$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a348e743-a8c4-3a76-8367-48b174bb59e9.roa File: a348e743-a8c4-3a76-8367-48b174bb59e9.roa (raw, json) Hash identifier: axk9Y/uEho54fELPiALHj/BUC9NEfTftzpsMPaY0r2s= Subject key identifier: 42:6E:49:F2:3A:45:6B:84:19:8E:3E:D5:83:DF:10:C8:3D:0F:17:9C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A4C3B02FE84C9C93999B0C8C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a348e743-a8c4-3a76-8367-48b174bb59e9.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.18.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:02:fe:84:c9:c9:39:99:b0:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=31d3798a-e1ef-497a-8361-6c1267ab845f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6e:65:75:97:e9:ed:33:f4:4b:90:b9:52:bd: e8:4a:cf:30:e4:b4:54:3a:f4:bd:66:4c:95:82:7d: d6:2d:5f:a5:17:b6:05:d2:3a:ca:cf:99:aa:f3:8c: 31:63:62:dc:ba:ac:7b:c1:db:56:23:40:8c:0c:5c: 21:19:5d:69:b2:54:a4:61:af:4e:4e:7e:83:fd:7f: 69:7c:db:d5:7a:5d:ac:a9:20:96:3f:60:51:c2:78: d1:62:ae:ef:0c:8c:ec:a7:e3:31:d6:2e:2f:18:57: 3a:25:42:ec:96:e5:6e:b9:41:dc:50:ed:a2:dc:c7: 04:60:77:87:b2:6d:5c:b1:9e:e4:4e:4a:db:26:2d: 48:f5:3a:7c:50:db:63:7e:a4:45:fd:05:0b:ac:70: da:27:08:2c:8d:cb:14:3a:68:81:48:4b:bc:88:b7: d3:48:6b:6d:08:14:91:e5:d3:e0:82:f4:70:34:3d: 74:c6:16:cc:9a:14:2a:7b:a0:8f:88:2d:55:d9:88: 62:f4:9f:18:c6:48:b7:6f:b8:c6:c1:68:24:61:e2: 9d:b3:50:cd:35:12:57:49:28:c6:4d:87:2e:4e:43: 65:e0:44:fc:b6:aa:cb:5d:dd:53:eb:5c:c1:e5:ca: 8e:c3:c2:e2:7e:bf:f7:23:94:6b:2c:62:29:93:ec: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:49:F2:3A:45:6B:84:19:8E:3E:D5:83:DF:10:C8:3D:0F:17:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a348e743-a8c4-3a76-8367-48b174bb59e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6b:e8:ea:b3:70:0f:26:95:1b:90:7d:ed:f1:78:bf:a8:03: e8:84:95:ba:35:7d:05:95:c7:22:25:8e:f3:c9:cd:19:f6:f1: 2d:8f:5b:17:6b:0f:c4:c6:ce:ad:fc:40:df:f2:56:dc:d0:0a: e0:96:ec:b7:75:8a:67:08:29:e2:72:bc:01:ca:2a:85:97:8a: 84:f7:8c:cc:fc:4c:80:fc:1b:02:89:60:36:f2:49:56:46:66: a1:c0:7b:a7:b7:cb:96:fb:ec:42:57:c1:58:56:22:ae:35:11: 33:5f:32:8c:a8:2c:89:1d:52:12:35:50:ca:88:d6:e6:34:f6: e6:b8:75:00:c1:83:67:5f:12:0a:f3:24:f7:26:1b:bc:a4:1c: 81:b6:4b:3a:15:c8:67:0c:dc:7b:03:7c:fd:9e:23:87:79:96: 20:a0:d6:73:02:3d:e1:86:fe:c5:75:55:1a:c7:32:38:8a:3c: fe:13:a4:88:82:6c:68:0a:69:c2:a1:71:fa:17:33:90:3d:13: 95:27:64:1c:48:5f:62:55:72:50:8a:d6:dd:94:36:bd:23:ae: a5:f9:19:d6:79:aa:ea:f5:f9:f5:29:1b:b5:9c:b4:dd:31:45: fb:2c:f6:15:79:44:92:37:82:4c:79:83:98:66:26:c9:62:dc: eb:f8:90:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwL+hMnJOZmwyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MzFkMzc5OGEtZTFlZi00OTdhLTgzNjEtNmMxMjY3YWI4NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim5ldZfp7TP0S5C5Ur3oSs8w5LRUOvS9ZkyV gn3WLV+lF7YF0jrKz5mq84wxY2Lcuqx7wdtWI0CMDFwhGV1pslSkYa9OTn6D/X9p fNvVel2sqSCWP2BRwnjRYq7vDIzsp+Mx1i4vGFc6JULsluVuuUHcUO2i3McEYHeH sm1csZ7kTkrbJi1I9Tp8UNtjfqRF/QULrHDaJwgsjcsUOmiBSEu8iLfTSGttCBSR 5dPggvRwND10xhbMmhQqe6CPiC1V2Yhi9J8Yxki3b7jGwWgkYeKds1DNNRJXSSjG TYcuTkNl4ET8tqrLXd1T61zB5cqOw8Lifr/3I5RrLGIpk+wDQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJuSfI6RWuEGY4+1YPfEMg9DxecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTM0OGU3NDMtYThjNC0z YTc2LTgzNjctNDhiMTc0YmI1OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJr6OqzcA8mlRuQfe3xeL+oA+iElbo1fQWVxyIljvPJzRn28S2PWxdr D8TGzq38QN/yVtzQCuCW7Ld1imcIKeJyvAHKKoWXioT3jMz8TID8GwKJYDbySVZG ZqHAe6e3y5b77EJXwVhWIq41ETNfMoyoLIkdUhI1UMqI1uY09ua4dQDBg2dfEgrz JPcmG7ykHIG2SzoVyGcM3HsDfP2eI4d5liCg1nMCPeGG/sV1VRrHMjiKPP4TpIiC bGgKacKhcfoXM5A9E5UnZBxIX2JVclCK1t2UNr0jrqX5GdZ5qur1+fUpG7WctN0x Rfss9hV5RJI3gkx5g5hmJsli3Ov4kOM= -----END CERTIFICATE-----Generated at Sun Jun 29 10:39:30 2025 by rpki-client