$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5e31e16-85d6-3a42-8dbd-c0645d3591e0.roa File: f5e31e16-85d6-3a42-8dbd-c0645d3591e0.roa (raw, json) Hash identifier: CYDiFKHnK0PzbBYMnF9+bn4UjL5A6CwPYPA5s08V3xo= Subject key identifier: A2:09:20:38:20:C6:35:2B:0C:93:AD:04:B0:4F:06:FD:B9:BD:CE:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E8327CFCBA3C8AF1AF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5e31e16-85d6-3a42-8dbd-c0645d3591e0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.25.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e8:32:7c:fc:ba:3c:8a:f1:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c62684cc-ca2c-4c98-b43f-05d563b0288e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:eb:fc:18:d9:3c:8d:79:8a:3c:59:c5:30: 4c:e3:e5:5f:03:98:a5:aa:00:8e:34:70:89:88:11: f8:e9:0f:8b:7a:09:fd:67:45:90:d9:fa:3d:59:d9: 98:be:ba:d8:13:bf:1b:80:ab:d9:e6:ed:23:1a:07: 18:02:44:aa:e2:d1:8b:d1:ab:dd:d0:90:be:0e:bb: 5b:f3:5c:27:0b:87:dd:78:f1:d3:8a:a1:de:3c:4c: 69:05:61:08:65:8c:1c:08:52:f4:6e:37:7e:92:12: 49:b2:4e:f3:da:c5:23:ff:00:bd:bb:ec:39:de:6e: 73:b6:c4:61:8f:38:d6:8a:87:16:87:cd:52:3d:5d: d4:58:03:0c:92:01:ad:a9:33:8b:0b:6c:f0:6f:08: 04:88:e4:8c:4f:bc:53:8f:64:0e:e1:e5:16:dd:aa: 07:b5:fd:13:da:d3:31:0a:7e:3c:c6:19:fa:06:89: 3c:67:8f:4b:a4:38:98:aa:44:fe:eb:aa:25:09:a4: b6:b0:b6:54:a3:c1:59:83:93:f5:9c:e1:1d:59:f7: b9:a3:6d:da:76:21:14:01:d3:b4:99:57:73:50:d4: 7d:7a:6d:50:9b:45:ae:59:48:fd:5c:a9:84:19:e8: 38:23:f4:f6:9d:47:74:61:9c:ae:b9:05:78:99:be: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:09:20:38:20:C6:35:2B:0C:93:AD:04:B0:4F:06:FD:B9:BD:CE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5e31e16-85d6-3a42-8dbd-c0645d3591e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:12:61:06:b3:3b:ee:a9:ef:73:37:49:ee:4b:cc:87:d8:c9: 9e:9a:eb:c1:2c:b3:2d:52:99:3b:a0:25:69:7c:b4:f0:7a:ca: 79:a2:46:2a:b6:23:78:33:8b:4a:9d:62:de:bb:de:1c:28:69: 5a:e6:3e:bf:14:7e:d8:61:ef:a1:6e:d0:78:c0:5d:1f:e0:7b: 0c:33:79:c0:dc:10:6e:f6:e0:24:41:a1:b8:c7:25:77:44:67: e4:35:9b:07:c8:83:7a:6a:87:5d:ed:12:5a:a8:5d:b9:d3:ad: 73:9a:7f:18:e4:81:eb:0f:ed:88:94:b5:33:03:60:4d:13:ff: 3c:1e:cb:e5:36:8f:a3:07:c1:76:ac:59:e5:62:0b:81:3e:4b: b1:ca:2b:5f:28:78:84:dd:d9:7f:9b:ae:5b:27:fe:b4:9d:08: d2:4e:0b:f9:80:db:ef:cd:4c:3c:cd:5c:69:17:98:a7:5b:c3: 33:25:61:47:3f:5f:c0:f6:b9:ca:9f:81:b2:ee:f8:ed:fc:54: ee:f3:f0:fa:70:f0:94:b5:74:0f:77:3c:7e:5b:fa:6f:f5:58: ae:37:43:75:17:f6:8d:73:98:70:9d:1a:c7:2f:60:ce:f8:37: 69:12:8b:9c:7f:42:0a:b8:ab:46:5c:63:82:1d:0c:8a:84:52: 30:69:b6:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOgyfPy6PIrxrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzYyNjg0Y2MtY2EyYy00Yzk4LWI0M2YtMDVkNTYzYjAyODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDLr/BjZPI15ijxZxTBM4+VfA5ilqgCONHCJ iBH46Q+Legn9Z0WQ2fo9WdmYvrrYE78bgKvZ5u0jGgcYAkSq4tGL0avd0JC+Drtb 81wnC4fdePHTiqHePExpBWEIZYwcCFL0bjd+khJJsk7z2sUj/wC9u+w53m5ztsRh jzjWiocWh81SPV3UWAMMkgGtqTOLC2zwbwgEiOSMT7xTj2QO4eUW3aoHtf0T2tMx Cn48xhn6Bok8Z49LpDiYqkT+66olCaS2sLZUo8FZg5P1nOEdWfe5o23adiEUAdO0 mVdzUNR9em1Qm0WuWUj9XKmEGeg4I/T2nUd0YZyuuQV4mb5TXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIJIDggxjUrDJOtBLBPBv25vc76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjVlMzFlMTYtODVkNi0z YTQyLThkYmQtYzA2NDVkMzU5MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEASYQazO+6p73M3Se5LzIfYyZ6a68Essy1SmTugJWl8tPB6ynmiRiq2 I3gzi0qdYt673hwoaVrmPr8Ufthh76Fu0HjAXR/gewwzecDcEG724CRBobjHJXdE Z+Q1mwfIg3pqh13tElqoXbnTrXOafxjkgesP7YiUtTMDYE0T/zwey+U2j6MHwXas WeViC4E+S7HKK18oeITd2X+brlsn/rSdCNJOC/mA2+/NTDzNXGkXmKdbwzMlYUc/ X8D2ucqfgbLu+O38VO7z8Ppw8JS1dA93PH5b+m/1WK43Q3UX9o1zmHCdGscvYM74 N2kSi5x/Qgq4q0ZcY4IdDIqEUjBptic= -----END CERTIFICATE-----Generated at Wed Aug 6 10:02:01 2025 by rpki-client