$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa File: 61fb4c25-3250-39ca-9af1-37036ccc411d.roa (raw, json) Hash identifier: 4zR3+DPLz5Xqjj9qrfDM6TdQJw+KXjAsCLvhEfBMLXY= Subject key identifier: 88:B7:55:2A:A2:1F:DF:49:8E:22:9F:B2:5E:A2:C1:C7:3A:76:A2:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DBFEF5FECF98B85764A340 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:fe:f5:fe:cf:98:b8:57:64:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=a3577ea7-7829-45e9-96c5-693a3de222f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:c8:49:50:39:d3:db:a8:11:ce:f0:ff:a5: 18:a0:ef:79:80:9f:26:b3:14:cd:fb:d6:10:c8:2f: b9:c2:4b:20:23:ef:04:45:ce:a6:ed:0e:69:96:53: 5b:9c:79:87:01:fe:30:41:21:ea:27:15:84:0a:21: 7b:c8:3f:a6:bc:29:b8:4b:74:68:81:15:b7:1d:97: 73:30:d5:46:ca:62:55:0e:10:3c:e4:4d:05:50:73: 1e:cb:d4:28:09:07:97:2a:49:bc:d3:7b:7e:f5:03: f8:b8:f1:92:94:d8:2f:b0:78:6b:9a:f9:31:7c:e1: 2b:22:49:89:02:d2:a9:ed:06:e1:0c:59:f3:f0:e5: 3b:84:9d:75:80:7f:91:59:e3:d6:d8:c9:41:ad:1c: 30:f3:4f:01:c9:98:be:ff:96:85:95:28:7b:0a:60: 9c:00:20:e5:6d:ca:29:da:ca:a6:7b:13:60:aa:4c: 4c:12:9d:a2:0a:ab:ce:81:94:b6:6f:b7:78:33:ce: 1f:3b:c8:d6:e9:4d:48:6e:7e:a3:d5:ae:1e:38:ce: b3:12:67:98:8b:67:22:fd:cf:ad:ee:c6:98:9a:9a: d4:a6:bc:93:de:c0:eb:c6:20:89:72:72:38:ad:8f: 37:fb:9f:34:95:96:22:7e:db:22:8c:21:d2:31:86: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B7:55:2A:A2:1F:DF:49:8E:22:9F:B2:5E:A2:C1:C7:3A:76:A2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:85:da:c5:67:69:77:f8:15:84:73:36:e4:21:2f:09:19:13: a5:2e:96:56:15:81:21:cf:2a:f5:dc:14:c2:8b:6e:a6:af:0a: df:9c:f4:78:5e:63:60:6c:c5:73:69:dd:d7:68:77:ef:5a:87: 6f:17:73:ec:ed:dd:2d:48:a8:c0:d3:94:db:87:b3:9e:b2:56: c8:a8:71:9a:9e:8d:a0:93:d6:38:9c:8a:37:33:43:7f:30:72: 61:80:62:b2:8e:e3:3c:b1:4e:f9:55:40:bb:a9:bd:9c:e1:08: cd:7f:85:a1:ac:b7:2b:f2:2d:70:39:7a:9d:eb:8e:e1:08:37: a4:a0:16:aa:d9:75:f7:83:df:54:4b:db:70:62:c8:5f:9f:e1: cc:d6:11:53:12:f7:26:bd:ed:82:14:db:46:64:20:b4:8c:6b: e7:b2:d7:b3:8a:4a:34:7b:a9:0c:95:e2:cd:d0:f4:20:d9:4b: 08:a9:72:ee:20:db:fe:c8:e7:03:67:7e:5b:7f:db:e2:d8:87: 50:0c:6b:9d:4d:11:d2:1b:7c:01:bf:f5:83:2c:8a:9d:96:79: 85:f4:57:fe:28:61:4b:72:22:5f:f0:73:46:25:6f:8e:4d:25: a9:eb:d2:9c:2c:bc:ff:ae:e2:76:9e:5f:fa:d7:a5:99:55:0b: 94:d7:46:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/71/s+YuFdko0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YTM1NzdlYTctNzgyOS00NWU5LTk2YzUtNjkzYTNkZTIyMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug3ISVA509uoEc7w/6UYoO95gJ8msxTN+9YQ yC+5wksgI+8ERc6m7Q5pllNbnHmHAf4wQSHqJxWECiF7yD+mvCm4S3RogRW3HZdz MNVGymJVDhA85E0FUHMey9QoCQeXKkm803t+9QP4uPGSlNgvsHhrmvkxfOErIkmJ AtKp7QbhDFnz8OU7hJ11gH+RWePW2MlBrRww808ByZi+/5aFlSh7CmCcACDlbcop 2sqmexNgqkxMEp2iCqvOgZS2b7d4M84fO8jW6U1Ibn6j1a4eOM6zEmeYi2ci/c+t 7saYmprUpryT3sDrxiCJcnI4rY83+580lZYiftsijCHSMYaMGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi3VSqiH99JjiKfsl6iwcc6dqLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjFmYjRjMjUtMzI1MC0z OWNhLTlhZjEtMzcwMzZjY2M0MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECF2sVnaXf4FYRzNuQhLwkZE6UullYVgSHPKvXcFMKLbqavCt+c9Hhe Y2BsxXNp3ddod+9ah28Xc+zt3S1IqMDTlNuHs56yVsiocZqejaCT1jicijczQ38w cmGAYrKO4zyxTvlVQLupvZzhCM1/haGstyvyLXA5ep3rjuEIN6SgFqrZdfeD31RL 23BiyF+f4czWEVMS9ya97YIU20ZkILSMa+ey17OKSjR7qQyV4s3Q9CDZSwipcu4g 2/7I5wNnflt/2+LYh1AMa51NEdIbfAG/9YMsip2WeYX0V/4oYUtyIl/wc0Ylb45N Janr0pwsvP+u4naeX/rXpZlVC5TXRvQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:17:35 2025 by rpki-client