$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa File: 3a66e457-9702-3b54-b4dd-dc18e3258958.roa (raw, json) Hash identifier: 1dOS+/Z8QU9XnQSW4bAi48i/V+dA8w0cCQsZ0sFtwcU= Subject key identifier: 38:AC:07:FE:DC:D2:93:E1:75:C8:EC:D5:63:01:A0:6B:DE:D5:9E:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410DA34D3EEDEE349BB5400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:da:34:d3:ee:de:e3:49:bb:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=517f0482-5700-4102-bcf2-221c808b0353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:86:1e:d3:bb:f3:93:b3:86:80:36:ce:28: 0f:e5:5a:e7:a8:fc:89:b9:cc:44:28:ae:ef:5f:b2: 7f:1d:1e:de:f0:a0:b8:03:71:5f:50:4a:b9:c3:05: b2:1e:f3:b5:92:2a:26:26:0b:8b:24:6e:bd:b2:62: 99:97:c0:07:9f:18:88:de:79:1a:a6:6f:27:08:ec: 59:a7:40:74:56:f5:22:54:73:62:63:86:1e:a6:1b: 1f:5a:6b:84:6f:21:ee:b6:8b:44:c6:0f:6b:eb:b0: c9:aa:5b:83:cc:ab:cf:30:94:fc:fe:71:1d:ac:0b: 5c:5d:be:40:b8:a5:a8:f2:9d:54:f1:aa:f9:9a:49: a8:8d:25:88:98:d0:45:4e:01:aa:4f:53:8c:55:74: fe:fd:77:e0:56:ad:71:5a:2b:5a:da:b0:e8:6d:b8: b2:a0:ae:94:66:5c:20:c7:56:e1:d6:50:08:54:75: 42:4d:11:eb:cf:2b:49:05:41:94:59:d4:7b:b9:2c: bf:e7:44:a6:c4:ca:6f:73:68:0e:cb:32:f0:66:ce: 27:40:f8:07:c0:7e:f3:1c:39:b9:9b:97:da:44:ee: 83:a4:97:aa:6c:3d:12:39:29:2c:bc:a9:f5:7a:f0: fc:9f:2a:6f:97:6a:d0:5a:69:c7:fd:d3:b1:b8:2e: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AC:07:FE:DC:D2:93:E1:75:C8:EC:D5:63:01:A0:6B:DE:D5:9E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c8:02:42:5a:84:79:7d:04:bd:93:ab:37:97:7d:65:37:8f: 5b:6f:35:0c:25:9f:4d:88:02:54:68:86:a5:42:b1:18:5a:03: 02:14:f4:d7:6a:8a:9d:17:da:39:a1:4f:2a:d6:03:a7:de:ed: 2c:85:b1:13:40:51:9d:5c:35:ae:00:13:2d:f7:8f:8f:85:30: ad:3d:c7:a3:9d:53:a3:c5:b0:45:19:a6:de:3f:4f:c8:55:b4: a2:aa:4e:11:1b:2f:9f:1f:77:8e:a4:28:ad:2c:0c:db:22:50: c2:1a:ea:59:a0:4f:30:58:5f:63:52:9a:01:07:1f:24:6e:a8: d6:bc:19:e7:80:bd:ad:63:4f:ff:8b:90:f2:39:da:37:7d:78: 5c:cb:fe:04:d0:f3:d2:3a:a1:ff:b2:4d:0f:b6:89:0b:c7:fe: 0e:cb:7f:7b:23:f6:25:f3:d6:57:03:cc:ff:51:70:2a:7a:35: ae:6f:cd:0c:44:1c:a9:94:13:00:4d:40:c1:6d:2e:b9:6a:08: e1:91:88:f0:7a:3d:f8:76:a7:8a:93:40:c4:2f:42:39:48:bd: 70:36:d0:62:82:cd:67:0d:27:e2:25:fe:c3:7c:19:1f:a5:1c: b7:0a:c8:ae:5d:d0:4a:01:7f:f5:db:62:f7:09:bd:4f:cf:b9: 07:20:31:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENo00+7e40m7VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTE3ZjA0ODItNTcwMC00MTAyLWJjZjItMjIxYzgwOGIwMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjiGHtO785OzhoA2zigP5VrnqPyJucxEKK7v X7J/HR7e8KC4A3FfUEq5wwWyHvO1kiomJguLJG69smKZl8AHnxiI3nkapm8nCOxZ p0B0VvUiVHNiY4YephsfWmuEbyHutotExg9r67DJqluDzKvPMJT8/nEdrAtcXb5A uKWo8p1U8ar5mkmojSWImNBFTgGqT1OMVXT+/XfgVq1xWita2rDobbiyoK6UZlwg x1bh1lAIVHVCTRHrzytJBUGUWdR7uSy/50SmxMpvc2gOyzLwZs4nQPgHwH7zHDm5 m5faRO6DpJeqbD0SOSksvKn1evD8nypvl2rQWmnH/dOxuC4TrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDisB/7c0pPhdcjs1WMBoGve1Z48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2E2NmU0NTctOTcwMi0z YjU0LWI0ZGQtZGMxOGUzMjU4OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfIAkJahHl9BL2TqzeXfWU3j1tvNQwln02IAlRohqVCsRhaAwIU9Ndq ip0X2jmhTyrWA6fe7SyFsRNAUZ1cNa4AEy33j4+FMK09x6OdU6PFsEUZpt4/T8hV tKKqThEbL58fd46kKK0sDNsiUMIa6lmgTzBYX2NSmgEHHyRuqNa8GeeAva1jT/+L kPI52jd9eFzL/gTQ89I6of+yTQ+2iQvH/g7Lf3sj9iXz1lcDzP9RcCp6Na5vzQxE HKmUEwBNQMFtLrlqCOGRiPB6Pfh2p4qTQMQvQjlIvXA20GKCzWcNJ+Il/sN8GR+l HLcKyK5d0EoBf/XbYvcJvU/PuQcgMUY= -----END CERTIFICATE-----Generated at Wed Aug 6 00:56:45 2025 by rpki-client