$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa File: ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa (raw, json) Hash identifier: /SfCiHcS7hbN5gJN18MtA1h37lwETy1wdoYwCfN6NFg= Subject key identifier: 42:4C:A1:50:06:5D:5D:5A:26:91:FA:48:D8:5D:DA:B4:80:95:3B:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410CDEF4FB169EB7ED17AA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.24.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:cd:ef:4f:b1:69:eb:7e:d1:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8af1b27d-8981-4f64-98ef-63dff4adc589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:22:0a:9a:67:af:a2:79:c9:8c:bf:81:81: 9a:1d:3e:c9:9f:89:bc:da:5d:3c:bf:32:3f:24:92: 8d:1b:d3:e0:12:74:f7:87:e7:a8:13:d5:ca:e6:93: e9:36:f6:65:05:e7:d4:07:07:4d:e0:20:5f:d7:e4: 8a:0a:e3:5d:af:4c:89:43:dd:4d:83:59:32:b4:93: ec:5a:aa:35:72:90:41:09:ab:9e:e0:94:05:c9:9f: 43:86:51:0d:4e:d3:ff:24:11:72:df:30:fc:f0:7d: c2:70:f7:37:38:b5:91:09:39:85:69:c3:ec:86:9c: c9:00:ba:b1:0d:2c:87:8f:83:35:83:dd:4d:66:c3: 57:78:14:df:a6:34:91:f8:a6:11:7f:2a:c5:df:47: 61:e5:c1:b3:a3:44:45:1d:ce:fe:6c:e9:d7:0a:73: 72:21:e4:73:87:37:55:88:26:93:db:f8:ce:52:14: 50:27:86:44:93:a9:d7:0b:99:89:2a:85:71:90:66: 3f:50:4a:12:b1:18:e1:ed:17:7d:7d:47:fd:aa:16: fc:20:ac:09:a7:9b:01:a4:d3:1e:34:23:ff:17:a8: 46:55:fa:3d:3b:47:47:ba:5d:9a:07:7a:7c:72:d6: 02:48:64:e5:b7:44:74:fd:40:04:cd:e2:17:ee:0a: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4C:A1:50:06:5D:5D:5A:26:91:FA:48:D8:5D:DA:B4:80:95:3B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:39:77:db:b8:78:24:ba:47:15:94:66:9b:4b:87:cb:6d:e4: d7:af:9a:81:02:78:e7:c5:03:67:cc:b3:c7:4c:1b:e0:7f:47: af:fe:6d:1b:59:38:89:36:5f:26:30:d5:26:3a:b8:00:60:1b: eb:3e:eb:6f:99:fd:5a:34:18:e6:d3:58:79:d2:11:7c:f0:02: 59:a9:3d:21:6a:97:a7:35:09:dc:25:a3:0e:e4:27:9c:6a:ee: fb:81:5d:7c:ba:b4:0a:d8:81:87:64:f9:e7:c4:94:0c:72:5a: 7c:f1:14:e6:2c:da:19:87:b3:d0:e1:96:2b:81:bd:68:be:af: 9a:a6:73:2b:02:a4:c6:f2:75:43:2f:3e:54:81:c4:6c:0a:c5: 66:df:bf:08:2e:89:c9:03:98:78:e6:4e:4d:22:42:f4:4a:f8: ae:cf:9f:5d:bc:38:ad:7c:5a:b5:17:e9:3b:29:bc:38:0f:7a: 97:a0:0d:2f:f7:77:3f:61:13:61:50:ca:73:35:92:da:12:f9: 8d:d6:40:ff:aa:ca:32:5c:8b:16:60:bb:69:dd:a6:f3:05:2d: 44:ad:51:f9:97:16:1d:d7:80:02:46:b7:f1:30:41:af:b0:c2: 8b:9e:f2:d6:47:8a:59:bb:a1:28:6e:18:b4:8d:2a:2f:7e:d9: 20:4c:7c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEM3vT7Fp637ReqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGFmMWIyN2QtODk4MS00ZjY0LTk4ZWYtNjNkZmY0YWRjNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6QiCppnr6J5yYy/gYGaHT7Jn4m82l08vzI/ JJKNG9PgEnT3h+eoE9XK5pPpNvZlBefUBwdN4CBf1+SKCuNdr0yJQ91Ng1kytJPs Wqo1cpBBCaue4JQFyZ9DhlENTtP/JBFy3zD88H3CcPc3OLWRCTmFacPshpzJALqx DSyHj4M1g91NZsNXeBTfpjSR+KYRfyrF30dh5cGzo0RFHc7+bOnXCnNyIeRzhzdV iCaT2/jOUhRQJ4ZEk6nXC5mJKoVxkGY/UEoSsRjh7Rd9fUf9qhb8IKwJp5sBpNMe NCP/F6hGVfo9O0dHul2aB3p8ctYCSGTlt0R0/UAEzeIX7grkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJMoVAGXV1aJpH6SNhd2rSAlTtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmY5OTk4NWYtOTVkNy0z N2YyLWIwNWItYzZiMzRmM2MxZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg5d9u4eCS6RxWUZptLh8tt5NevmoECeOfFA2fMs8dMG+B/R6/+bRtZ OIk2XyYw1SY6uABgG+s+62+Z/Vo0GObTWHnSEXzwAlmpPSFql6c1Cdwlow7kJ5xq 7vuBXXy6tArYgYdk+efElAxyWnzxFOYs2hmHs9DhliuBvWi+r5qmcysCpMbydUMv PlSBxGwKxWbfvwguickDmHjmTk0iQvRK+K7Pn128OK18WrUX6TspvDgPepegDS/3 dz9hE2FQynM1ktoS+Y3WQP+qyjJcixZgu2ndpvMFLUStUfmXFh3XgAJGt/EwQa+w woue8tZHilm7oShuGLSNKi9+2SBMfM8= -----END CERTIFICATE-----Generated at Tue Aug 5 23:09:32 2025 by rpki-client