$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157c81be-8ba0-35d7-a6b7-d0857b14b02c.roa File: 157c81be-8ba0-35d7-a6b7-d0857b14b02c.roa (raw, json) Hash identifier: JacsfzKU1VvTWr+MfJ70CNedzXBogupHHbfrFe5XfQM= Subject key identifier: B7:67:3C:FB:E8:80:95:B3:BF:AC:75:BD:43:66:35:77:9F:7C:57:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A5A306C0B716A371A3DCAC600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157c81be-8ba0-35d7-a6b7-d0857b14b02c.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.22.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:6c:0b:71:6a:37:1a:3d:ca:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=ea60f015-3aa9-4f56-85c0-289bd8968251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:34:fc:e0:23:da:7e:64:05:e2:33:25:d4: 23:97:0d:a4:7b:bf:90:bf:21:f6:27:52:41:1a:8a: f4:ea:ca:18:b3:63:e6:b4:31:01:c0:d2:dc:67:f1: bc:de:70:89:90:39:d5:13:22:aa:09:a8:a7:3f:5f: 36:90:78:81:64:9c:58:b0:31:61:30:d8:eb:f5:56: ae:12:a4:06:b1:54:03:17:6a:cb:d9:14:78:55:9a: d9:74:7d:69:c0:7b:8c:60:53:41:fc:0c:8c:ef:62: ff:6a:24:fc:26:e7:a9:9b:05:d0:04:ca:e6:64:d6: ce:a7:07:7a:5a:ce:a5:2b:7e:70:2f:44:60:3e:dc: b5:30:3f:5e:23:04:3d:98:cb:94:9a:b1:14:d9:b7: aa:66:58:89:6b:4f:2f:32:aa:b7:c6:4e:d2:84:93: fd:87:4b:c6:49:cc:72:e2:5c:3b:49:87:93:88:15: 86:d0:d1:f5:f1:dd:9c:e4:d2:41:36:85:c3:de:46: 6d:11:3e:d1:6d:2b:ab:b6:0b:d7:eb:22:da:7b:a5: 4a:82:24:eb:59:a2:c7:be:d9:ee:75:97:83:05:d8: 52:57:1c:f2:76:fb:0b:6e:8e:f0:e5:c6:7d:64:4d: 53:66:e2:01:d6:6d:ed:69:eb:6e:dd:e1:08:2b:a0: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:67:3C:FB:E8:80:95:B3:BF:AC:75:BD:43:66:35:77:9F:7C:57:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157c81be-8ba0-35d7-a6b7-d0857b14b02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:20:61:96:e9:be:2d:0a:8d:38:60:5c:67:9f:ed:35:24:91: fd:70:50:7a:77:e4:20:43:a8:b5:44:92:65:43:12:96:35:06: 0f:be:4c:4d:8b:47:5f:84:34:8d:ed:b7:87:04:b9:e5:ed:e5: a2:ab:cc:42:c4:7f:21:5e:5e:2a:54:5f:c0:e6:b3:5d:11:c9: 1f:24:33:30:2a:e1:ac:29:cd:3e:a1:2e:91:be:a2:4e:41:1a: 76:4a:57:06:19:73:9a:4d:72:fb:77:ba:cc:18:81:78:fe:73: c9:19:7f:b6:15:a9:9e:38:7b:68:b2:15:5c:a6:b3:94:2c:81: 25:da:8f:74:48:70:14:60:25:e1:2d:66:66:92:9a:f9:94:d4: 49:d1:e9:21:61:1e:ee:59:73:90:22:38:d1:83:e8:c4:8e:e4: 70:3c:97:06:89:14:63:3a:17:e0:54:6a:38:fa:64:12:db:29: 73:32:e1:05:f5:aa:db:c4:0f:91:22:3f:07:98:f9:6b:b8:c0: af:e7:92:86:c6:bc:2c:78:f2:b6:0d:45:b9:ad:f5:f4:fb:06: 26:f9:74:34:fa:c9:8a:f8:90:10:02:33:fe:97:56:11:13:e0: 89:f8:a3:2f:26:49:e4:27:03:a0:10:ba:86:e4:f4:8a:98:2c: 12:16:84:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMGwLcWo3Gj3KxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZWE2MGYwMTUtM2FhOS00ZjU2LTg1YzAtMjg5YmQ4OTY4MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiw0/OAj2n5kBeIzJdQjlw2ke7+QvyH2J1JB Gor06soYs2PmtDEBwNLcZ/G83nCJkDnVEyKqCainP182kHiBZJxYsDFhMNjr9Vau EqQGsVQDF2rL2RR4VZrZdH1pwHuMYFNB/AyM72L/aiT8JuepmwXQBMrmZNbOpwd6 Ws6lK35wL0RgPty1MD9eIwQ9mMuUmrEU2beqZliJa08vMqq3xk7ShJP9h0vGScxy 4lw7SYeTiBWG0NH18d2c5NJBNoXD3kZtET7RbSurtgvX6yLae6VKgiTrWaLHvtnu dZeDBdhSVxzydvsLbo7w5cZ9ZE1TZuIB1m3taetu3eEIK6ClCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdnPPvogJWzv6x1vUNmNXeffFczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTU3YzgxYmUtOGJhMC0z NWQ3LWE2YjctZDA4NTdiMTRiMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRbnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIgYZbpvi0KjThgXGef7TUkkf1wUHp35CBDqLVEkmVDEpY1Bg++TE2L R1+ENI3tt4cEueXt5aKrzELEfyFeXipUX8Dms10RyR8kMzAq4awpzT6hLpG+ok5B GnZKVwYZc5pNcvt3uswYgXj+c8kZf7YVqZ44e2iyFVyms5QsgSXaj3RIcBRgJeEt ZmaSmvmU1EnR6SFhHu5Zc5AiONGD6MSO5HA8lwaJFGM6F+BUajj6ZBLbKXMy4QX1 qtvED5EiPweY+Wu4wK/nkobGvCx48rYNRbmt9fT7Bib5dDT6yYr4kBACM/6XVhET 4In4oy8mSeQnA6AQuobk9IqYLBIWhCA= -----END CERTIFICATE-----Generated at Sun Jun 29 22:14:49 2025 by rpki-client