$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa File: 28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa (raw, json) Hash identifier: 1wRjJQQOA0HRM68OgI9hVhtGDKq/HWjRc8U6t59+Wro= Subject key identifier: B3:86:59:30:3C:87:31:FB:5D:5E:B5:72:48:94:50:98:50:7B:74:3B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8575EBF81B2F6EB9D1682B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.20.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:eb:f8:1b:2f:6e:b9:d1:68:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=714b0da4-174d-49ee-8275-3be71e4c025a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d7:aa:ab:95:71:4c:ec:be:e9:ad:bf:a5:cf: 6c:bd:dd:f4:98:4b:3b:65:bc:f9:45:da:e5:46:c4: a4:6c:3f:7b:15:a4:ea:ac:1e:32:69:8c:7d:e8:f9: 16:ec:2c:2b:44:8a:23:2f:9a:7f:fb:87:08:f4:d5: 9b:02:f1:5f:41:7b:4e:d7:32:bc:ee:60:80:41:99: 67:86:b4:ef:29:76:c3:c8:42:5f:dd:d2:88:c2:8c: 37:27:f8:64:e2:b1:ff:66:f7:cb:75:9f:8d:c7:1b: 07:01:79:27:16:34:8c:1c:a3:ca:19:5f:ae:11:67: 00:4b:ea:7a:1b:28:f2:18:2c:1b:f7:ab:9b:04:ae: 9b:99:1c:56:13:8a:57:ea:d7:76:da:0f:98:f1:06: 81:7c:6a:56:d8:6a:6d:5d:58:79:f3:9b:cc:9c:07: b6:a7:d7:19:73:9e:36:23:23:d1:7c:bf:2b:60:0e: ca:d3:19:ea:d6:d4:67:16:04:34:94:18:c5:1a:74: 49:1c:94:8d:92:03:12:bb:d1:e8:29:3e:0d:d3:18: f7:75:45:f9:5a:67:5a:55:37:1c:52:28:55:7f:62: d0:32:34:33:93:c1:2e:39:f2:bc:60:d7:67:24:89: c9:de:e3:81:28:78:6d:53:5d:3b:0e:7b:84:33:26: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:86:59:30:3C:87:31:FB:5D:5E:B5:72:48:94:50:98:50:7B:74:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:66:14:69:f8:cf:1f:1a:07:0c:10:68:39:18:37:b2:3b:52: c4:fb:fc:a4:d0:79:27:e6:f3:88:4f:ab:20:ea:7b:e4:87:3c: d6:78:6e:c3:36:d9:91:45:7c:ed:3f:b1:71:f7:0c:a6:db:d8: ba:77:0b:58:33:f1:63:80:9b:9e:73:0e:90:51:6e:f3:54:96: 21:d8:ea:b1:38:00:1f:1c:90:70:30:f3:c5:dc:d9:91:e6:c4: 07:2a:f5:5f:e8:cf:65:b9:c8:67:3a:b8:98:7c:dd:1d:f5:58: 96:e6:3a:60:1e:af:54:97:34:35:4d:9c:e3:26:4b:ec:00:10: ed:a7:7b:a0:18:3f:b1:64:54:11:0e:3d:0d:24:b3:49:18:e3: 29:51:36:7d:17:14:8a:b4:cd:0f:de:38:cf:a2:60:a9:e1:75: 9b:fe:31:d4:8a:f7:53:27:7b:84:0e:0a:ee:36:a6:fd:6d:54: 14:03:25:fa:f2:bc:92:dc:95:4c:f4:4e:56:ae:d5:50:6c:a9: f7:ab:23:45:fb:9f:21:32:d4:7f:11:fc:16:b5:c7:4a:a9:da: 97:84:1c:4d:e8:3c:30:eb:a3:36:bb:9b:03:22:41:08:00:32: 70:74:b2:2f:42:b6:c7:d2:08:f8:e1:e1:5f:0d:d3:46:04:a7: 4d:75:90:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdev4Gy9uudFoKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NzE0YjBkYTQtMTc0ZC00OWVlLTgyNzUtM2JlNzFlNGMwMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjteqq5VxTOy+6a2/pc9svd30mEs7Zbz5Rdrl RsSkbD97FaTqrB4yaYx96PkW7CwrRIojL5p/+4cI9NWbAvFfQXtO1zK87mCAQZln hrTvKXbDyEJf3dKIwow3J/hk4rH/ZvfLdZ+NxxsHAXknFjSMHKPKGV+uEWcAS+p6 GyjyGCwb96ubBK6bmRxWE4pX6td22g+Y8QaBfGpW2GptXVh585vMnAe2p9cZc542 IyPRfL8rYA7K0xnq1tRnFgQ0lBjFGnRJHJSNkgMSu9HoKT4N0xj3dUX5WmdaVTcc UihVf2LQMjQzk8EuOfK8YNdnJInJ3uOBKHhtU107DnuEMyZVlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOGWTA8hzH7XV61ckiUUJhQe3Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjhlN2QyNjgtMjZiZC0z YmI4LWIxYzMtODFmYTI3MThhMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlmFGn4zx8aBwwQaDkYN7I7UsT7/KTQeSfm84hPqyDqe+SHPNZ4bsM2 2ZFFfO0/sXH3DKbb2Lp3C1gz8WOAm55zDpBRbvNUliHY6rE4AB8ckHAw88Xc2ZHm xAcq9V/oz2W5yGc6uJh83R31WJbmOmAer1SXNDVNnOMmS+wAEO2ne6AYP7FkVBEO PQ0ks0kY4ylRNn0XFIq0zQ/eOM+iYKnhdZv+MdSK91Mne4QOCu42pv1tVBQDJfry vJLclUz0Tlau1VBsqferI0X7nyEy1H8R/Ba1x0qp2peEHE3oPDDroza7mwMiQQgA MnB0si9CtsfSCPjh4V8N00YEp011kDw= -----END CERTIFICATE-----Generated at Wed Aug 6 04:12:37 2025 by rpki-client