$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa File: 34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa (raw, json) Hash identifier: 9aeonadv44mHtk3qfdLBZ1fHIVrS79J0NsQ1sDZy5d0= Subject key identifier: B9:4E:F9:05:93:41:FA:E0:DD:88:81:5B:6C:82:D3:59:BE:C9:D3:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81462D7C9B3CCC0D56A5BB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.29.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:2d:7c:9b:3c:cc:0d:56:a5:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=71a884e8-65f3-46a5-abe2-80a3dba2fad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:c3:21:29:f6:94:b5:18:48:59:71:bf:99: b5:c4:fd:c9:6a:1c:ce:56:9f:df:3d:b3:86:6d:7a: d4:fc:b1:da:da:52:78:9b:6a:cc:58:92:eb:eb:28: f6:7f:fa:90:ca:f6:31:00:08:6a:86:f2:f6:44:bc: f5:d6:2e:71:e6:95:1d:9d:92:f1:fb:c3:05:34:02: 1a:14:49:8f:f0:5f:90:d1:fb:55:61:da:38:e5:de: 96:de:d2:75:df:38:d1:64:87:3f:4b:70:ce:0d:59: 23:ca:86:ce:27:00:8c:82:b4:f1:3e:91:e7:ae:42: f0:0c:9b:49:2f:f5:f6:c9:83:cc:e0:ef:bf:95:0d: 52:df:aa:87:89:be:9f:7e:b3:82:f6:d8:14:4e:58: d0:b7:32:30:71:56:61:a3:f4:e7:c9:07:dd:81:fb: 28:d0:4f:14:10:fd:c0:8c:fb:e0:8d:09:e4:6e:38: 31:f1:d8:17:8e:92:c0:1d:5c:1f:31:05:53:da:1d: 37:c5:2f:a0:3b:13:d8:3d:01:99:c6:8b:12:b8:11: 47:35:ed:53:da:5e:a5:22:bf:fa:7b:32:3f:6d:b2: 7d:f0:fb:7b:36:92:2d:67:96:bb:03:cd:2a:98:9b: 57:86:bf:8f:cb:2a:73:58:8c:09:23:f3:7a:6d:88: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:F9:05:93:41:FA:E0:DD:88:81:5B:6C:82:D3:59:BE:C9:D3:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:56:0a:93:df:d2:7f:86:17:29:b5:5d:6c:52:6e:80:aa:60: 6b:e2:5b:c3:e3:2c:65:4a:9f:b3:bb:10:b8:cb:97:52:e3:f8: ba:07:a4:ac:13:97:3c:7b:2a:1b:20:39:f2:3d:7f:b3:04:ab: 88:bb:07:f4:d2:a3:b1:25:71:89:9d:03:4f:76:ac:bd:aa:80: 07:52:87:7d:fc:53:d8:47:6f:1f:0b:34:f2:74:27:b2:20:a7: dc:bd:81:7f:53:47:1c:9d:e3:68:47:c4:c2:6a:36:b0:23:e7: 52:38:67:0f:f6:b6:23:da:92:0c:90:b4:6d:bd:59:5f:78:c8: f3:b7:b5:19:36:8d:93:cc:53:b7:ef:13:54:8e:a0:48:ef:d3: 96:36:9a:01:ab:ff:1f:d8:fa:a1:a8:cf:97:a8:d4:27:bd:bd: a1:36:c0:c1:46:ef:70:c1:1e:87:cc:af:38:2a:9d:76:e8:bf: 53:38:5d:d7:e2:99:53:c2:57:aa:ec:47:93:36:dc:41:c7:a6: ad:26:c1:3f:31:b8:ae:95:e6:39:60:4b:61:2f:1c:4a:d1:62: b7:56:91:36:64:d0:0d:67:91:e8:05:0a:69:7b:fc:e6:52:f9: a7:0e:10:c6:f4:96:0e:f8:c4:ef:53:4a:0d:78:12:33:e8:ff: 04:f9:9a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRi18mzzMDValuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzFhODg0ZTgtNjVmMy00NmE1LWFiZTItODBhM2RiYTJmYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin3DISn2lLUYSFlxv5m1xP3JahzOVp/fPbOG bXrU/LHa2lJ4m2rMWJLr6yj2f/qQyvYxAAhqhvL2RLz11i5x5pUdnZLx+8MFNAIa FEmP8F+Q0ftVYdo45d6W3tJ13zjRZIc/S3DODVkjyobOJwCMgrTxPpHnrkLwDJtJ L/X2yYPM4O+/lQ1S36qHib6ffrOC9tgUTljQtzIwcVZho/TnyQfdgfso0E8UEP3A jPvgjQnkbjgx8dgXjpLAHVwfMQVT2h03xS+gOxPYPQGZxosSuBFHNe1T2l6lIr/6 ezI/bbJ98Pt7NpItZ5a7A80qmJtXhr+PyypzWIwJI/N6bYgs9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlO+QWTQfrg3YiBW2yC01m+ydMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRkZGUwYTAtNjM2My0z ZDNhLWFhZDctNGEyOWE1OWExZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVWCpPf0n+GFym1XWxSboCqYGviW8PjLGVKn7O7ELjLl1Lj+LoHpKwT lzx7KhsgOfI9f7MEq4i7B/TSo7ElcYmdA092rL2qgAdSh338U9hHbx8LNPJ0J7Ig p9y9gX9TRxyd42hHxMJqNrAj51I4Zw/2tiPakgyQtG29WV94yPO3tRk2jZPMU7fv E1SOoEjv05Y2mgGr/x/Y+qGoz5eo1Ce9vaE2wMFG73DBHofMrzgqnXbov1M4Xdfi mVPCV6rsR5M23EHHpq0mwT8xuK6V5jlgS2EvHErRYrdWkTZk0A1nkegFCml7/OZS +acOEMb0lg74xO9TSg14EjPo/wT5mlw= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:56 2025 by rpki-client