$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbf9884f-4a07-3f1b-a367-804be1a437d0.roa File: fbf9884f-4a07-3f1b-a367-804be1a437d0.roa (raw, json) Hash identifier: eWpsEeG8upjs5Nuwf4WagoKVr03lS3+b4Wtt8OQHiQI= Subject key identifier: 2C:24:58:F6:6D:10:26:3C:9A:03:D9:60:18:36:7F:16:D0:ED:E5:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A9DAAE89593E10E123C7018C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbf9884f-4a07-3f1b-a367-804be1a437d0.roa Signing time: Wed 23 Jul 2025 17:07:02 +0000 ROA not before: Wed 23 Jul 2025 17:07:02 +0000 ROA not after: Tue 21 Oct 2025 17:07:02 +0000 asID: 30036 IP address blocks: 173.24.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:aa:e8:95:93:e1:0e:12:3c:70:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 23 17:07:02 2025 GMT Not After : Oct 21 17:07:02 2025 GMT Subject: CN=973275dc-850c-4377-be36-404ed27aca8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:72:4c:93:93:d4:e0:98:45:75:96:fc:8b:34: c0:13:16:fe:1f:5d:7c:c9:02:3a:aa:63:ac:ab:94: eb:2f:c1:8e:4a:15:33:09:c1:5e:c4:df:c6:f7:ae: 95:26:d8:f5:82:57:a9:ce:9c:e6:c6:b9:19:9e:54: bd:45:b8:92:12:1c:9a:4c:a0:49:50:ce:5f:da:5c: 8f:b2:c0:5e:45:d5:63:f7:ea:97:29:c0:42:0c:65: 36:35:bf:fd:79:be:d0:23:48:c7:b3:36:69:80:f7: c2:94:02:33:cd:25:0b:ee:75:11:3e:cd:b9:17:4f: a1:04:7a:0f:53:83:47:0a:44:cf:15:86:e6:18:36: 6f:41:a7:61:db:5f:bd:37:41:89:08:2c:98:e3:e6: 11:4c:f4:a4:b8:67:62:e1:5b:7e:4c:d3:32:7e:0f: cc:77:aa:a6:61:b1:7c:69:24:b1:30:88:25:46:86: 30:a3:ac:91:f1:bf:cb:4e:19:cc:90:26:b6:77:1b: ba:69:09:93:f1:2c:0f:d3:c2:7e:ff:5e:5c:b9:3b: a9:c9:92:3b:33:67:09:ba:a4:87:d5:78:45:a9:1c: 5a:8c:89:04:fb:7e:c2:b5:b7:d3:dd:01:40:e6:ac: 65:92:06:8d:2a:84:cd:80:71:cd:eb:5e:8e:44:41: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:24:58:F6:6D:10:26:3C:9A:03:D9:60:18:36:7F:16:D0:ED:E5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbf9884f-4a07-3f1b-a367-804be1a437d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:94:c7:38:f6:33:11:8a:8d:4e:7a:73:eb:31:05:ae:4d:13: 31:e0:6e:1c:1e:86:da:2b:df:78:a6:00:75:98:4a:42:41:0c: ff:ce:23:94:4d:c9:a2:3f:68:b2:06:f7:a2:b3:36:40:93:fe: ba:3b:d7:89:e4:55:2d:b5:1a:ea:1d:ea:c0:3c:a2:54:52:ea: a1:a8:82:06:6b:42:78:05:c2:d4:38:72:a4:9f:fb:f9:ba:17: 99:e0:4e:5b:74:54:bb:ab:8f:22:eb:d8:12:c8:44:41:db:64: 24:84:a7:cc:89:f4:ef:b8:c4:19:4d:e3:47:cd:1b:d4:1e:0f: 2e:50:04:de:4e:4d:00:df:72:1d:21:84:a0:3a:af:02:56:5c: bb:08:6d:ac:5f:23:91:c7:b8:27:2b:52:e7:85:18:1e:8e:1d: 51:79:5b:3c:ed:68:2a:d7:9e:18:3a:86:d9:8b:3c:81:ed:fa: b4:86:1d:c5:e3:19:da:55:86:33:eb:93:a0:96:ce:a6:eb:a2: a1:85:5d:c1:cc:3b:38:26:5d:7c:62:0c:5f:62:4f:59:24:82: 92:fb:44:02:93:95:26:93:bf:08:1d:60:9b:12:4d:d8:2f:21: 2b:ee:94:1a:47:d8:4e:57:57:1f:44:02:67:15:1f:02:e5:39: 56:ff:2e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdquiVk+EOEjxwGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcyMzE3MDcwMloXDTI1MTAyMTE3MDcwMlowLzEtMCsGA1UEAxMk OTczMjc1ZGMtODUwYy00Mzc3LWJlMzYtNDA0ZWQyN2FjYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnJMk5PU4JhFdZb8izTAExb+H118yQI6qmOs q5TrL8GOShUzCcFexN/G966VJtj1glepzpzmxrkZnlS9RbiSEhyaTKBJUM5f2lyP ssBeRdVj9+qXKcBCDGU2Nb/9eb7QI0jHszZpgPfClAIzzSUL7nURPs25F0+hBHoP U4NHCkTPFYbmGDZvQadh21+9N0GJCCyY4+YRTPSkuGdi4Vt+TNMyfg/Md6qmYbF8 aSSxMIglRoYwo6yR8b/LThnMkCa2dxu6aQmT8SwP08J+/15cuTupyZI7M2cJuqSH 1XhFqRxajIkE+37CtbfT3QFA5qxlkgaNKoTNgHHN616OREEx7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwkWPZtECY8mgPZYBg2fxbQ7eWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmJmOTg4NGYtNGEwNy0z ZjFiLWEzNjctODA0YmUxYTQzN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRj+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOUxzj2MxGKjU56c+sxBa5NEzHgbhwehtor33imAHWYSkJBDP/OI5RN yaI/aLIG96KzNkCT/ro714nkVS21Guod6sA8olRS6qGoggZrQngFwtQ4cqSf+/m6 F5ngTlt0VLurjyLr2BLIREHbZCSEp8yJ9O+4xBlN40fNG9QeDy5QBN5OTQDfch0h hKA6rwJWXLsIbaxfI5HHuCcrUueFGB6OHVF5WzztaCrXnhg6htmLPIHt+rSGHcXj GdpVhjPrk6CWzqbroqGFXcHMOzgmXXxiDF9iT1kkgpL7RAKTlSaTvwgdYJsSTdgv ISvulBpH2E5XVx9EAmcVHwLlOVb/Lq8= -----END CERTIFICATE-----Generated at Wed Aug 6 10:01:48 2025 by rpki-client