$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0dd1ba9f-7c4b-31e2-8ae7-10b889cc0d3b.roa File: 0dd1ba9f-7c4b-31e2-8ae7-10b889cc0d3b.roa (raw, json) Hash identifier: 3Hgvz8AY/oMILsDvbvv0DyIaezOcvm+yc0VuLNi2eKw= Subject key identifier: 00:87:F8:04:30:E5:2B:64:47:02:BC:C1:A2:6D:FF:76:28:D8:0D:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A71EB27796F073F3574E80400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0dd1ba9f-7c4b-31e2-8ae7-10b889cc0d3b.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 30036 IP address blocks: 173.25.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:27:79:6f:07:3f:35:74:e8:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=d5643102-072a-4e96-b713-9c42882a1486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:dd:41:85:6e:01:60:93:15:86:68:62:3d: 7d:b2:68:98:2c:ab:e3:1e:a7:8f:e3:46:30:b9:a7: f4:65:da:c0:0e:4f:b8:8f:96:b2:1d:90:f5:4e:c2: 49:3b:0f:76:f6:86:de:df:33:35:cd:f1:76:8a:a9: a3:cc:2c:b9:b0:82:ba:60:86:b0:d5:96:66:60:a9: fc:88:92:4f:7c:45:b5:07:00:b3:46:20:6f:41:6c: df:b9:05:ec:b6:7d:b0:31:a0:b6:fc:2b:65:12:47: 25:59:15:94:c6:fd:ea:a5:45:b4:a6:27:ff:a0:73: bc:f0:ad:8d:e5:1a:1e:7c:88:df:b1:34:17:33:91: 08:6b:3e:0f:4a:d7:f7:a2:b6:c1:ff:93:d1:b8:25: b4:dc:5f:3d:0e:a5:22:35:3a:86:3f:98:ab:cd:da: f9:c8:76:ee:5d:90:8c:12:af:db:e6:c5:da:dc:13: 97:6c:5a:ea:7c:70:dd:da:a5:4f:51:e9:59:7b:1c: ab:73:8b:05:88:c8:77:87:80:a8:2c:cf:f3:47:9a: 78:51:69:3c:df:2d:8d:79:0f:23:02:95:6a:6a:d8: a7:2a:56:36:c8:d4:6e:91:c4:06:76:60:21:50:2a: 34:2a:d6:09:34:4f:29:0f:7c:40:b1:74:86:12:63: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:87:F8:04:30:E5:2B:64:47:02:BC:C1:A2:6D:FF:76:28:D8:0D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0dd1ba9f-7c4b-31e2-8ae7-10b889cc0d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7c:39:39:93:b5:f9:0b:8c:ad:c5:fb:f3:ef:9d:8c:80:39: b7:8f:dd:0a:dc:43:7d:48:33:4b:88:13:f5:53:0e:17:20:59: 4e:1d:9c:98:d2:0f:d8:ff:70:1b:11:96:d1:5a:65:dd:f4:2e: 9d:7d:3e:a2:00:19:48:6c:ed:95:61:ad:d3:1b:ab:11:44:80: 07:7a:7d:8e:a8:1e:cd:3b:28:c2:5f:c7:c5:1e:8b:43:70:20: 52:b0:76:0c:41:87:96:ed:83:c8:20:65:fa:40:fc:94:51:92: ae:04:7b:f2:f0:79:38:b9:d7:dc:1c:22:61:1e:41:f8:96:c8: 71:8c:6d:6e:6d:53:42:81:aa:78:b2:dd:1d:ad:0e:e6:c4:30: ed:37:e8:16:dd:fa:72:b6:8d:d3:b2:15:8f:f3:96:77:0d:7c: 44:47:82:54:c0:0f:34:3c:86:6e:91:84:d6:05:57:c2:d7:95: ac:d6:40:8e:f8:c3:37:4e:67:c9:ad:73:e6:31:88:44:a0:05: bf:1d:6d:07:45:ff:88:a7:c9:41:07:a1:83:47:76:f5:f0:6b: 43:a4:c4:b3:2c:55:cb:18:a1:7f:1e:3a:fa:45:f5:3d:a7:9d: 25:b2:64:30:27:e7:5e:e7:2e:3d:63:03:f4:23:15:7c:99:1c: 4f:86:6c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6yd5bwc/NXToBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZDU2NDMxMDItMDcyYS00ZTk2LWI3MTMtOWM0Mjg4MmExNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmejdQYVuAWCTFYZoYj19smiYLKvjHqeP40Yw uaf0ZdrADk+4j5ayHZD1TsJJOw929obe3zM1zfF2iqmjzCy5sIK6YIaw1ZZmYKn8 iJJPfEW1BwCzRiBvQWzfuQXstn2wMaC2/CtlEkclWRWUxv3qpUW0pif/oHO88K2N 5RoefIjfsTQXM5EIaz4PStf3orbB/5PRuCW03F89DqUiNTqGP5irzdr5yHbuXZCM Eq/b5sXa3BOXbFrqfHDd2qVPUelZexyrc4sFiMh3h4CoLM/zR5p4UWk83y2NeQ8j ApVqatinKlY2yNRukcQGdmAhUCo0KtYJNE8pD3xAsXSGEmPQ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACH+AQw5StkRwK8waJt/3Yo2A20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGRkMWJhOWYtN2M0Yi0z MWUyLThhZTctMTBiODg5Y2MwZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd8OTmTtfkLjK3F+/PvnYyAObeP3QrcQ31IM0uIE/VTDhcgWU4dnJjS D9j/cBsRltFaZd30Lp19PqIAGUhs7ZVhrdMbqxFEgAd6fY6oHs07KMJfx8Uei0Nw IFKwdgxBh5btg8ggZfpA/JRRkq4Ee/LweTi519wcImEeQfiWyHGMbW5tU0KBqniy 3R2tDubEMO036Bbd+nK2jdOyFY/zlncNfERHglTADzQ8hm6RhNYFV8LXlazWQI74 wzdOZ8mtc+YxiESgBb8dbQdF/4inyUEHoYNHdvXwa0OkxLMsVcsYoX8eOvpF9T2n nSWyZDAn517nLj1jA/QjFXyZHE+GbDg= -----END CERTIFICATE-----Generated at Thu Jul 10 01:22:59 2025 by rpki-client