$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa File: 095d4b72-4463-396f-adff-a4a67b26bc1e.roa (raw, json) Hash identifier: soUZVENdT6waodA384pI9AdTacr20NEK8fibhujf54s= Subject key identifier: BF:82:F9:24:66:F7:1F:B4:55:B4:38:D2:48:59:EE:69:A0:C8:BC:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC01DD3436AA461E833D60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:01:dd:34:36:aa:46:1e:83:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b69cf4c5-c7df-4874-ab0e-aa02aa6ace52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:fa:13:6a:79:d6:fa:79:04:78:c5:de:89: 33:bf:0b:69:79:aa:25:ca:0b:b2:ac:e7:f5:94:0b: fa:52:68:93:15:17:1f:cf:66:2b:db:60:1f:e1:bd: a2:b0:e5:dc:89:fb:e2:fc:0f:4f:27:07:a8:38:a1: 17:d3:ad:f7:9e:b3:0d:20:f6:6b:c5:1e:59:bc:6b: d2:09:c4:4c:40:47:d1:30:76:b1:86:3c:f8:df:5e: f3:d3:c3:22:31:7c:cb:de:ac:12:76:f6:b6:7f:b6: 31:bd:fb:c1:7d:22:1d:06:2f:f0:40:6f:d7:51:86: 13:19:1f:07:df:4c:74:f6:2a:c6:2b:40:ba:f7:4e: 9a:c7:86:7f:63:f2:10:a2:9c:b1:32:c9:2f:a5:85: f3:4f:e4:82:af:33:02:5b:76:f5:2e:a5:7a:ff:6a: 81:fe:61:8e:f8:a0:6a:94:96:14:8d:09:51:60:eb: a8:bb:34:e2:ec:ab:8c:d3:de:6b:3e:87:4c:30:03: 7b:54:b0:99:d3:a5:4d:bb:78:91:ef:1d:58:f9:e8: 3e:27:9a:46:d8:cc:fe:41:58:a6:f8:31:ca:58:c0: d1:94:87:05:6a:03:d4:b9:ea:b8:a9:b5:dc:9d:17: f3:18:6a:30:53:ac:45:38:c8:91:c5:b1:17:3c:ea: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:82:F9:24:66:F7:1F:B4:55:B4:38:D2:48:59:EE:69:A0:C8:BC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/095d4b72-4463-396f-adff-a4a67b26bc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1b:2d:dd:22:7a:ef:ef:b5:9f:ba:1e:d3:7e:9f:a4:c9:ac: 45:46:48:4b:c2:58:cf:b9:c2:88:4f:c5:72:60:1d:0e:55:8e: f8:a0:3f:3b:19:0b:36:ba:0a:de:b1:7b:9c:e2:1d:c0:67:f1: dd:7c:c7:14:ca:ef:5f:40:dd:e2:be:f9:5a:f5:4f:52:7e:01: 39:9e:3f:98:1b:71:bb:cc:9a:43:13:19:31:1e:5e:80:74:42: 83:6e:ad:68:3c:08:74:f0:8a:a8:71:e4:3b:01:62:0f:52:eb: 8b:97:76:4f:72:18:66:69:3d:ff:5c:62:4c:3a:b6:26:02:eb: 43:ac:ec:8d:ec:c1:e5:f5:2f:48:b5:0e:8e:fc:25:fa:50:08: 7b:2b:de:28:2a:59:50:e8:4d:f2:3c:94:8c:de:7e:84:35:0f: 43:fe:18:b9:1c:3c:da:e2:c5:a9:c2:fb:09:e8:26:50:a2:c6: 10:30:f9:3b:01:0b:cb:bd:d6:b3:d1:7a:1c:e2:fb:14:87:9f: d5:b9:53:3b:23:3b:24:d6:3f:60:a9:bb:2a:b9:1f:de:63:5d: 4b:0e:f6:ff:1b:64:08:bb:a5:91:7c:2e:8a:f7:ef:d3:0f:8d: 39:a8:78:2a:f6:33:6b:64:1f:27:8c:9d:92:f7:6c:a3:90:0a: 8c:cd:b1:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3AHdNDaqRh6DPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjY5Y2Y0YzUtYzdkZi00ODc0LWFiMGUtYWEwMmFhNmFjZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVj6E2p51vp5BHjF3okzvwtpeaolyguyrOf1 lAv6UmiTFRcfz2Yr22Af4b2isOXcifvi/A9PJweoOKEX0633nrMNIPZrxR5ZvGvS CcRMQEfRMHaxhjz4317z08MiMXzL3qwSdva2f7YxvfvBfSIdBi/wQG/XUYYTGR8H 30x09irGK0C6906ax4Z/Y/IQopyxMskvpYXzT+SCrzMCW3b1LqV6/2qB/mGO+KBq lJYUjQlRYOuouzTi7KuM095rPodMMAN7VLCZ06VNu3iR7x1Y+eg+J5pG2Mz+QVim +DHKWMDRlIcFagPUueq4qbXcnRfzGGowU6xFOMiRxbEXPOrHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+C+SRm9x+0VbQ40khZ7mmgyLyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDk1ZDRiNzItNDQ2My0z OTZmLWFkZmYtYTRhNjdiMjZiYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMbLd0ieu/vtZ+6HtN+n6TJrEVGSEvCWM+5wohPxXJgHQ5VjvigPzsZ Cza6Ct6xe5ziHcBn8d18xxTK719A3eK++Vr1T1J+ATmeP5gbcbvMmkMTGTEeXoB0 QoNurWg8CHTwiqhx5DsBYg9S64uXdk9yGGZpPf9cYkw6tiYC60Os7I3sweX1L0i1 Do78JfpQCHsr3igqWVDoTfI8lIzefoQ1D0P+GLkcPNrixanC+wnoJlCixhAw+TsB C8u91rPRehzi+xSHn9W5UzsjOyTWP2Cpuyq5H95jXUsO9v8bZAi7pZF8Lor379MP jTmoeCr2M2tkHyeMnZL3bKOQCozNsZI= -----END CERTIFICATE-----Generated at Tue Aug 5 23:10:55 2025 by rpki-client