$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddc440b0-a80c-3f77-84d5-3d1bb29b6b27.roa File: ddc440b0-a80c-3f77-84d5-3d1bb29b6b27.roa (raw, json) Hash identifier: MX1SFVCKsLp49or706zirI1FDXWC0amc48sueBl8Acs= Subject key identifier: C8:7D:85:28:45:A1:10:88:EF:55:BA:7E:85:F1:51:DD:13:72:15:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AE1971CE61598B61A70CF8CF0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddc440b0-a80c-3f77-84d5-3d1bb29b6b27.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 173.16.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:1c:e6:15:98:b6:1a:70:cf:8c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=aa9429ef-069c-46bb-ae6f-430f1d78ece2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2d:c6:35:f4:92:ce:8b:6e:10:52:4c:5b:64: 0e:79:b4:5e:ee:23:32:9f:f4:4d:0a:10:f2:01:1d: 0d:a8:03:4c:3c:7f:2a:59:78:47:66:13:7a:21:36: 06:89:14:a7:f3:0a:eb:1f:52:73:43:d2:bf:d2:dd: 30:53:4e:db:c3:e4:c3:79:26:ea:14:39:6b:e8:5a: 37:09:64:3d:0e:8e:6c:41:0b:e7:23:89:f4:0c:54: 9e:a8:d7:2b:dc:03:11:73:8c:82:49:54:b6:26:7f: 92:f1:35:ee:56:9a:7c:99:42:bd:c2:ad:b4:33:81: 92:9f:25:4f:e6:4c:5d:4a:f2:49:aa:3c:4d:49:4f: 68:94:64:6c:ca:26:f1:42:94:f8:73:76:fc:50:b3: c0:6a:e3:42:94:c8:b8:2b:3a:4e:4c:9c:1f:e0:7e: d3:19:b5:6e:ec:76:26:ad:55:e6:d1:a4:e3:16:d2: ba:87:e8:e1:25:79:4c:72:d8:d0:67:d7:c5:0a:23: 6d:1b:90:54:0f:61:5d:27:af:98:c9:e1:ac:25:f9: eb:56:49:8b:89:f0:18:da:08:ae:64:7c:60:2f:77: 3f:fe:66:ef:34:96:e2:cb:70:c2:e3:e1:a6:e8:47: d1:f1:ae:cf:65:35:bc:cf:e5:0f:39:47:53:8a:75: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7D:85:28:45:A1:10:88:EF:55:BA:7E:85:F1:51:DD:13:72:15:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddc440b0-a80c-3f77-84d5-3d1bb29b6b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:cd:af:82:8c:5d:85:7b:06:ed:b5:d9:95:b7:a9:ee:ed:29: d9:11:8a:7e:5e:56:6f:b9:3e:92:01:e2:fe:6d:2e:b8:e2:cf: c9:2f:35:e1:5d:11:69:6c:6d:55:90:02:b6:67:2d:82:c1:a5: a5:3c:e2:c1:71:52:26:35:57:0a:ce:ab:61:8b:8a:1f:82:ef: 09:4e:40:dc:dd:20:e9:d4:8d:81:85:2f:a6:77:71:c6:fe:d0: fe:81:ea:8d:f6:0f:92:78:6c:0e:49:e5:a0:5d:5a:b5:b5:55: 50:2c:65:82:49:f3:cc:9d:5f:46:89:b5:92:9c:75:f9:eb:50: c2:a2:d8:db:95:e3:c5:28:ac:2f:ae:12:3d:94:14:7e:84:2f: ce:2b:d6:cf:ff:c2:cc:82:36:49:3c:6b:fb:f1:c7:09:50:07: 96:92:13:4d:e6:9e:7e:63:c6:47:76:48:10:ed:e2:75:2c:ea: a1:a6:68:e3:12:e8:4d:55:52:a9:88:43:b7:77:15:fa:d8:68: 77:ab:e3:ee:c4:73:91:d0:14:2a:f9:72:f7:50:3d:57:b1:9c: dc:4b:52:a4:11:6f:8c:e1:29:35:a0:62:dc:47:5e:f0:70:95: 7b:34:ba:0e:1c:a6:71:b5:c9:ae:84:c1:ab:81:26:51:2c:9f: a5:1f:8b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlxzmFZi2GnDPjPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YWE5NDI5ZWYtMDY5Yy00NmJiLWFlNmYtNDMwZjFkNzhlY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS3GNfSSzotuEFJMW2QOebRe7iMyn/RNChDy AR0NqANMPH8qWXhHZhN6ITYGiRSn8wrrH1JzQ9K/0t0wU07bw+TDeSbqFDlr6Fo3 CWQ9Do5sQQvnI4n0DFSeqNcr3AMRc4yCSVS2Jn+S8TXuVpp8mUK9wq20M4GSnyVP 5kxdSvJJqjxNSU9olGRsyibxQpT4c3b8ULPAauNClMi4KzpOTJwf4H7TGbVu7HYm rVXm0aTjFtK6h+jhJXlMctjQZ9fFCiNtG5BUD2FdJ6+YyeGsJfnrVkmLifAY2giu ZHxgL3c//mbvNJbiy3DC4+Gm6EfR8a7PZTW8z+UPOUdTinULCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMh9hShFoRCI71W6foXxUd0TchUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGRjNDQwYjAtYTgwYy0z Zjc3LTg0ZDUtM2QxYmIyOWI2YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7Nr4KMXYV7Bu212ZW3qe7tKdkRin5eVm+5PpIB4v5tLrjiz8kvNeFd EWlsbVWQArZnLYLBpaU84sFxUiY1VwrOq2GLih+C7wlOQNzdIOnUjYGFL6Z3ccb+ 0P6B6o32D5J4bA5J5aBdWrW1VVAsZYJJ88ydX0aJtZKcdfnrUMKi2NuV48UorC+u Ej2UFH6EL84r1s//wsyCNkk8a/vxxwlQB5aSE03mnn5jxkd2SBDt4nUs6qGmaOMS 6E1VUqmIQ7d3FfrYaHer4+7Ec5HQFCr5cvdQPVexnNxLUqQRb4zhKTWgYtxHXvBw lXs0ug4cpnG1ya6EwauBJlEsn6Ufizk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:37:20 2025 by rpki-client