$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/374bb8e2-9062-3201-a934-3c485d88682e.roa File: 374bb8e2-9062-3201-a934-3c485d88682e.roa (raw, json) Hash identifier: WQ0ED2bt+lMSZ17zVxeJ9Zk6p4kjKwu7l/rwfxzhgyM= Subject key identifier: CB:F8:D3:B4:0F:9C:3C:3E:1E:2D:06:E5:12:D6:15:6B:98:F6:88:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410EB41464DB7AEF2C61E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/374bb8e2-9062-3201-a934-3c485d88682e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:eb:41:46:4d:b7:ae:f2:c6:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cb1a1843-4090-4c7b-83c2-b8be960e8fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:c6:07:b0:ae:6c:c7:c1:be:27:11:c9:f9: 35:38:36:0a:fb:01:b3:cc:5c:35:4d:ea:35:0a:a1: f9:f6:fd:11:76:1d:73:8c:53:4a:b1:15:0a:37:40: 9e:4f:54:e1:80:3e:f7:01:b7:b4:39:fc:d3:5e:71: 52:aa:a6:d0:e6:8f:21:94:25:aa:a3:92:7d:ab:50: 15:00:3b:08:3d:2d:a1:ac:3d:65:d0:cf:41:25:8c: b8:bf:65:09:b3:fb:49:ae:81:aa:b5:c2:5d:ec:60: 74:e4:0c:38:40:d1:ff:c4:f3:ab:a5:33:ea:47:b7: 35:d7:1d:54:36:03:3c:5c:1d:43:39:fe:69:8b:ee: 91:da:de:0b:c7:18:93:a4:d1:b1:68:ea:98:41:4f: 3d:aa:0f:87:07:61:ad:8c:d3:b4:69:7a:73:6e:ff: d2:cf:b0:b2:7e:71:fd:81:f4:b4:aa:71:53:08:51: 0b:34:3f:4d:7c:c0:79:0d:0d:8b:1f:dc:d8:64:a7: ba:d3:60:43:72:5b:bd:bf:d2:bf:7d:da:9c:01:82: a4:24:db:6c:1c:0f:21:89:3a:f4:4a:32:cd:69:71: a6:73:b0:1b:a7:a8:a8:be:5a:7c:9d:cf:3d:fe:bd: 3d:88:79:91:02:c8:55:11:45:22:73:7b:08:ab:3d: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F8:D3:B4:0F:9C:3C:3E:1E:2D:06:E5:12:D6:15:6B:98:F6:88:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/374bb8e2-9062-3201-a934-3c485d88682e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a5:c1:35:af:81:f6:a1:d2:41:ed:22:97:d6:55:82:c7:7d: 01:d7:e0:4d:01:5f:d0:df:2d:67:ae:52:16:85:62:62:15:30: 3c:e0:ed:da:86:70:ff:a3:64:26:1d:2c:44:99:82:bf:38:5c: 8a:80:9e:2b:12:f0:e3:58:a3:56:94:30:c6:8b:89:9d:77:ea: 76:63:6c:8e:52:fb:16:c4:f7:c4:96:0b:97:80:1e:5c:59:55: 5d:71:69:c0:d1:67:b0:b5:a9:8a:80:b2:cb:f4:d8:4c:2b:73: 74:27:21:f6:15:0e:36:f8:3b:dd:f1:2c:22:94:18:ed:97:d4: 6b:40:82:b9:27:ac:38:59:63:75:d6:72:a3:a2:01:45:26:cf: 34:4d:33:8b:a2:7c:3c:23:b1:33:ba:48:cd:1b:30:5f:d2:b9: 23:a0:b8:71:f6:2a:9e:e7:0a:21:fd:5e:bb:98:4f:6f:0a:1f: 2f:55:a9:18:2c:ad:9a:fc:1b:3b:b7:bf:85:86:87:8b:55:eb: 77:dd:e3:6b:9f:23:c2:2f:9d:97:b5:db:96:ed:94:bb:a7:96: 55:4d:3f:b6:f0:f2:90:da:2d:b8:7d:d6:e3:45:0a:d2:22:ae: 3f:61:d2:85:9e:ea:90:5e:49:fc:56:16:13:9b:e6:30:1c:3d: 13:df:9f:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOtBRk23rvLGHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2IxYTE4NDMtNDA5MC00YzdiLTgzYzItYjhiZTk2MGU4ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte/GB7CubMfBvicRyfk1ODYK+wGzzFw1Teo1 CqH59v0Rdh1zjFNKsRUKN0CeT1ThgD73Abe0OfzTXnFSqqbQ5o8hlCWqo5J9q1AV ADsIPS2hrD1l0M9BJYy4v2UJs/tJroGqtcJd7GB05Aw4QNH/xPOrpTPqR7c11x1U NgM8XB1DOf5pi+6R2t4LxxiTpNGxaOqYQU89qg+HB2GtjNO0aXpzbv/Sz7CyfnH9 gfS0qnFTCFELND9NfMB5DQ2LH9zYZKe602BDclu9v9K/fdqcAYKkJNtsHA8hiTr0 SjLNaXGmc7Abp6iovlp8nc89/r09iHmRAshVEUUic3sIqz13xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv407QPnDw+Hi0G5RLWFWuY9ogkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzc0YmI4ZTItOTA2Mi0z MjAxLWE5MzQtM2M0ODVkODg2ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGulwTWvgfah0kHtIpfWVYLHfQHX4E0BX9DfLWeuUhaFYmIVMDzg7dqG cP+jZCYdLESZgr84XIqAnisS8ONYo1aUMMaLiZ136nZjbI5S+xbE98SWC5eAHlxZ VV1xacDRZ7C1qYqAssv02Ewrc3QnIfYVDjb4O93xLCKUGO2X1GtAgrknrDhZY3XW cqOiAUUmzzRNM4uifDwjsTO6SM0bMF/SuSOguHH2Kp7nCiH9XruYT28KHy9VqRgs rZr8Gzu3v4WGh4tV63fd42ufI8IvnZe125btlLunllVNP7bw8pDaLbh91uNFCtIi rj9h0oWe6pBeSfxWFhOb5jAcPRPfn4o= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:14 2025 by rpki-client