$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa File: f517e84b-69d0-3448-9570-af536e4d8faf.roa (raw, json) Hash identifier: Caa3sDVmUlvE6lHCcC1XwW80Lj7HPo/H6Keq1iYFAhQ= Subject key identifier: AD:65:C5:C1:46:E1:42:54:E0:95:F2:C7:48:20:72:8B:27:08:5C:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584ACB4122D2B6AC8DB6397C1800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.31.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:22:d2:b6:ac:8d:b6:39:7c:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=11a91d01-b893-487f-89d7-4e64dd680d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:a0:aa:c1:af:94:ef:2c:0d:43:ad:bb:e9: 23:14:31:ca:e8:88:0b:1f:c0:33:73:66:44:dc:e9: 7c:35:d4:43:58:bd:02:bd:f0:c2:65:de:87:96:49: b7:a1:62:6e:6d:91:87:95:74:a3:f4:e1:6b:c8:54: 2a:c7:d2:ff:fc:18:bb:93:76:17:5a:cc:7a:03:3f: e1:3b:fb:41:b8:27:c4:0a:a5:37:05:51:15:0c:ba: 8a:af:aa:c6:85:af:61:19:86:a5:b7:09:8f:48:65: 03:1e:f5:d4:6b:ed:93:11:15:b3:03:c6:a9:a5:fc: 10:da:d9:e8:ec:e0:5b:00:67:9f:b2:7b:78:cd:0d: db:ec:ec:05:27:dc:54:74:bf:35:26:03:7b:4f:d6: e4:33:91:f1:4d:23:86:77:e9:fc:59:38:e6:1f:08: 8b:40:6b:5f:d1:0f:68:b9:33:a3:d9:8c:fe:2a:18: 2e:49:9b:c2:be:57:e1:03:46:51:7e:20:3d:81:57: 53:5f:ca:d3:2c:79:33:08:12:ab:48:c6:70:bd:8c: cf:10:e5:27:9c:ff:20:d9:da:54:31:3a:d0:f7:c4: e1:82:1a:6d:c1:30:2c:46:8b:eb:c3:26:2a:ae:3f: 7d:06:3b:f3:2f:52:6c:1f:a8:67:03:31:59:09:c4: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:65:C5:C1:46:E1:42:54:E0:95:F2:C7:48:20:72:8B:27:08:5C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f6:4f:0b:43:e9:d3:ba:77:bf:ef:9b:bd:60:10:8c:a0:aa: 34:da:f8:d5:14:1c:6c:bd:f2:0b:4b:fe:58:c0:26:cd:0a:76: f4:05:40:52:e9:c6:97:77:7d:02:39:e2:16:19:6d:b6:32:cf: f6:69:17:45:e2:3f:1a:cb:c5:2c:8f:29:1f:06:01:b7:5f:6c: 93:e3:4d:13:44:35:ff:04:4d:fc:6c:12:22:a3:8a:28:91:6c: c7:cd:44:0d:91:d7:78:95:87:31:4c:7c:81:ff:36:83:8d:68: 38:2f:e1:cc:b7:69:84:46:a3:c7:bf:0f:f4:a3:6e:5c:fc:f1: d5:92:e3:03:20:de:f4:57:7e:81:c6:69:72:c2:2e:87:35:71: 56:f3:79:6f:9b:5a:78:0e:5b:5b:51:cd:98:26:d9:43:cb:de: e1:3f:08:2d:f9:5c:6b:63:83:84:5c:ea:d9:6f:81:9b:87:35: dd:ae:a1:a1:9e:17:9b:3d:ec:4f:2f:de:b1:09:d8:02:03:6b: 31:2f:ba:7b:2e:82:e4:50:ca:f9:28:ee:78:87:69:20:46:bc: 91:5a:f6:fa:f0:b6:28:bd:72:b3:b0:1f:63:91:06:23:eb:3b: 17:21:01:b1:11:5a:66:f4:5b:8d:04:c8:e7:2e:c0:c4:db:8e: 2d:c5:94:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQSLStqyNtjl8GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTFhOTFkMDEtYjg5My00ODdmLTg5ZDctNGU2NGRkNjgwZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4ugqsGvlO8sDUOtu+kjFDHK6IgLH8Azc2ZE 3Ol8NdRDWL0CvfDCZd6Hlkm3oWJubZGHlXSj9OFryFQqx9L//Bi7k3YXWsx6Az/h O/tBuCfECqU3BVEVDLqKr6rGha9hGYaltwmPSGUDHvXUa+2TERWzA8appfwQ2tno 7OBbAGefsnt4zQ3b7OwFJ9xUdL81JgN7T9bkM5HxTSOGd+n8WTjmHwiLQGtf0Q9o uTOj2Yz+KhguSZvCvlfhA0ZRfiA9gVdTX8rTLHkzCBKrSMZwvYzPEOUnnP8g2dpU MTrQ98ThghptwTAsRovrwyYqrj99BjvzL1JsH6hnAzFZCcQmZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1lxcFG4UJU4JXyx0ggcosnCFwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjUxN2U4NGItNjlkMC0z NDQ4LTk1NzAtYWY1MzZlNGQ4ZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf2TwtD6dO6d7/vm71gEIygqjTa+NUUHGy98gtL/ljAJs0KdvQFQFLp xpd3fQI54hYZbbYyz/ZpF0XiPxrLxSyPKR8GAbdfbJPjTRNENf8ETfxsEiKjiiiR bMfNRA2R13iVhzFMfIH/NoONaDgv4cy3aYRGo8e/D/Sjblz88dWS4wMg3vRXfoHG aXLCLoc1cVbzeW+bWngOW1tRzZgm2UPL3uE/CC35XGtjg4Rc6tlvgZuHNd2uoaGe F5s97E8v3rEJ2AIDazEvunsuguRQyvko7niHaSBGvJFa9vrwtii9crOwH2ORBiPr OxchAbERWmb0W40EyOcuwMTbji3FlJQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:09 2025 by rpki-client