$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4307e788-aff7-34c6-b3ab-058fbd98151d.roa File: 4307e788-aff7-34c6-b3ab-058fbd98151d.roa (raw, json) Hash identifier: T4Nh4nN8v5Q46rufU0+MuKScRrMRz3dVa0THyIS39Rk= Subject key identifier: 5D:7A:2A:49:02:37:96:5F:87:71:52:33:F8:70:9B:42:76:F2:37:6A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AF95142053C67E3FE105A4E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4307e788-aff7-34c6-b3ab-058fbd98151d.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 30036 IP address blocks: 173.19.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:42:05:3c:67:e3:fe:10:5a:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=24195cea-4cbf-49d0-b67b-0b730bb3ec1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:de:5d:00:b3:50:6d:ef:f8:2b:5c:c2:80: 02:49:11:d6:54:fa:e9:a6:e8:80:90:b6:01:c9:d0: 8b:af:12:87:a7:31:03:a3:92:ea:17:f2:fc:7b:c5: 50:7d:de:2e:78:60:fa:8d:0b:3a:8f:90:e5:97:71: 4b:d6:b6:2a:d6:57:96:3f:bc:21:74:9b:30:d4:18: a5:63:ba:23:4e:aa:6f:4a:23:ac:3b:78:5f:4b:f5: 26:46:e7:0d:4d:bc:10:f5:44:cd:72:c6:25:cb:44: a7:6c:df:95:0a:cc:73:ac:80:4c:78:e7:8c:57:f6: 91:dd:66:ec:36:42:ee:62:77:d7:b5:ef:1b:74:ca: 07:21:d3:de:7f:f8:74:86:f3:64:94:21:e1:c4:c4: 7c:0d:26:fd:63:e7:db:bb:4e:d5:48:a8:1b:0a:15: e0:ef:94:59:46:e0:91:b3:7e:dc:a9:f4:11:7b:14: 6a:0f:6d:d3:59:bd:91:53:80:ac:dc:fb:be:8b:8c: 4d:67:2a:8b:2d:fe:8b:5b:d3:4d:19:c4:56:c4:f2: 86:42:d5:0b:38:ee:7c:c9:d6:2e:f9:ba:dd:b1:72: 23:1b:f4:cd:67:69:c0:17:17:04:15:b0:fb:d7:86: 16:f9:2f:da:a7:8f:82:28:35:97:ee:93:db:77:28: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7A:2A:49:02:37:96:5F:87:71:52:33:F8:70:9B:42:76:F2:37:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4307e788-aff7-34c6-b3ab-058fbd98151d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1e:36:10:32:35:49:83:fd:77:7a:2f:36:a1:ea:6a:29:9d: 7a:84:76:e6:57:ea:6e:46:b4:58:28:fc:a0:a5:a5:9f:eb:da: 3c:a3:be:d4:60:b1:86:41:26:29:d2:7d:c8:43:ee:e9:f7:81: 6e:7f:c7:a4:9c:89:3e:cc:e8:e8:84:4b:ee:cb:ba:d0:6c:0f: ed:8f:aa:47:36:56:65:60:c7:3f:c3:9d:b2:c0:c8:40:2c:16: 71:94:73:b8:43:f3:14:9d:b3:7d:30:82:a2:fc:2b:08:75:c5: d6:9a:66:85:14:a1:57:19:27:7c:86:e1:ac:74:17:62:25:5d: c8:91:7e:07:53:ac:15:6e:c9:00:58:74:d6:90:b4:8e:51:9c: 8a:72:76:b0:06:3e:c8:f5:6d:9b:00:f0:ca:f1:13:c8:f9:fd: 0f:cb:8e:3e:60:e8:a3:c8:1a:cb:68:a5:5b:62:42:69:e1:cc: ed:c4:48:ff:ea:ad:27:c0:eb:fc:2a:97:ad:21:0e:dd:df:8d: a4:c0:c2:dc:10:2d:a6:fc:c5:cd:bc:4c:3f:56:c8:6f:c3:b0: e0:a8:d4:5e:c0:a0:a0:9a:6f:97:92:91:70:11:45:23:18:a5: 06:78:9c:4b:29:0c:89:a5:0b:fc:ca:5d:66:84:cc:ae:a2:78: 81:9a:df:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUIFPGfj/hBaTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjQxOTVjZWEtNGNiZi00OWQwLWI2N2ItMGI3MzBiYjNlYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm13eXQCzUG3v+CtcwoACSRHWVPrppuiAkLYB ydCLrxKHpzEDo5LqF/L8e8VQfd4ueGD6jQs6j5Dll3FL1rYq1leWP7whdJsw1Bil Y7ojTqpvSiOsO3hfS/UmRucNTbwQ9UTNcsYly0SnbN+VCsxzrIBMeOeMV/aR3Wbs NkLuYnfXte8bdMoHIdPef/h0hvNklCHhxMR8DSb9Y+fbu07VSKgbChXg75RZRuCR s37cqfQRexRqD23TWb2RU4Cs3Pu+i4xNZyqLLf6LW9NNGcRWxPKGQtULOO58ydYu +brdsXIjG/TNZ2nAFxcEFbD714YW+S/ap4+CKDWX7pPbdygqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF16KkkCN5Zfh3FSM/hwm0J28jdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDMwN2U3ODgtYWZmNy0z NGM2LWIzYWItMDU4ZmJkOTgxNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMeNhAyNUmD/Xd6Lzah6mopnXqEduZX6m5GtFgo/KClpZ/r2jyjvtRg sYZBJinSfchD7un3gW5/x6SciT7M6OiES+7LutBsD+2Pqkc2VmVgxz/DnbLAyEAs FnGUc7hD8xSds30wgqL8Kwh1xdaaZoUUoVcZJ3yG4ax0F2IlXciRfgdTrBVuyQBY dNaQtI5RnIpydrAGPsj1bZsA8MrxE8j5/Q/Ljj5g6KPIGstopVtiQmnhzO3ESP/q rSfA6/wql60hDt3fjaTAwtwQLab8xc28TD9WyG/DsOCo1F7AoKCab5eSkXARRSMY pQZ4nEspDImlC/zKXWaEzK6ieIGa3yE= -----END CERTIFICATE-----Generated at Tue Aug 26 08:59:51 2025 by rpki-client