$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa File: aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa (raw, json) Hash identifier: ScTNaZEDmqTi5nmrJkGVCFWiEmqja4UTvGWicUMy0fw= Subject key identifier: 06:D3:8C:16:1A:8D:CE:1B:30:D8:A2:C3:C7:BC:0A:E8:1B:75:8D:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AE8911E779C142FFAD7B74F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 30036 IP address blocks: 173.16.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:1e:77:9c:14:2f:fa:d7:b7:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=3ea46278-65f2-4667-b7c3-a982c666e814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:db:0e:df:f9:5e:4d:5c:9a:fd:c3:31:37: 31:2a:64:8d:55:42:6a:05:82:2b:cc:d4:e8:e1:63: f4:82:28:cd:70:62:4e:aa:ef:91:fd:df:93:76:fd: f2:25:1f:29:e4:6b:17:04:38:70:5d:b7:09:61:ca: f4:d8:80:62:ef:e8:62:ae:cd:a5:d2:ce:92:6d:b1: ba:ad:7c:47:59:be:49:7b:5a:d7:24:12:5c:35:00: 31:0f:d0:88:a0:ac:19:37:ac:78:ba:de:12:a0:53: 2e:50:3a:99:4e:97:d3:bc:cc:d8:94:e3:64:cc:b7: 7a:f5:49:60:8d:bc:66:81:01:8b:c1:0d:15:b8:e1: 42:7c:b1:a4:22:8b:c8:55:ae:81:a7:0e:f5:b2:6d: 0d:1e:51:33:f6:c5:0e:f8:c0:9b:29:b8:f9:a1:48: 82:82:58:23:ca:81:29:e1:82:45:30:22:52:8e:1a: a5:2d:dc:40:b9:0c:90:82:c8:f5:fa:47:9e:75:f7: bc:49:4b:49:48:a4:84:54:d8:4a:0e:03:62:5f:66: 61:6c:a5:59:dd:f1:94:41:62:8f:8d:98:64:1d:b5: 6a:e1:6f:57:8a:61:43:79:33:65:44:db:ba:07:b7: c2:3f:80:98:27:08:d3:a7:9a:54:2f:b7:16:13:c6: f0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D3:8C:16:1A:8D:CE:1B:30:D8:A2:C3:C7:BC:0A:E8:1B:75:8D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa8ce59b-5eaf-3c7e-a7eb-f5ed151cf074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ac:55:d7:5a:f8:71:f8:a1:75:2a:9a:25:a7:07:5c:c8:77: b6:8c:63:64:45:61:b1:09:dd:3b:e4:fa:a9:b3:18:b6:3a:7d: 10:c0:c7:68:a9:78:ec:31:e6:96:51:f4:2b:4d:b7:82:4a:bd: 1c:dd:76:20:19:33:05:2f:96:13:36:e4:bb:f1:29:7a:46:79: be:46:e0:db:9d:83:9f:c4:05:87:b1:ff:d9:66:f6:f8:6f:b5: ab:9e:4b:67:89:da:29:47:55:a0:f3:e2:04:b6:06:c2:e4:0e: 3b:d7:38:d6:91:37:6e:52:62:26:0e:c4:98:76:4e:b7:d9:d9: 4a:c6:00:6b:df:24:a9:fb:e9:b2:38:34:e4:bb:f1:73:b6:f1: 95:35:18:40:35:27:03:4e:30:90:95:48:c8:8e:e9:14:04:fd: 4f:08:c9:be:ba:7a:a0:77:4a:26:b7:36:07:c8:57:44:d1:9e: 84:10:71:05:b4:89:3b:62:b2:44:93:38:f2:8a:2f:dd:52:a3: b1:b8:22:8d:72:1a:fe:9b:fc:d8:ac:64:a6:1f:8d:f6:98:a7: c9:91:20:71:b2:55:67:a5:ec:a5:65:cd:a8:75:a5:a6:18:a8: 27:74:73:cf:2e:38:d0:a2:99:c4:19:2c:e3:58:a8:c8:da:87: f7:a1:71:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokR53nBQv+te3TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk M2VhNDYyNzgtNjVmMi00NjY3LWI3YzMtYTk4MmM2NjZlODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAXbDt/5Xk1cmv3DMTcxKmSNVUJqBYIrzNTo 4WP0gijNcGJOqu+R/d+Tdv3yJR8p5GsXBDhwXbcJYcr02IBi7+hirs2l0s6SbbG6 rXxHWb5Je1rXJBJcNQAxD9CIoKwZN6x4ut4SoFMuUDqZTpfTvMzYlONkzLd69Ulg jbxmgQGLwQ0VuOFCfLGkIovIVa6Bpw71sm0NHlEz9sUO+MCbKbj5oUiCglgjyoEp 4YJFMCJSjhqlLdxAuQyQgsj1+keedfe8SUtJSKSEVNhKDgNiX2ZhbKVZ3fGUQWKP jZhkHbVq4W9XimFDeTNlRNu6B7fCP4CYJwjTp5pUL7cWE8bw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbTjBYajc4bMNiiw8e8CugbdY2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWE4Y2U1OWItNWVhZi0z YzdlLWE3ZWItZjVlZDE1MWNmMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAesVdda+HH4oXUqmiWnB1zId7aMY2RFYbEJ3Tvk+qmzGLY6fRDAx2ip eOwx5pZR9CtNt4JKvRzddiAZMwUvlhM25LvxKXpGeb5G4Nudg5/EBYex/9lm9vhv taueS2eJ2ilHVaDz4gS2BsLkDjvXONaRN25SYiYOxJh2TrfZ2UrGAGvfJKn76bI4 NOS78XO28ZU1GEA1JwNOMJCVSMiO6RQE/U8Iyb66eqB3Sia3NgfIV0TRnoQQcQW0 iTtiskSTOPKKL91So7G4Io1yGv6b/NisZKYfjfaYp8mRIHGyVWel7KVlzah1paYY qCd0c88uONCimcQZLONYqMjah/ehcXA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:53:56 2025 by rpki-client