$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c65670-5157-36c1-92bd-79bac3e6cc0c.roa File: a2c65670-5157-36c1-92bd-79bac3e6cc0c.roa (raw, json) Hash identifier: 4Pzamfeyh3pxCTfvdG7Wqv2j8U4EgC4a5ycE3NTqhBg= Subject key identifier: 3E:AB:03:C1:76:45:49:8A:30:3E:D1:7F:09:7D:57:6B:FC:A6:F0:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2D7CEDF51C20B6ECD900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c65670-5157-36c1-92bd-79bac3e6cc0c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2d:7c:ed:f5:1c:20:b6:ec:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a04db15b-f12a-4dc1-901b-a5efcce72577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:ed:fe:33:fb:05:df:63:da:90:67:44:c1: 1d:f6:e6:92:10:e6:75:53:7d:36:32:eb:60:a8:71: 2b:7d:5f:1b:2d:45:09:db:86:b8:01:fb:62:e9:44: 64:c0:63:4c:55:05:bd:aa:72:a8:c8:d6:b9:19:6f: be:c5:65:a1:90:90:4b:b1:7a:2d:a8:b2:6e:81:63: 0f:99:2f:89:d6:09:d2:35:12:99:de:29:0a:60:ba: 14:99:7f:60:fb:c6:5d:76:48:24:a0:df:d9:b7:c8: 6b:b0:09:34:e4:0b:72:44:7b:ae:ae:2e:18:e3:d7: ab:ef:9d:91:ed:1a:25:92:e5:6e:d5:da:11:3b:ab: 65:84:3f:b9:f1:b4:22:9a:4b:26:8d:09:b9:27:42: 95:fd:48:cd:86:c6:35:1a:c6:9b:c8:f0:ab:cb:ed: 2f:a7:d8:ef:0b:45:f3:69:49:16:69:1a:64:3b:50: 27:4e:e8:34:87:33:57:2e:ff:74:54:4d:b9:4c:e5: f9:8b:af:f3:c4:10:29:74:8b:c9:37:f4:51:2d:6c: 24:55:0d:91:3a:b0:58:c9:80:e1:18:b0:46:2b:2d: f3:77:fb:05:22:59:18:d8:f7:5a:61:b4:66:70:13: c6:ce:ff:41:c2:e5:a0:c3:c1:0a:d8:a9:bc:1f:21: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AB:03:C1:76:45:49:8A:30:3E:D1:7F:09:7D:57:6B:FC:A6:F0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2c65670-5157-36c1-92bd-79bac3e6cc0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8c:e5:59:49:86:17:8b:cf:9f:f3:2a:39:29:92:11:77:26: 64:d6:31:ae:73:05:0a:bf:21:94:22:07:a7:90:dd:56:dd:08: c4:14:e6:17:26:4a:93:7a:48:3c:1e:b3:a7:bf:f8:0a:dd:d4: 38:ed:9b:c4:f7:c5:1c:de:d4:6c:67:24:d5:4a:cb:f5:0c:5d: ab:98:fd:4e:93:fb:06:41:a8:af:50:9e:9c:3e:29:a5:7a:59: 4f:a3:be:70:6a:21:0b:9b:63:02:68:73:14:9b:88:c8:c0:4b: f0:1a:27:87:9d:e6:71:91:da:cc:d4:2b:50:72:12:ea:c8:7c: 92:d2:a2:dd:4c:3a:88:9d:35:94:91:69:05:10:d4:fc:a1:4e: 5d:d2:4e:da:36:7b:38:58:ea:af:a4:04:72:de:39:a9:25:02: 2e:ad:2e:8b:e5:b8:de:a3:30:90:e7:e4:09:d7:4a:7c:20:ee: ca:16:78:93:dd:e2:6c:ef:39:a6:8c:3b:34:f5:9f:2c:06:45: 22:8b:8e:06:32:ca:4c:a1:a9:2b:c1:0e:ff:94:d3:84:54:b3: 7f:7d:97:e3:e4:1c:4d:4e:0b:ba:4c:f7:bf:a1:71:92:5e:23: af:65:c6:48:92:d8:7b:2b:40:dd:fe:b1:93:5c:8d:31:c5:52: a2:e6:ee:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui187fUcILbs2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTA0ZGIxNWItZjEyYS00ZGMxLTkwMWItYTVlZmNjZTcyNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVTt/jP7Bd9j2pBnRMEd9uaSEOZ1U302Mutg qHErfV8bLUUJ24a4Afti6URkwGNMVQW9qnKoyNa5GW++xWWhkJBLsXotqLJugWMP mS+J1gnSNRKZ3ikKYLoUmX9g+8ZddkgkoN/Zt8hrsAk05AtyRHuuri4Y49er752R 7RolkuVu1doRO6tlhD+58bQimksmjQm5J0KV/UjNhsY1GsabyPCry+0vp9jvC0Xz aUkWaRpkO1AnTug0hzNXLv90VE25TOX5i6/zxBApdIvJN/RRLWwkVQ2ROrBYyYDh GLBGKy3zd/sFIlkY2PdaYbRmcBPGzv9BwuWgw8EK2Km8HyEegwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6rA8F2RUmKMD7Rfwl9V2v8pvCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTJjNjU2NzAtNTE1Ny0z NmMxLTkyYmQtNzliYWMzZTZjYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOM5VlJhheLz5/zKjkpkhF3JmTWMa5zBQq/IZQiB6eQ3VbdCMQU5hcm SpN6SDwes6e/+Ard1Djtm8T3xRze1GxnJNVKy/UMXauY/U6T+wZBqK9Qnpw+KaV6 WU+jvnBqIQubYwJocxSbiMjAS/AaJ4ed5nGR2szUK1ByEurIfJLSot1MOoidNZSR aQUQ1PyhTl3STto2ezhY6q+kBHLeOaklAi6tLovluN6jMJDn5AnXSnwg7soWeJPd 4mzvOaaMOzT1nywGRSKLjgYyykyhqSvBDv+U04RUs399l+PkHE1OC7pM97+hcZJe I69lxkiS2HsrQN3+sZNcjTHFUqLm7j0= -----END CERTIFICATE-----Generated at Mon Jun 30 04:43:43 2025 by rpki-client