$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ef3e91-276d-3e4a-8f79-518c9cb122ec.roa File: 26ef3e91-276d-3e4a-8f79-518c9cb122ec.roa (raw, json) Hash identifier: Vjl3Jiabyu0yH25MbsuYscfm8eAuHf41usM8H7y7ptQ= Subject key identifier: D4:FD:05:6D:98:E3:0E:A4:28:DF:AF:7A:E1:FB:94:91:EF:40:29:BA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410EE14F50AD8FB5A2455C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ef3e91-276d-3e4a-8f79-518c9cb122ec.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.25.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:ee:14:f5:0a:d8:fb:5a:24:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=aa0f026b-86e9-4810-8344-1037e85342fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:df:41:58:12:78:0c:fd:88:43:f2:2b:58: f6:e0:3e:be:30:ab:17:3d:a5:59:96:bd:fc:46:c5: 9d:60:dc:29:e1:c9:3b:b4:9a:9b:05:4c:4c:1c:af: ac:74:0a:53:97:21:6c:eb:c4:b7:ca:cc:fa:d7:52: 71:51:4c:90:ed:11:15:a0:2e:0e:9e:4c:1f:04:f2: 03:ee:af:5d:3b:c3:d1:28:5f:b2:0a:f0:a0:92:a7: 8c:50:f0:67:d5:dc:68:1f:28:09:48:cf:bf:1c:ca: e0:73:0a:80:6f:36:79:c4:a7:66:e1:fa:18:a7:24: 68:20:75:38:78:69:4d:2c:b5:d4:82:4d:1c:b2:29: 67:58:e0:de:63:a9:37:ea:8c:b9:b1:13:64:1e:8e: c6:7f:d6:d9:8c:bd:46:b2:e0:d4:c7:37:77:ac:90: 21:81:84:92:1c:bf:c6:7b:6a:8b:f4:32:37:2c:0d: af:35:21:f4:39:9d:3d:07:1b:4b:42:e7:fe:70:63: 3b:9f:71:c2:44:48:7d:e0:04:ec:7f:8a:80:86:89: 3e:65:04:50:b8:f1:72:11:06:ed:a3:fd:59:9e:25: 77:fc:f5:36:5a:24:21:31:c1:61:b3:2b:0a:1a:60: 8b:8a:1c:91:66:da:94:1f:05:1d:e9:c5:72:86:ff: e2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FD:05:6D:98:E3:0E:A4:28:DF:AF:7A:E1:FB:94:91:EF:40:29:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ef3e91-276d-3e4a-8f79-518c9cb122ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ba:fb:de:4a:58:d1:a1:f5:36:1e:ff:65:2c:3e:37:b4:4a: 5d:ef:be:15:e3:75:b7:21:03:14:ed:24:1e:41:9d:f1:7b:d8: d0:96:4d:96:70:d0:72:61:9c:34:a1:0d:fa:55:e7:c8:bc:e7: f1:6d:70:e9:85:ba:54:03:8f:a3:9b:c7:01:3f:b4:09:38:93: 43:d9:1d:6d:f6:e7:e1:36:e0:f5:d6:32:31:d7:3b:26:86:d1: eb:59:35:49:e6:d6:dd:21:61:d2:e7:29:fd:6a:09:65:ab:c5: 63:87:a0:30:1e:ec:55:66:97:aa:33:ff:5a:02:6b:4b:db:57: 23:68:73:24:ab:aa:79:a4:55:bd:39:90:0b:16:c5:0e:4b:59: 69:18:05:89:15:fc:6a:fa:72:a2:4d:de:42:8d:ac:5d:22:af: c1:fb:a0:ab:8d:3f:19:83:6e:5e:10:6f:be:71:73:07:54:78: 5a:a8:d6:d5:1b:97:9f:03:10:81:e7:62:13:54:7c:ed:bd:65: 2f:7f:4b:b9:49:bb:ac:f7:17:09:6e:5b:34:22:52:14:9b:04: 33:65:77:a6:04:1f:56:a2:93:cb:96:d9:48:3d:6f:62:fd:f3: 3d:31:59:f8:9f:c4:fe:58:ed:d3:d4:2e:d8:7d:ee:a0:80:3c: 58:bd:ab:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEO4U9QrY+1okVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWEwZjAyNmItODZlOS00ODEwLTgzNDQtMTAzN2U4NTM0MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr23fQVgSeAz9iEPyK1j24D6+MKsXPaVZlr38 RsWdYNwp4ck7tJqbBUxMHK+sdApTlyFs68S3ysz611JxUUyQ7REVoC4OnkwfBPID 7q9dO8PRKF+yCvCgkqeMUPBn1dxoHygJSM+/HMrgcwqAbzZ5xKdm4foYpyRoIHU4 eGlNLLXUgk0csilnWODeY6k36oy5sRNkHo7Gf9bZjL1GsuDUxzd3rJAhgYSSHL/G e2qL9DI3LA2vNSH0OZ09BxtLQuf+cGM7n3HCREh94ATsf4qAhok+ZQRQuPFyEQbt o/1ZniV3/PU2WiQhMcFhsysKGmCLihyRZtqUHwUd6cVyhv/i3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT9BW2Y4w6kKN+veuH7lJHvQCm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjZlZjNlOTEtMjc2ZC0z ZTRhLThmNzktNTE4YzljYjEyMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy6+95KWNGh9TYe/2UsPje0Sl3vvhXjdbchAxTtJB5BnfF72NCWTZZw 0HJhnDShDfpV58i85/FtcOmFulQDj6ObxwE/tAk4k0PZHW325+E24PXWMjHXOyaG 0etZNUnm1t0hYdLnKf1qCWWrxWOHoDAe7FVml6oz/1oCa0vbVyNocySrqnmkVb05 kAsWxQ5LWWkYBYkV/Gr6cqJN3kKNrF0ir8H7oKuNPxmDbl4Qb75xcwdUeFqo1tUb l58DEIHnYhNUfO29ZS9/S7lJu6z3FwluWzQiUhSbBDNld6YEH1aik8uW2Ug9b2L9 8z0xWfifxP5Y7dPULth97qCAPFi9q+g= -----END CERTIFICATE-----Generated at Tue Aug 5 23:03:28 2025 by rpki-client