$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc63b618-6fbd-38ec-a86d-97743f08293a.roa File: fc63b618-6fbd-38ec-a86d-97743f08293a.roa (raw, json) Hash identifier: TUtWhYlI3SU10+DvX7iEJ/5EsFShDsfGqVCJabfh0v0= Subject key identifier: CA:39:A2:70:E4:22:E8:87:46:97:33:13:19:59:11:31:C1:15:23:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584ACCA6918F764A350C080260E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc63b618-6fbd-38ec-a86d-97743f08293a.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 30036 IP address blocks: 173.31.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:91:8f:76:4a:35:0c:08:02:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=132d0e41-d0d2-4b36-a499-b26934059b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:c5:aa:e9:73:8b:5e:46:fc:91:e2:30:ca: 11:34:32:1a:39:d1:3b:9f:3f:86:6d:7a:3c:54:b6: 23:47:eb:4c:91:d5:32:c3:c7:34:46:7f:95:52:26: 9d:61:6d:77:f4:f6:e1:a6:cd:f6:92:bd:0b:af:c5: 78:96:f8:df:a8:ef:22:e9:63:e9:f5:94:5a:fa:34: dd:ed:48:27:ce:10:ff:55:17:a4:b3:0a:54:4b:70: af:e6:c4:cc:67:f0:e9:0b:53:e7:eb:2d:8a:80:9f: 32:33:32:da:48:a5:ae:04:c3:c7:49:20:ec:2d:9d: 38:b3:a1:a3:f9:e7:3b:f9:94:5d:9d:6a:a2:d3:28: 17:a3:30:da:42:88:38:f2:6a:ee:50:0b:f0:0c:46: d4:0e:05:f8:3f:ae:ca:75:08:20:a7:7b:a7:45:96: b6:ac:70:ef:10:44:1d:22:0f:27:14:65:e8:27:c7: 20:58:b2:9b:44:d5:b6:38:8e:f3:2a:bf:e9:6f:00: 9b:18:70:90:05:97:68:5f:97:1f:81:78:d5:e2:3e: 45:7b:07:57:c2:34:ca:1b:e7:85:85:7b:64:28:35: 6c:d0:90:eb:59:e9:6a:0d:91:56:47:f7:35:c4:3f: 03:80:41:09:93:72:83:6e:c7:91:8f:45:ff:73:2a: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:39:A2:70:E4:22:E8:87:46:97:33:13:19:59:11:31:C1:15:23:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc63b618-6fbd-38ec-a86d-97743f08293a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fd:39:85:68:14:70:c7:45:80:5c:db:67:99:f8:bd:e7:a9: 11:5b:5e:35:dc:48:f4:56:bc:52:d3:92:59:43:b0:c2:42:3e: 29:64:7f:e0:9a:47:18:1f:20:8a:d8:6e:f6:75:49:d3:b8:63: bb:72:0c:95:e0:32:26:77:54:60:2d:ee:19:ed:30:8f:a0:fe: 7f:0f:12:df:68:61:83:85:5f:77:5c:8f:24:d1:9f:b9:9a:02: ec:b5:84:47:8f:d0:b4:87:59:b4:72:32:55:81:ed:12:2d:28: cf:2f:03:2a:29:aa:f9:a8:47:cd:87:d6:89:60:66:29:05:71: c7:6f:ff:6b:f8:8b:73:4f:e6:a6:65:6c:6c:59:fb:f7:da:c1: 29:bc:34:c4:b5:16:5d:07:57:e7:30:fb:6b:ee:82:bd:3a:c9: 38:39:59:c5:f4:42:79:a4:14:bb:f4:30:27:12:40:0f:62:ea: 26:38:b7:51:73:10:81:86:30:da:f7:a3:ae:d6:e9:ec:57:93: fd:9b:93:e0:33:d4:4f:14:60:f1:b6:5c:bf:a1:bc:ab:cb:c3: b8:09:34:a2:5d:c6:1e:06:50:55:43:5a:60:2d:e8:77:b4:48: 64:a9:6c:4f:49:ac:07:be:3b:99:fb:f7:26:5c:8e:c9:f3:4a: 09:03:e0:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMppGPdko1DAgCYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTMyZDBlNDEtZDBkMi00YjM2LWE0OTktYjI2OTM0MDU5YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQvFqulzi15G/JHiMMoRNDIaOdE7nz+GbXo8 VLYjR+tMkdUyw8c0Rn+VUiadYW139Pbhps32kr0Lr8V4lvjfqO8i6WPp9ZRa+jTd 7UgnzhD/VRekswpUS3Cv5sTMZ/DpC1Pn6y2KgJ8yMzLaSKWuBMPHSSDsLZ04s6Gj +ec7+ZRdnWqi0ygXozDaQog48mruUAvwDEbUDgX4P67KdQggp3unRZa2rHDvEEQd Ig8nFGXoJ8cgWLKbRNW2OI7zKr/pbwCbGHCQBZdoX5cfgXjV4j5FewdXwjTKG+eF hXtkKDVs0JDrWelqDZFWR/c1xD8DgEEJk3KDbseRj0X/cyowFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo5onDkIuiHRpczExlZETHBFSM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmM2M2I2MTgtNmZiZC0z OGVjLWE4NmQtOTc3NDNmMDgyOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf9OYVoFHDHRYBc22eZ+L3nqRFbXjXcSPRWvFLTkllDsMJCPilkf+Ca RxgfIIrYbvZ1SdO4Y7tyDJXgMiZ3VGAt7hntMI+g/n8PEt9oYYOFX3dcjyTRn7ma Auy1hEeP0LSHWbRyMlWB7RItKM8vAyopqvmoR82H1olgZikFccdv/2v4i3NP5qZl bGxZ+/fawSm8NMS1Fl0HV+cw+2vugr06yTg5WcX0QnmkFLv0MCcSQA9i6iY4t1Fz EIGGMNr3o67W6exXk/2bk+Az1E8UYPG2XL+hvKvLw7gJNKJdxh4GUFVDWmAt6He0 SGSpbE9JrAe+O5n79yZcjsnzSgkD4Hk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:26 2025 by rpki-client