$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29c7f6a1-2f14-370a-91fb-3469ddcf0481.roa File: 29c7f6a1-2f14-370a-91fb-3469ddcf0481.roa (raw, json) Hash identifier: nBLJm7Naj3fJ93qJHj/82WjBpsXwrDBHAa55XFlOH/E= Subject key identifier: C0:43:C0:D5:DD:02:2D:49:77:8B:3C:C8:E0:B7:37:54:1C:1E:7A:E5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CDC072678D60B3C073B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29c7f6a1-2f14-370a-91fb-3469ddcf0481.roa Signing time: Mon 22 Sep 2025 11:57:12 +0000 ROA not before: Mon 22 Sep 2025 11:57:12 +0000 ROA not after: Sun 21 Dec 2025 12:57:12 +0000 asID: 19905 IP address blocks: 173.29.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:dc:07:26:78:d6:0b:3c:07:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:57:12 2025 GMT Not After : Dec 21 12:57:12 2025 GMT Subject: CN=3be9424d-3f78-4d79-99e1-67ac08a9b045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:da:8a:13:49:c6:96:f5:f6:94:59:0a:01: 38:20:b5:5e:8d:11:6f:38:5d:2c:24:fd:18:f5:d3: 32:8f:d5:4e:cf:0a:76:b2:1a:59:2f:4d:9a:bd:45: 6c:1b:be:fd:70:72:07:21:1e:94:33:de:a4:90:3c: b2:ca:d3:65:98:ba:7c:0f:32:58:65:6c:4e:16:f2: c7:e9:dc:4c:eb:d0:69:e4:3c:ab:d0:7e:91:50:4f: 4f:97:c2:0e:50:dd:ad:9a:5e:c7:b1:e1:78:2b:03: c6:4f:a9:d8:1d:76:50:81:a0:86:62:43:3c:57:88: 45:45:be:20:f7:a1:b7:b4:28:30:5e:8a:8b:1a:de: 4a:1b:c3:10:ca:45:7a:27:0f:7f:f7:eb:95:52:b2: 40:17:35:b8:50:cf:34:6f:f5:2a:f8:58:8b:28:90: 1f:32:39:1a:37:dd:1d:28:57:8c:18:f2:85:cc:75: 54:7a:9e:7d:35:c4:17:02:ef:73:94:c1:5f:60:e2: f4:3d:13:18:10:b7:91:13:17:61:68:9c:07:61:73: 1d:40:7a:60:f1:32:b4:66:cc:08:31:e0:b5:6b:7c: 00:ac:f3:24:72:70:c9:fa:aa:af:13:67:b5:6f:8f: bb:be:f8:ce:cb:05:9d:7a:5a:b8:cc:2f:12:52:ff: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:43:C0:D5:DD:02:2D:49:77:8B:3C:C8:E0:B7:37:54:1C:1E:7A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29c7f6a1-2f14-370a-91fb-3469ddcf0481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0c:69:9e:c4:05:b0:34:44:83:07:db:29:86:2f:96:20:21: db:00:0f:99:9b:3d:fd:1f:5b:13:2a:f9:8d:5b:7c:ff:19:8f: df:43:02:84:13:4d:7b:7e:a2:60:06:cf:58:33:ff:0b:61:49: 8e:84:13:ab:73:58:3f:ba:26:a0:25:c6:5e:01:8f:85:65:aa: 8c:fa:7d:5c:0d:7e:be:f1:9f:d3:3f:bd:66:90:e4:bf:25:a6: ea:dd:5d:98:82:ea:d2:8c:f4:2e:07:96:34:d8:9a:98:45:8b: cb:0d:dc:25:5a:7c:87:30:40:a2:57:a3:f0:ed:6e:51:d7:db: 9b:22:b7:23:4e:3b:f8:28:a2:73:9a:5a:bc:65:3f:98:82:ee: 98:06:0a:9a:ad:0c:85:03:ba:79:4b:9a:23:87:8f:08:06:5c: 62:0b:e0:7c:5e:9f:b2:26:53:6e:07:1d:83:83:94:11:79:30: 9d:c9:17:d3:3a:4b:ca:c3:df:4b:57:64:f4:46:dc:d9:40:7e: ce:3d:d1:99:fe:a2:19:35:cd:d8:fb:e0:f0:d0:97:8f:ea:0a: b7:3d:b3:a9:5f:9b:95:5a:0c:8c:ac:2e:46:fa:3e:ad:e3:20: 5e:c0:6e:b9:61:fd:b1:1c:4d:ab:e4:65:10:6c:c1:02:51:1b: f6:2a:8a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXNwHJnjWCzwHO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTcxMloXDTI1MTIyMTEyNTcxMlowLzEtMCsGA1UEAxMk M2JlOTQyNGQtM2Y3OC00ZDc5LTk5ZTEtNjdhYzA4YTliMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFnaihNJxpb19pRZCgE4ILVejRFvOF0sJP0Y 9dMyj9VOzwp2shpZL02avUVsG779cHIHIR6UM96kkDyyytNlmLp8DzJYZWxOFvLH 6dxM69Bp5Dyr0H6RUE9Pl8IOUN2tml7HseF4KwPGT6nYHXZQgaCGYkM8V4hFRb4g 96G3tCgwXoqLGt5KG8MQykV6Jw9/9+uVUrJAFzW4UM80b/Uq+FiLKJAfMjkaN90d KFeMGPKFzHVUep59NcQXAu9zlMFfYOL0PRMYELeRExdhaJwHYXMdQHpg8TK0ZswI MeC1a3wArPMkcnDJ+qqvE2e1b4+7vvjOywWdelq4zC8SUv+VRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBDwNXdAi1Jd4s8yOC3N1QcHnrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjljN2Y2YTEtMmYxNC0z NzBhLTkxZmItMzQ2OWRkY2YwNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQMaZ7EBbA0RIMH2ymGL5YgIdsAD5mbPf0fWxMq+Y1bfP8Zj99DAoQT TXt+omAGz1gz/wthSY6EE6tzWD+6JqAlxl4Bj4Vlqoz6fVwNfr7xn9M/vWaQ5L8l purdXZiC6tKM9C4HljTYmphFi8sN3CVafIcwQKJXo/DtblHX25sityNOO/goonOa WrxlP5iC7pgGCpqtDIUDunlLmiOHjwgGXGIL4Hxen7ImU24HHYODlBF5MJ3JF9M6 S8rD30tXZPRG3NlAfs490Zn+ohk1zdj74PDQl4/qCrc9s6lfm5VaDIysLkb6Pq3j IF7Abrlh/bEcTavkZRBswQJRG/YqilY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:03 2025 by rpki-client