$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa File: 3f4be265-254f-3134-9fd7-db5733c3efcc.roa (raw, json) Hash identifier: Q2xAdRkyZB31lZ7yj+wYpGFwR+QfQA2TvVpvtcKuuO8= Subject key identifier: D6:AD:07:01:6B:0F:42:E7:35:5E:EA:D2:79:BE:75:CD:DA:8B:E4:A6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AD936757D9BF85FFEB8F9C8C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 170.52.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:75:7d:9b:f8:5f:fe:b8:f9:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=d96bfe8b-dc05-4196-99c3-66f4f266ee72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:11:e0:49:06:26:05:61:26:eb:54:3c:36: 7e:b7:19:be:93:58:25:0f:96:51:0b:9f:24:97:2f: d4:f5:12:67:10:93:eb:56:42:a8:dd:aa:43:a7:43: a0:76:71:10:10:9c:b4:08:b8:67:40:85:d9:45:33: b5:33:b7:b9:44:41:38:d9:f1:e6:9a:a3:cb:b2:47: bf:e0:65:58:ea:f0:a3:a5:60:14:69:dd:bf:c2:2d: d1:5a:16:1d:6f:49:82:b3:79:8b:69:59:ae:af:44: ed:f6:b2:db:f7:44:13:8d:2e:65:8d:ae:6e:27:8a: 9d:fb:d9:2a:a2:98:15:c6:3a:1e:b8:ac:34:1e:66: 43:f6:f7:c4:2b:7e:c9:b2:f2:a0:a8:c0:e2:3e:95: 57:16:27:b5:1e:cb:f6:d2:64:97:43:15:f6:94:06: 90:78:6b:30:07:37:b7:33:8c:6e:53:41:f2:56:dc: a7:59:76:8a:3e:c1:20:5d:13:08:58:48:fd:62:8e: 80:8c:de:f8:19:a0:4d:2f:ea:e9:86:ac:42:73:81: a8:e9:03:55:7b:ab:30:57:1a:b1:2c:c0:ce:c9:68: 92:e0:df:75:eb:77:9a:30:32:c9:34:b1:c2:fc:ef: 33:d4:b3:71:5e:97:6e:64:38:d9:71:60:9d:09:ad: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AD:07:01:6B:0F:42:E7:35:5E:EA:D2:79:BE:75:CD:DA:8B:E4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c3:5f:fc:66:c3:36:7e:fa:d3:32:5d:ec:b4:1d:ec:f8:cc: f0:99:2b:06:12:d9:4b:15:fc:83:b9:b4:ad:14:88:8d:16:11: a6:6d:94:40:5f:76:78:1f:5f:c0:22:43:5f:c1:e6:ac:f7:31: 7e:2a:56:d9:db:ce:88:53:d8:ca:70:95:82:15:3a:ad:f4:90: f1:2f:61:ea:c1:4f:92:d3:a1:e7:53:fa:b7:97:1c:b8:3e:c6: d0:77:eb:1c:25:65:34:89:78:10:0b:76:6c:46:8e:62:2e:a2: ac:ff:6c:dd:dd:26:2a:3f:f5:87:33:be:70:2a:5f:a6:02:a7: fc:ee:f7:0b:ed:e3:1a:e2:a3:24:e2:05:25:c3:d8:f2:06:7d: ce:bb:4c:54:35:98:17:75:7d:ad:92:af:fa:53:1e:d3:64:e6: e5:ba:1b:94:97:c2:f9:18:05:15:11:62:b9:7d:86:c3:36:71: 11:54:e6:4f:ba:32:b4:99:19:c3:ea:b5:e2:45:8d:fb:ef:71: 0c:36:25:75:c1:87:a9:8a:d2:d8:d9:c9:5c:e2:64:80:3b:54: 2e:1f:ac:f7:08:52:bd:39:f0:cf:eb:5f:20:da:e0:58:a4:fd: 8b:e5:a1:e5:6a:d8:c3:9f:2a:14:4f:52:d9:f9:17:fd:0b:c7: 0f:f5:e9:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNnV9m/hf/rj5yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDk2YmZlOGItZGMwNS00MTk2LTk5YzMtNjZmNGYyNjZlZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1doR4EkGJgVhJutUPDZ+txm+k1glD5ZRC58k ly/U9RJnEJPrVkKo3apDp0OgdnEQEJy0CLhnQIXZRTO1M7e5REE42fHmmqPLske/ 4GVY6vCjpWAUad2/wi3RWhYdb0mCs3mLaVmur0Tt9rLb90QTjS5lja5uJ4qd+9kq opgVxjoeuKw0HmZD9vfEK37JsvKgqMDiPpVXFie1Hsv20mSXQxX2lAaQeGswBze3 M4xuU0HyVtynWXaKPsEgXRMIWEj9Yo6AjN74GaBNL+rphqxCc4Go6QNVe6swVxqx LMDOyWiS4N9163eaMDLJNLHC/O8z1LNxXpduZDjZcWCdCa1KawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNatBwFrD0LnNV7q0nm+dc3ai+SmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y0YmUyNjUtMjU0Zi0z MTM0LTlmZDctZGI1NzMzYzNlZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjDX/xmwzZ++tMyXey0Hez4zPCZKwYS2UsV/IO5tK0UiI0WEaZtlEBf dngfX8AiQ1/B5qz3MX4qVtnbzohT2MpwlYIVOq30kPEvYerBT5LToedT+reXHLg+ xtB36xwlZTSJeBALdmxGjmIuoqz/bN3dJio/9YczvnAqX6YCp/zu9wvt4xrioyTi BSXD2PIGfc67TFQ1mBd1fa2Sr/pTHtNk5uW6G5SXwvkYBRURYrl9hsM2cRFU5k+6 MrSZGcPqteJFjfvvcQw2JXXBh6mK0tjZyVziZIA7VC4frPcIUr058M/rXyDa4Fik /YvloeVq2MOfKhRPUtn5F/0Lxw/16RQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:56 2025 by rpki-client