$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa File: 3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa (raw, json) Hash identifier: 7vZYSKLsKXLKea+wZwWFcEcgyUk17Xu9pZFdcLNmuo8= Subject key identifier: A7:2B:34:21:03:38:48:B5:61:9F:57:55:F1:7C:CE:55:BA:C9:44:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB621472328A48089DF900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:62:14:72:32:8a:48:08:9d:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e79b323e-b7e6-4d69-b0b8-8084364dbc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:19:0a:19:d0:4a:69:e0:e4:3c:40:f4:8c: 8e:54:ea:41:1f:ca:4e:bc:05:1a:e6:38:55:12:4c: bb:10:da:4f:ad:4a:b6:f3:ba:3a:75:80:ae:b5:00: 67:7f:51:1d:df:fd:94:ae:e6:10:ba:1d:33:87:54: f6:8e:c1:d0:96:f6:70:70:e2:c7:90:2d:53:20:b1: 73:c8:b8:b7:52:8d:1c:51:2e:18:7b:87:65:88:d3: bf:7c:a0:92:39:5e:0b:7e:e3:90:ac:83:cb:be:c6: 59:07:87:b3:55:b6:fa:79:36:a4:80:53:67:4d:e0: c6:b1:39:d9:27:ee:ec:d3:2b:58:5c:6d:c7:59:55: 33:96:91:03:84:68:1c:65:6c:bd:e9:f8:0a:bf:52: 28:ba:95:fe:c0:06:c6:10:62:d9:cf:eb:44:7e:42: 4c:4d:a9:df:04:a9:50:99:b0:88:f2:2b:a4:d7:30: c1:cd:ff:48:c2:91:8d:f8:81:29:55:28:b0:b5:0d: e9:06:80:65:d1:3c:09:9e:d8:1b:45:51:c5:e3:76: b2:a5:bd:88:85:07:54:9d:8b:47:a0:4f:96:4c:1a: e7:4f:82:08:07:64:66:4e:b2:34:46:a3:0c:3c:3c: 2f:9c:f7:64:0e:02:68:f9:5a:e5:ea:f9:d0:a1:bd: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2B:34:21:03:38:48:B5:61:9F:57:55:F1:7C:CE:55:BA:C9:44:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c352504-2bbf-38b2-b6e3-f9d6596594f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fa:f5:f2:09:cf:f8:12:c1:b7:35:5c:43:1b:4c:cd:6b:e2: 2d:39:dc:1f:cd:c0:a7:33:fe:f5:d8:ce:e6:05:fd:dc:a2:be: 21:43:83:43:a3:72:32:ec:4b:c3:e8:de:31:8a:04:aa:f3:d3: 64:a1:4c:ce:e7:d2:13:e7:fb:6a:53:fd:ab:1b:6a:a8:ce:83: c4:e8:c7:d2:bf:69:0f:86:58:b3:2a:99:e1:47:0d:d0:af:4f: 98:67:9c:89:f0:6b:8e:52:0a:1e:ce:d2:cc:20:70:29:ef:5f: f9:3e:1e:5c:ac:56:0c:8a:95:0b:39:0a:d4:bd:c2:59:d6:2e: cf:d1:7c:ab:5a:5e:a4:0b:3f:6c:21:5a:ed:0e:12:e8:3c:77: 68:65:ec:8f:b6:d3:a9:fc:11:bb:a8:fc:bd:4a:a4:dd:5c:12: 75:06:fa:77:08:c0:cf:36:4e:38:67:5e:7d:32:73:d8:d5:91: d1:ca:03:a6:80:39:ee:a2:99:79:c1:a0:13:db:5b:f4:e7:42: ab:f9:4c:41:c7:f7:b2:6c:e5:62:ea:68:08:dd:dc:07:b6:2d: 6f:1e:87:e7:fb:87:67:1b:7c:ed:72:03:08:db:91:33:c6:1c: 4d:76:0b:21:40:ca:5e:fc:9f:1d:86:67:cc:cd:f4:9c:9a:3c: b3:a7:cd:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG22IUcjKKSAid+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTc5YjMyM2UtYjdlNi00ZDY5LWIwYjgtODA4NDM2NGRiYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLwZChnQSmng5DxA9IyOVOpBH8pOvAUa5jhV Eky7ENpPrUq287o6dYCutQBnf1Ed3/2UruYQuh0zh1T2jsHQlvZwcOLHkC1TILFz yLi3Uo0cUS4Ye4dliNO/fKCSOV4LfuOQrIPLvsZZB4ezVbb6eTakgFNnTeDGsTnZ J+7s0ytYXG3HWVUzlpEDhGgcZWy96fgKv1IoupX+wAbGEGLZz+tEfkJMTanfBKlQ mbCI8iuk1zDBzf9IwpGN+IEpVSiwtQ3pBoBl0TwJntgbRVHF43aypb2IhQdUnYtH oE+WTBrnT4IIB2RmTrI0RqMMPDwvnPdkDgJo+Vrl6vnQob3IZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcrNCEDOEi1YZ9XVfF8zlW6yUR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2MzNTI1MDQtMmJiZi0z OGIyLWI2ZTMtZjlkNjU5NjU5NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrReAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj69fIJz/gSwbc1XEMbTM1r4i053B/NwKcz/vXYzuYF/dyiviFDg0Oj cjLsS8Po3jGKBKrz02ShTM7n0hPn+2pT/asbaqjOg8Tox9K/aQ+GWLMqmeFHDdCv T5hnnInwa45SCh7O0swgcCnvX/k+HlysVgyKlQs5CtS9wlnWLs/RfKtaXqQLP2wh Wu0OEug8d2hl7I+206n8Ebuo/L1KpN1cEnUG+ncIwM82TjhnXn0yc9jVkdHKA6aA Oe6imXnBoBPbW/TnQqv5TEHH97Js5WLqaAjd3Ae2LW8eh+f7h2cbfO1yAwjbkTPG HE12CyFAyl78nx2GZ8zN9JyaPLOnzeQ= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:48 2025 by rpki-client