$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa File: f60ea378-24c2-345c-a499-9160b004d9e9.roa (raw, json) Hash identifier: jNDLolrYlPEvbSFHNlSptBuL45l7CjtPJ/TrQaw+/EQ= Subject key identifier: 10:BD:8E:42:53:79:FB:41:FD:2D:38:AF:68:98:09:EE:19:9F:AF:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8575FB9133DE087F199CF380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.22.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:fb:91:33:de:08:7f:19:9c:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=e4cd32e9-438e-41eb-99de-d45daa6531e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:59:46:20:ec:dc:41:8c:7c:76:ac:78:45: 2d:31:cd:42:39:20:5a:54:0c:5c:a4:c9:f2:d5:b7: db:c3:0a:f4:dd:41:66:94:b0:95:11:fc:71:f1:98: 66:22:ad:88:86:bd:29:fd:8d:d7:ea:1e:8c:17:14: 39:d7:1a:95:bd:c3:7a:cf:91:0e:21:02:e4:62:4e: 65:01:17:ff:fe:24:81:51:9a:4b:c5:8c:4f:15:95: 6e:f5:f1:0d:d2:a7:5f:c4:e0:73:86:da:22:1d:2a: c4:54:1f:6d:5e:ee:2e:83:7c:5b:de:7d:4c:f2:1b: a5:cc:8d:bc:cf:1a:5e:e4:bd:e3:cc:89:58:22:28: b5:7c:17:59:6c:0d:2b:e2:f7:88:32:c5:4f:d8:a4: 04:d7:13:f9:b5:ac:48:73:6a:e6:c0:5b:8d:65:3e: 17:e9:09:12:7d:0a:75:30:67:b1:c7:cb:d9:13:b6: cc:9c:e7:b7:fe:4d:4e:a2:be:27:45:33:95:ea:e4: 77:be:cf:6b:ce:40:52:77:1f:43:40:ed:72:d3:92: 6c:64:f3:11:5f:ee:b6:65:19:e9:97:0f:c8:4d:fb: 28:a8:ce:aa:ee:a6:e3:e5:83:08:ab:b3:52:e7:59: da:ea:c7:c8:0f:73:97:7c:aa:80:80:ca:ae:d0:e1: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BD:8E:42:53:79:FB:41:FD:2D:38:AF:68:98:09:EE:19:9F:AF:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:61:8a:44:8d:6c:79:07:bd:94:4a:7d:eb:76:02:1f:9a:bd: da:99:66:8c:28:a6:0e:b3:5f:09:ec:ef:2c:15:20:91:bb:78: 78:55:1d:9e:da:00:58:ba:01:9d:94:73:de:8b:86:bd:20:2b: 9e:9a:85:cc:13:af:b9:97:45:fe:69:33:74:08:38:4e:7a:4f: 61:2d:b3:9f:87:cc:e1:2d:e2:dd:37:1a:98:57:0f:f5:79:88: 15:72:df:b8:bd:5d:bf:9b:da:53:7d:d8:a2:d5:48:b8:0b:5a: ad:36:5c:b7:76:3c:14:8c:a4:c4:27:b3:f2:be:ac:57:41:fc: 86:0e:2e:90:6f:91:52:d5:d3:6f:61:dd:30:99:43:f2:3b:81: 63:5a:9e:5c:9e:f6:b0:22:b2:e8:bb:de:fe:fc:86:43:a8:0b: 90:eb:1d:d0:4a:8b:1d:2f:67:ba:28:25:a9:7f:4b:8d:05:67: 1a:db:11:a6:64:84:9a:37:5f:3f:19:af:ce:0e:fa:a8:02:ef: ce:06:d6:22:d4:12:fb:05:51:96:b5:68:e1:3c:00:be:83:c5: 7d:9c:f1:b1:38:2e:01:48:ff:c4:94:b2:bc:32:d3:81:d5:85: 9a:14:81:66:04:ff:dd:fd:dd:3c:06:fd:c4:b6:bd:e8:c7:b8: ac:9b:6d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfuRM94Ifxmc84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTRjZDMyZTktNDM4ZS00MWViLTk5ZGUtZDQ1ZGFhNjUzMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/pZRiDs3EGMfHaseEUtMc1COSBaVAxcpMny 1bfbwwr03UFmlLCVEfxx8ZhmIq2Ihr0p/Y3X6h6MFxQ51xqVvcN6z5EOIQLkYk5l ARf//iSBUZpLxYxPFZVu9fEN0qdfxOBzhtoiHSrEVB9tXu4ug3xb3n1M8hulzI28 zxpe5L3jzIlYIii1fBdZbA0r4veIMsVP2KQE1xP5taxIc2rmwFuNZT4X6QkSfQp1 MGexx8vZE7bMnOe3/k1Oor4nRTOV6uR3vs9rzkBSdx9DQO1y05JsZPMRX+62ZRnp lw/ITfsoqM6q7qbj5YMIq7NS51na6sfID3OXfKqAgMqu0OFmPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBC9jkJTeftB/S04r2iYCe4Zn69VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjYwZWEzNzgtMjRjMi0z NDVjLWE0OTktOTE2MGIwMDRkOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9hikSNbHkHvZRKfet2Ah+avdqZZowopg6zXwns7ywVIJG7eHhVHZ7a AFi6AZ2Uc96Lhr0gK56ahcwTr7mXRf5pM3QIOE56T2Ets5+HzOEt4t03GphXD/V5 iBVy37i9Xb+b2lN92KLVSLgLWq02XLd2PBSMpMQns/K+rFdB/IYOLpBvkVLV029h 3TCZQ/I7gWNanlye9rAisui73v78hkOoC5DrHdBKix0vZ7ooJal/S40FZxrbEaZk hJo3Xz8Zr84O+qgC784G1iLUEvsFUZa1aOE8AL6DxX2c8bE4LgFI/8SUsrwy04HV hZoUgWYE/9393TwG/cS2vejHuKybbSU= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:18 2025 by rpki-client