$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa File: fa38c4c0-2930-37f2-aa5d-8781e808672d.roa (raw, json) Hash identifier: yyFzB9wR57COXGvzW5i6c9urUp4I7pt+vUY25vMvGeo= Subject key identifier: 5D:BE:85:65:C2:BB:34:CC:FE:C2:DE:90:60:01:19:44:85:46:D8:BC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3D5ADD523DBC7703BB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3d:5a:dd:52:3d:bc:77:03:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f70f1b2b-712f-4347-948c-874a217e1dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:aa:cb:3c:f6:d0:74:38:da:0f:12:84:30: 79:e4:c1:d4:0e:2f:54:85:8e:e8:81:a8:7b:9f:82: 5b:eb:06:42:35:0e:42:31:a3:2f:7b:d9:34:66:76: 93:23:d8:0d:f3:fa:52:90:be:4d:64:37:1b:0f:4d: df:61:77:2b:66:54:e6:d1:24:66:57:80:4f:46:e6: 73:78:6b:0d:6a:e7:d8:be:86:2a:a7:ce:7c:8e:28: 70:38:37:ff:a2:8d:83:85:64:c1:6e:8c:f5:d2:2b: fa:c0:30:dc:ac:29:34:9e:86:c0:34:30:cd:04:a1: 4b:5f:a0:e4:0e:9d:97:09:b1:a1:b6:8c:5a:e9:2c: 07:75:5d:a7:e1:bd:0b:d1:b6:4a:59:b4:63:e6:26: ac:59:cd:d1:81:a3:67:ef:55:37:ab:31:f2:c0:4b: e0:6e:47:51:a2:78:13:d3:d1:0d:74:09:dd:1b:8d: 43:f4:d6:60:a7:e7:2b:73:53:86:61:90:15:78:a7: 6b:13:a6:03:44:87:d9:57:62:f4:aa:a8:79:f6:6a: f6:8d:8c:88:6e:bc:d7:0d:33:10:98:20:e7:35:82: b5:7a:df:80:55:c9:25:0c:d0:3b:42:c6:56:59:71: 22:d8:69:47:69:c6:38:fe:bf:74:5b:55:63:26:fa: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BE:85:65:C2:BB:34:CC:FE:C2:DE:90:60:01:19:44:85:46:D8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f3:96:0b:8e:9a:5f:17:73:58:c1:30:c1:3a:3d:e1:48:46: df:91:19:c3:39:bc:f1:29:38:49:18:f9:ee:52:86:37:88:11: bb:bd:4b:c5:bc:52:4d:bf:35:50:59:69:a1:e1:00:a7:f2:d4: b1:af:7f:b5:33:72:e8:16:62:e2:46:f5:e0:2f:77:5e:91:73: b8:65:a9:02:ef:43:1a:af:9b:23:65:67:06:5b:da:39:ef:01: 42:33:6c:5c:54:6d:1f:3b:6c:f8:5f:61:3c:9f:8c:7c:fb:d1: d2:0a:24:72:14:51:e1:20:6b:e3:da:e3:60:42:8c:a8:7a:b4: 92:fb:14:1d:6d:cc:e0:89:61:e5:a0:8b:39:e4:f6:57:0c:91: 7f:5c:d6:3e:4f:cb:e9:4f:cb:c7:de:4b:81:d3:17:b2:69:35: 15:77:b3:f2:ff:35:fe:63:df:a9:8b:be:e4:fb:5e:ca:82:26: 03:d9:84:a0:4d:dc:89:df:3f:b5:f4:cc:f3:a4:bb:7f:5d:46: 31:9f:ac:4e:7f:09:54:46:16:63:c4:e6:d3:77:8b:6c:c2:38: 87:0a:11:70:de:54:b1:1e:cb:20:ce:ff:76:be:cf:47:11:4c: 38:54:ec:2d:52:d2:56:b6:8c:7c:30:7c:d3:df:e4:9e:f5:bf: 22:fe:b1:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj1a3VI9vHcDuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjcwZjFiMmItNzEyZi00MzQ3LTk0OGMtODc0YTIxN2UxZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuOqyzz20HQ42g8ShDB55MHUDi9UhY7ogah7 n4Jb6wZCNQ5CMaMve9k0ZnaTI9gN8/pSkL5NZDcbD03fYXcrZlTm0SRmV4BPRuZz eGsNaufYvoYqp858jihwODf/oo2DhWTBboz10iv6wDDcrCk0nobANDDNBKFLX6Dk Dp2XCbGhtoxa6SwHdV2n4b0L0bZKWbRj5iasWc3RgaNn71U3qzHywEvgbkdRongT 09ENdAndG41D9NZgp+crc1OGYZAVeKdrE6YDRIfZV2L0qqh59mr2jYyIbrzXDTMQ mCDnNYK1et+AVcklDNA7QsZWWXEi2GlHacY4/r90W1VjJvryRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2+hWXCuzTM/sLekGABGUSFRti8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmEzOGM0YzAtMjkzMC0z N2YyLWFhNWQtODc4MWU4MDg2NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnzlguOml8Xc1jBMME6PeFIRt+RGcM5vPEpOEkY+e5ShjeIEbu9S8W8 Uk2/NVBZaaHhAKfy1LGvf7UzcugWYuJG9eAvd16Rc7hlqQLvQxqvmyNlZwZb2jnv AUIzbFxUbR87bPhfYTyfjHz70dIKJHIUUeEga+Pa42BCjKh6tJL7FB1tzOCJYeWg iznk9lcMkX9c1j5Py+lPy8feS4HTF7JpNRV3s/L/Nf5j36mLvuT7XsqCJgPZhKBN 3InfP7X0zPOku39dRjGfrE5/CVRGFmPE5tN3i2zCOIcKEXDeVLEeyyDO/3a+z0cR TDhU7C1S0la2jHwwfNPf5J71vyL+sXA= -----END CERTIFICATE-----Generated at Mon Jun 16 05:13:28 2025 by rpki-client