$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa File: 2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa (raw, json) Hash identifier: W5wcRaAU/R1fxM3+Hx9BJ0khzuCzj2R6WdCDbsoq0jg= Subject key identifier: 3C:FA:68:7C:A5:49:A5:D4:36:D9:EF:BF:2F:04:F7:78:41:DF:D5:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AC710E98451132F1A2D50EA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 30036 IP address blocks: 173.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:e9:84:51:13:2f:1a:2d:50:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=5d670244-8a42-4105-a15a-c66c009155a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:58:06:cb:ee:83:6e:b1:40:6a:ab:2c:45:69: 24:e7:42:d1:6b:55:fa:f0:a6:1f:58:90:b5:a8:54: df:d5:f2:c0:88:9d:69:cb:75:53:12:df:a9:e3:74: ad:42:ce:2f:97:ac:61:13:f8:e9:8f:25:17:64:b2: 5a:02:07:d9:7d:98:db:72:04:98:6e:ef:59:1e:b5: e5:90:52:2b:4e:97:fa:9e:39:63:f7:47:87:79:cf: 6a:81:09:79:2a:2c:6c:00:e3:51:e2:ed:1b:f3:84: 26:62:da:04:84:31:b1:3f:67:c7:49:f7:3c:4c:93: 31:ba:e0:25:a8:e8:00:7a:1c:06:df:2a:f0:3b:96: 50:fe:e4:59:24:e2:e4:18:36:c8:cc:83:77:7d:c2: 54:77:73:e0:0f:a8:8c:5c:bf:b0:e8:0b:9e:d7:bc: 5c:4d:82:e1:f3:c8:9a:7a:ed:ce:d2:fe:25:11:b0: c8:ae:97:62:7e:2c:b4:09:2a:ec:44:47:a0:55:19: 3b:27:28:5c:0b:2d:e6:7d:46:46:d8:f4:44:a8:44: 53:04:26:34:00:c4:1c:2b:55:b1:83:7a:ee:a2:60: 1e:39:30:eb:17:0f:04:f0:4d:f1:6e:d5:6d:40:1a: 17:22:98:97:f6:ec:f4:5b:94:4a:38:95:e9:58:38: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FA:68:7C:A5:49:A5:D4:36:D9:EF:BF:2F:04:F7:78:41:DF:D5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2506c3e0-a56a-3142-8da9-3c8abe9d0877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:da:94:ec:00:66:6a:e5:41:cb:b6:84:36:55:db:46:b3:b4: ff:ef:0c:52:6f:9c:be:f7:14:ba:e2:da:18:ae:57:5e:4a:45: ff:be:ba:ad:f4:37:77:a6:ce:cd:79:1f:1c:81:a1:65:7b:2e: be:d0:3d:d9:97:12:e6:4e:54:cf:9f:8d:ca:62:91:30:9c:a7: 05:65:6a:19:2d:81:54:07:70:de:d4:b2:3b:99:bd:ec:16:3a: 18:9f:93:40:14:5d:8f:12:4e:9d:5c:58:00:12:be:33:41:59: 9d:4f:41:f7:bd:54:2c:50:ef:28:3f:ea:36:4b:91:cd:a6:13: cb:7d:de:3c:d3:ab:4f:76:b3:d9:e2:46:3d:72:b2:18:58:b1: b1:71:e4:19:d7:24:15:6d:c1:bd:1e:32:f3:26:1b:6d:13:41: f8:c7:cc:e6:18:b8:49:1a:9c:7c:3f:65:73:7b:c1:f5:71:3a: 3e:bc:bb:83:e2:76:46:99:e4:55:3e:6a:f5:3c:ff:4c:2f:bf: 78:42:cd:d2:8c:cf:7a:ae:e8:46:f8:d8:aa:cd:28:4f:e0:db: cc:68:2d:24:88:62:40:79:83:46:f5:af:45:f3:cc:49:46:f1: 31:54:c2:2f:c2:d0:52:5d:0d:d7:de:58:0e:22:6b:30:28:69: 36:e6:c4:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEOmEURMvGi1Q6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NWQ2NzAyNDQtOGE0Mi00MTA1LWExNWEtYzY2YzAwOTE1NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFgGy+6DbrFAaqssRWkk50LRa1X68KYfWJC1 qFTf1fLAiJ1py3VTEt+p43StQs4vl6xhE/jpjyUXZLJaAgfZfZjbcgSYbu9ZHrXl kFIrTpf6njlj90eHec9qgQl5KixsAONR4u0b84QmYtoEhDGxP2fHSfc8TJMxuuAl qOgAehwG3yrwO5ZQ/uRZJOLkGDbIzIN3fcJUd3PgD6iMXL+w6Aue17xcTYLh88ia eu3O0v4lEbDIrpdifiy0CSrsREegVRk7JyhcCy3mfUZG2PREqERTBCY0AMQcK1Wx g3ruomAeOTDrFw8E8E3xbtVtQBoXIpiX9uz0W5RKOJXpWDisEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz6aHylSaXUNtnvvy8E93hB39VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjUwNmMzZTAtYTU2YS0z MTQyLThkYTktM2M4YWJlOWQwODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLalOwAZmrlQcu2hDZV20aztP/vDFJvnL73FLri2hiuV15KRf++uq30 N3emzs15HxyBoWV7Lr7QPdmXEuZOVM+fjcpikTCcpwVlahktgVQHcN7UsjuZvewW Ohifk0AUXY8STp1cWAASvjNBWZ1PQfe9VCxQ7yg/6jZLkc2mE8t93jzTq092s9ni Rj1yshhYsbFx5BnXJBVtwb0eMvMmG20TQfjHzOYYuEkanHw/ZXN7wfVxOj68u4Pi dkaZ5FU+avU8/0wvv3hCzdKMz3qu6Eb42KrNKE/g28xoLSSIYkB5g0b1r0XzzElG 8TFUwi/C0FJdDdfeWA4iazAoaTbmxIs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:46 2025 by rpki-client