$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d4d7639-1518-317a-866b-f6d9e79552ce.roa File: 4d4d7639-1518-317a-866b-f6d9e79552ce.roa (raw, json) Hash identifier: BgVOJ5dg+pXPoqUbbJ+BZO6EsK4diE/6FQ/ZoqTF9kM= Subject key identifier: 56:8D:57:25:3E:66:E8:C0:54:9C:E7:E1:37:40:91:CC:5E:AE:96:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584ADEB7A4B936F3FDAF6A03AB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d4d7639-1518-317a-866b-f6d9e79552ce.roa Signing time: Sat 16 Aug 2025 00:20:14 +0000 ROA not before: Sat 16 Aug 2025 00:20:14 +0000 ROA not after: Fri 14 Nov 2025 01:20:14 +0000 asID: 30036 IP address blocks: 173.23.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:b7:a4:b9:36:f3:fd:af:6a:03:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 16 00:20:14 2025 GMT Not After : Nov 14 01:20:14 2025 GMT Subject: CN=b7a24794-b6ac-4f58-b1c4-5473060984ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:9c:70:85:60:3d:90:51:24:f5:39:c4:a9: 6e:7b:d3:cc:0c:d9:60:8e:ad:c0:f8:43:16:8e:6f: a1:34:b6:45:b9:20:74:ae:58:ac:4b:64:fe:7e:89: 56:78:e7:2e:92:36:4a:2b:80:95:43:8c:40:64:e0: 41:d4:b3:81:9e:ec:c8:be:65:38:e5:ab:5e:b5:b8: b1:41:86:92:4e:8b:d4:25:17:cd:af:ba:7a:8a:04: 04:76:ad:27:d2:87:0e:42:4e:2b:c0:7c:55:4d:ed: 1c:27:5d:36:e1:55:ed:96:f8:70:70:ce:b5:1c:3b: bd:20:3e:1f:17:c5:a7:7d:00:ea:da:49:58:b0:81: 31:df:a4:79:71:4f:77:5f:90:b7:78:54:f4:d4:93: 98:4c:24:15:69:a9:d3:64:0a:02:c5:1a:83:35:d5: 18:b0:f9:4d:46:cb:12:58:45:76:8d:41:17:17:a9: d8:80:48:d2:03:7e:f5:aa:b3:05:6a:13:0e:b7:6c: bd:f5:7d:a7:8f:b1:e9:aa:3a:5c:d3:78:6d:7c:5b: af:d4:26:ea:60:74:60:5c:7a:fc:37:e2:a8:a5:77: 53:3e:be:d1:15:99:d1:90:b3:a5:0d:81:8b:c6:27: 0b:7f:38:63:51:f9:50:65:1b:59:86:3f:e4:77:1c: d3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8D:57:25:3E:66:E8:C0:54:9C:E7:E1:37:40:91:CC:5E:AE:96:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d4d7639-1518-317a-866b-f6d9e79552ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d4:44:a5:40:84:72:a0:2a:89:48:36:3a:61:35:62:12:fc: d6:60:9e:71:63:e7:d6:b2:d6:87:ff:20:bd:9f:eb:ba:46:c5: b2:d0:28:e8:53:5d:e4:65:89:8e:4e:e8:78:1a:fd:c5:c9:54: a6:16:be:f0:36:cc:c4:90:73:f6:f6:36:b1:43:fb:4b:6b:6c: c4:be:2f:a7:35:42:67:db:91:2e:17:72:9e:7f:d0:91:60:cd: b9:cf:f9:a9:87:eb:d6:76:8d:60:6d:95:a4:a8:90:7f:15:df: 6e:61:02:3b:0d:65:8e:7c:f3:6c:96:6b:95:c3:7e:e9:00:be: b8:bf:2d:8f:79:da:61:63:d0:22:53:94:86:23:ee:2f:b1:eb: c0:8a:a7:3f:3d:04:51:d7:c9:6b:ea:01:53:1d:b7:1c:bf:16: aa:05:1c:96:f5:4b:29:57:00:27:19:ee:a3:2c:b7:8f:23:17: bb:43:67:20:19:9f:98:c5:b3:b8:06:d5:be:ea:ab:9c:17:a4: f4:e4:db:c1:c2:3b:10:10:9e:30:ba:13:23:3f:6c:35:8c:45: 82:06:0d:42:91:9b:d2:a5:cf:55:c6:c0:eb:00:67:54:e8:a0: 4a:31:34:1e:59:cf:9d:f3:76:74:d8:7c:d0:d6:4b:6c:3b:71: e4:e7:12:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEret6S5NvP9r2oDqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxNjAwMjAxNFoXDTI1MTExNDAxMjAxNFowLzEtMCsGA1UEAxMk YjdhMjQ3OTQtYjZhYy00ZjU4LWIxYzQtNTQ3MzA2MDk4NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy6ccIVgPZBRJPU5xKlue9PMDNlgjq3A+EMW jm+hNLZFuSB0rlisS2T+folWeOcukjZKK4CVQ4xAZOBB1LOBnuzIvmU45atetbix QYaSTovUJRfNr7p6igQEdq0n0ocOQk4rwHxVTe0cJ1024VXtlvhwcM61HDu9ID4f F8WnfQDq2klYsIEx36R5cU93X5C3eFT01JOYTCQVaanTZAoCxRqDNdUYsPlNRssS WEV2jUEXF6nYgEjSA371qrMFahMOt2y99X2nj7Hpqjpc03htfFuv1CbqYHRgXHr8 N+KopXdTPr7RFZnRkLOlDYGLxicLfzhjUflQZRtZhj/kdxzTQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaNVyU+ZujAVJzn4TdAkcxerpZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGQ0ZDc2MzktMTUxOC0z MTdhLTg2NmItZjZkOWU3OTU1MmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRd5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLURKVAhHKgKolINjphNWIS/NZgnnFj59ay1of/IL2f67pGxbLQKOhT XeRliY5O6Hga/cXJVKYWvvA2zMSQc/b2NrFD+0trbMS+L6c1QmfbkS4Xcp5/0JFg zbnP+amH69Z2jWBtlaSokH8V325hAjsNZY5882yWa5XDfukAvri/LY952mFj0CJT lIYj7i+x68CKpz89BFHXyWvqAVMdtxy/FqoFHJb1SylXACcZ7qMst48jF7tDZyAZ n5jFs7gG1b7qq5wXpPTk28HCOxAQnjC6EyM/bDWMRYIGDUKRm9Klz1XGwOsAZ1To oEoxNB5Zz53zdnTYfNDWS2w7ceTnEg4= -----END CERTIFICATE-----Generated at Thu Aug 21 07:19:06 2025 by rpki-client