2c: ec:9e:47:a1:21:5c:e9:ff:68:fd:78:4c:5d:c4:46: f3:27:99:25:c1:44:a5:67:57:7e:48:e3:ac:b5:72: 1e:81:57:86:c1:89:c0:5d:72:a4:7e:02:f9:f7:d0: c7:d0:0a:82:24:14:5c:86:2d:84:a4:33:fa:b5:9a: 6a:c1:7a:5a:e1:2b:a4:26:38:37:27:32:45:dd:5f: fe:cf:d4:26:8a:fe:75:de:e3:e9:28:bf:14:a7:fc: cf:30:c7:d5:8d:1b:b8:ad:0a:06:45:76:a0:fb:51: c0:7b:6e:86:6f:12:b0:ba:df:a7:29:05:92:ec:80: 5f:83:cf:2f:c6:30:e2:0d:24:d3:20:23:8d:5f:f0: bf:4d:bf:84:8a:54:62:2a:3a:15:e3:5a:93:92:32: 1b:50:47:1a:d6:6b:e8:a2:6c:13:d7:e2:7a:d4:39: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6C:72:AA:1F:26:E0:A0:27:9C:62:C7:71:9D:73:3C:D1:81:57:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef1ccb0e-3f54-3124-a6c4-23ab08c70599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4d:42:b5:3a:2d:27:ea:d4:f2:5f:13:56:28:bb:a2:ad:68: a0:15:05:0b:86:00:98:a6:bd:a6:fe:10:ce:ad:4a:57:e9:b5: 4d:cc:b7:1c:10:d2:41:ac:39:c6:80:f1:17:a3:19:fb:c9:36: 0c:dd:09:2d:09:1b:f5:de:48:c7:f3:ce:71:dd:8e:99:15:f1: 13:5b:eb:5a:45:d3:03:90:53:37:3e:d9:39:a4:50:be:06:64: 9d:ed:d6:6e:cf:c6:96:b4:2f:11:70:45:7f:51:6b:0e:af:85: 2b:9d:ba:16:70:be:5e:f8:b4:35:b1:75:1c:ec:90:bb:13:d3: 65:2a:de:54:46:a2:13:aa:c6:a1:2c:70:3e:10:c1:24:f1:ae: e6:a4:33:28:1f:7c:11:b2:9a:75:6b:71:7d:2e:a6:74:a0:7b: 16:cb:b6:e9:e1:f3:d9:da:dd:41:7e:43:0e:72:c0:60:61:fe: b0:9a:15:23:4f:f2:2e:41:5d:71:eb:90:f4:02:e0:b1:67:98: 21:ae:71:7b:f8:6a:92:13:a9:6b:be:de:ac:a2:db:cf:bd:6f: ca:40:8f:a9:34:25:5f:81:6e:b5:e5:cb:a6:73:7d:b3:50:70: c9:69:5e:d2:7b:af:9c:49:26:c4:ba:8b:c4:e1:0e:c8:2a:28: 15:7d:56:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRit6JIdhr97NeSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTQ3MWM2ZDAtOGMxNy00MGJmLTk2YzMtZGMwMjgzNTYxNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7mYeZsIUhU8fMszhUK9Ze/WSm3R3UGluQy+ SCd3uycIbxG1jYLb+Nw6CL/WZGLniu1t7UD+i9fAiFBuFQJLCKWIRe5RezOXbvRo iqwgK+fXgl9MEunE+CzsnkehIVzp/2j9eExdxEbzJ5klwUSlZ1d+SOOstXIegVeG wYnAXXKkfgL599DH0AqCJBRchi2EpDP6tZpqwXpa4SukJjg3JzJF3V/+z9Qmiv51 3uPpKL8Up/zPMMfVjRu4rQoGRXag+1HAe26GbxKwut+nKQWS7IBfg88vxjDiDSTT ICONX/C/Tb+EilRiKjoV41qTkjIbUEca1mvoomwT1+J61DktZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBscqofJuCgJ5xix3GdczzRgVcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWYxY2NiMGUtM2Y1NC0z MTI0LWE2YzQtMjNhYjA4YzcwNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFNQrU6LSfq1PJfE1You6KtaKAVBQuGAJimvab+EM6tSlfptU3MtxwQ 0kGsOcaA8RejGfvJNgzdCS0JG/XeSMfzznHdjpkV8RNb61pF0wOQUzc+2TmkUL4G ZJ3t1m7Pxpa0LxFwRX9Raw6vhSuduhZwvl74tDWxdRzskLsT02Uq3lRGohOqxqEs cD4QwSTxruakMygffBGymnVrcX0upnSgexbLtunh89na3UF+Qw5ywGBh/rCaFSNP 8i5BXXHrkPQC4LFnmCGucXv4apITqWu+3qyi28+9b8pAj6k0JV+BbrXly6ZzfbNQ cMlpXtJ7r5xJJsS6i8ThDsgqKBV9VvE= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:24 2025 by rpki-client