$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fcf03ed-f9fb-3004-bd04-3c3da699bc4c.roa File: 3fcf03ed-f9fb-3004-bd04-3c3da699bc4c.roa (raw, json) Hash identifier: ym5UgNKsakZ+RyE+QwBfwG5ulsAHlKFEQjhgGxMgeTc= Subject key identifier: 05:8B:CC:EE:6F:4D:26:C1:3D:04:C7:D8:5A:92:FE:14:12:53:DD:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584ADECBD6F74AB5C787E171AF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fcf03ed-f9fb-3004-bd04-3c3da699bc4c.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.30.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d6:f7:4a:b5:c7:87:e1:71:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=d1c31897-df24-4eb9-ae0e-2792538c483c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:84:34:98:52:87:1a:f2:d1:33:12:c1:a3: b9:7c:d5:36:4d:6f:82:9c:d4:da:73:0f:a6:b5:5a: 80:02:64:47:38:6c:09:90:fd:b4:51:9c:2a:96:11: 58:13:57:18:bc:9d:7d:a4:1e:20:c8:4a:e6:fa:46: 42:e1:05:89:8a:29:c1:f0:96:ae:98:b8:e1:df:1f: 5d:86:3d:58:f3:f8:4e:02:df:2c:b9:c8:8b:4f:30: 23:fd:63:18:5d:19:dc:08:b2:d2:92:24:69:c4:0b: a7:19:20:15:46:80:45:18:01:6a:69:58:83:2f:fa: a2:c9:0b:19:16:fe:7f:41:7a:9d:aa:2d:c5:97:1b: a0:ed:ba:09:b3:80:42:cf:cc:6f:74:40:32:f8:70: 5e:20:58:ff:21:8c:af:45:13:d4:84:98:97:39:98: db:c8:40:45:cb:f3:11:9c:da:7c:45:1f:ed:28:8e: 63:06:48:3b:e4:4f:c1:34:bf:2e:61:47:5b:3c:74: ef:2b:d1:48:95:76:c5:2e:20:9a:b9:9a:98:5c:7f: c0:86:f6:60:b7:1e:94:78:a2:cb:ac:5e:e6:f6:fd: 60:e9:61:03:6d:3c:48:19:e4:6e:01:2b:df:ec:ba: 1f:f3:8f:c8:bc:83:6a:4a:26:c6:51:9d:c2:de:ca: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8B:CC:EE:6F:4D:26:C1:3D:04:C7:D8:5A:92:FE:14:12:53:DD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fcf03ed-f9fb-3004-bd04-3c3da699bc4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:88:34:bd:79:89:a2:06:c2:31:7a:f1:7d:db:ed:2a:6f:60: 8a:f8:c9:e8:34:67:01:5c:dc:60:11:af:fc:58:08:71:24:14: df:42:cc:6b:d6:3c:4b:6e:e3:71:8e:6a:b7:17:84:c6:a2:89: 61:f3:5e:6d:4c:cc:5e:03:6b:28:f0:40:34:66:1b:5d:9c:66: b2:7d:6e:65:46:e0:2b:04:71:f1:e1:ec:bb:e8:93:09:ed:d6: e3:70:e5:26:5e:b4:78:88:d7:50:96:2d:40:d1:c7:88:1d:c7: be:f7:2d:62:0e:a5:68:96:ac:ae:a0:49:68:8e:d4:b2:17:00: 62:b5:6d:bd:c5:68:9e:d1:15:a7:88:b9:47:2a:b3:69:60:c8: c2:2c:28:61:0a:e1:8d:4d:bc:7c:2f:c9:30:16:e9:7e:a7:84: 51:6d:92:79:99:6a:24:c5:3b:62:6d:e2:d8:31:00:42:43:37: 46:e7:67:68:27:c4:87:25:d9:0d:09:8f:d1:19:e2:7d:6c:63: 15:1e:57:7a:90:5b:a9:39:7b:7a:f0:82:8c:2f:bd:c3:84:ad: 78:4b:b3:65:92:b6:79:68:31:b3:7b:0b:d0:9f:3c:44:36:32: f7:6b:8b:17:b4:a7:b3:7c:fe:67:96:5a:58:21:9c:0c:db:4c: 25:40:c1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey9b3SrXHh+Fxr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDFjMzE4OTctZGYyNC00ZWI5LWFlMGUtMjc5MjUzOGM0ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbqENJhShxry0TMSwaO5fNU2TW+CnNTacw+m tVqAAmRHOGwJkP20UZwqlhFYE1cYvJ19pB4gyErm+kZC4QWJiinB8JaumLjh3x9d hj1Y8/hOAt8suciLTzAj/WMYXRncCLLSkiRpxAunGSAVRoBFGAFqaViDL/qiyQsZ Fv5/QXqdqi3Flxug7boJs4BCz8xvdEAy+HBeIFj/IYyvRRPUhJiXOZjbyEBFy/MR nNp8RR/tKI5jBkg75E/BNL8uYUdbPHTvK9FIlXbFLiCauZqYXH/AhvZgtx6UeKLL rF7m9v1g6WEDbTxIGeRuASvf7Lof84/IvINqSibGUZ3C3sq+pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWLzO5vTSbBPQTH2FqS/hQSU915MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZjZjAzZWQtZjlmYi0z MDA0LWJkMDQtM2MzZGE2OTliYzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR6FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiINL15iaIGwjF68X3b7SpvYIr4yeg0ZwFc3GARr/xYCHEkFN9CzGvW PEtu43GOarcXhMaiiWHzXm1MzF4DayjwQDRmG12cZrJ9bmVG4CsEcfHh7Lvokwnt 1uNw5SZetHiI11CWLUDRx4gdx773LWIOpWiWrK6gSWiO1LIXAGK1bb3FaJ7RFaeI uUcqs2lgyMIsKGEK4Y1NvHwvyTAW6X6nhFFtknmZaiTFO2Jt4tgxAEJDN0bnZ2gn xIcl2Q0Jj9EZ4n1sYxUeV3qQW6k5e3rwgowvvcOErXhLs2WStnloMbN7C9CfPEQ2 Mvdrixe0p7N8/meWWlghnAzbTCVAwcA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:41:26 2025 by rpki-client