$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2904dfc4-18ef-37b7-97eb-a003695be371.roa File: 2904dfc4-18ef-37b7-97eb-a003695be371.roa (raw, json) Hash identifier: vaaO8zMJm9iF2Njol4rD1MKkrRDzGtQ0zAZd88V8uG8= Subject key identifier: 3A:9A:89:32:02:03:CE:EB:36:C7:67:E8:53:70:80:96:77:16:E3:B7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B133F64D77B69B2294B164A08 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2904dfc4-18ef-37b7-97eb-a003695be371.roa Signing time: Wed 03 Sep 2025 19:55:47 +0000 ROA not before: Wed 03 Sep 2025 19:55:47 +0000 ROA not after: Tue 02 Dec 2025 20:55:47 +0000 asID: 19905 IP address blocks: 173.19.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:3f:64:d7:7b:69:b2:29:4b:16:4a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 3 19:55:47 2025 GMT Not After : Dec 2 20:55:47 2025 GMT Subject: CN=9403be16-25bb-4c5e-a480-617558595520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:51:09:b3:5f:e3:20:1e:4f:60:39:e4:99: 88:a0:cd:8a:fa:7b:27:f1:1d:77:c4:4a:92:05:70: 38:32:da:19:71:c3:ce:de:dc:19:b8:27:b3:45:6b: a6:14:ee:b9:5a:05:af:57:d3:d5:13:bc:66:b8:a1: a7:24:ee:ec:a7:5d:16:17:aa:50:5b:92:ea:61:05: 99:ab:24:cf:05:4b:05:aa:cf:1e:c3:c5:e3:14:d9: f2:88:24:02:e2:ab:93:3b:2d:85:9d:37:e7:83:fc: 26:dd:04:b7:2e:93:93:1b:f6:df:99:54:e3:3b:40: c8:9d:76:ff:a3:ef:00:9d:19:3d:d4:68:20:2c:52: fa:de:e6:53:52:71:ce:4c:44:29:83:e8:bd:5e:a2: ba:d9:2d:0d:0d:54:d4:61:f8:8a:7e:1d:8e:ff:94: e7:ef:b5:39:81:d2:50:a8:94:da:51:9f:31:f7:5d: 96:96:23:1a:81:78:e9:2e:96:ff:9b:80:0e:3c:b7: 67:54:1b:e8:e3:da:b3:ae:69:6c:af:fb:06:0f:e6: 6c:ea:a9:bf:b6:00:8a:a1:4f:08:0b:c1:1e:ef:9c: b0:78:27:8f:84:20:2a:98:30:7d:3d:e8:a1:08:dc: f8:0a:8d:1f:70:f1:ea:5c:24:d5:84:09:35:d1:21: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:89:32:02:03:CE:EB:36:C7:67:E8:53:70:80:96:77:16:E3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2904dfc4-18ef-37b7-97eb-a003695be371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e9:7a:94:37:5a:0b:12:5c:7b:1d:1f:a2:c5:db:44:72:28: a0:aa:84:9b:37:34:49:d4:ec:58:73:18:4d:18:2b:08:bb:91: 3b:5c:88:e8:4c:3d:b9:04:16:5d:96:3e:d0:ae:59:ef:61:2c: 19:36:59:01:1e:18:22:56:bf:be:2c:b6:c9:c6:08:04:69:5d: e3:1b:2d:1d:ad:9f:fe:e6:38:dd:95:f3:c4:d4:41:d5:30:d7: b6:5f:99:7e:43:0d:9f:df:44:47:21:e1:cb:e6:a1:14:2f:48: ac:3d:42:52:5d:b4:9c:2c:eb:66:3b:70:04:1f:6b:46:21:3f: 82:fc:cb:fa:92:25:ff:fe:e7:02:5e:f8:6d:ae:2f:cd:1f:eb: 71:f5:21:3d:0d:84:fc:fa:05:5f:8e:09:33:de:6b:b4:61:2c: 04:31:65:ec:bb:64:c9:81:9d:8e:f5:45:2f:0f:f1:a3:e3:39: f3:d7:ba:09:f2:3b:2b:17:7a:af:04:5e:df:fb:79:1d:65:c5: 92:b0:c5:4a:d4:b0:f9:99:e8:c1:ef:67:a7:d6:7c:c9:f7:7b: 9e:f3:32:32:64:06:48:0c:14:19:a8:3d:10:db:3a:da:e4:2b: 34:c6:63:78:a4:a7:06:8e:e9:93:b2:72:2a:72:7d:23:d7:7f: 2c:14:af:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsTP2TXe2myKUsWSggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMzE5NTU0N1oXDTI1MTIwMjIwNTU0N1owLzEtMCsGA1UEAxMk OTQwM2JlMTYtMjViYi00YzVlLWE0ODAtNjE3NTU4NTk1NTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpNRCbNf4yAeT2A55JmIoM2K+nsn8R13xEqS BXA4MtoZccPO3twZuCezRWumFO65WgWvV9PVE7xmuKGnJO7sp10WF6pQW5LqYQWZ qyTPBUsFqs8ew8XjFNnyiCQC4quTOy2FnTfng/wm3QS3LpOTG/bfmVTjO0DInXb/ o+8AnRk91GggLFL63uZTUnHOTEQpg+i9XqK62S0NDVTUYfiKfh2O/5Tn77U5gdJQ qJTaUZ8x912WliMagXjpLpb/m4AOPLdnVBvo49qzrmlsr/sGD+Zs6qm/tgCKoU8I C8Ee75yweCePhCAqmDB9PeihCNz4Co0fcPHqXCTVhAk10SF67wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqaiTICA87rNsdn6FNwgJZ3FuO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjkwNGRmYzQtMThlZi0z N2I3LTk3ZWItYTAwMzY5NWJlMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvpepQ3WgsSXHsdH6LF20RyKKCqhJs3NEnU7FhzGE0YKwi7kTtciOhM PbkEFl2WPtCuWe9hLBk2WQEeGCJWv74stsnGCARpXeMbLR2tn/7mON2V88TUQdUw 17ZfmX5DDZ/fREch4cvmoRQvSKw9QlJdtJws62Y7cAQfa0YhP4L8y/qSJf/+5wJe +G2uL80f63H1IT0NhPz6BV+OCTPea7RhLAQxZey7ZMmBnY71RS8P8aPjOfPXugny OysXeq8EXt/7eR1lxZKwxUrUsPmZ6MHvZ6fWfMn3e57zMjJkBkgMFBmoPRDbOtrk KzTGY3ikpwaO6ZOycipyfSPXfywUr58= -----END CERTIFICATE-----Generated at Sat Sep 6 09:51:34 2025 by rpki-client