$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d61a8ca-6178-30ae-b891-caf66704f95f.roa File: 3d61a8ca-6178-30ae-b891-caf66704f95f.roa (raw, json) Hash identifier: N5J2bPG0woYYrcGenYQX3QaMXCd8TuzO4hhF1th+C/0= Subject key identifier: 44:19:BA:22:F1:87:6E:7D:08:05:47:98:9E:26:5B:1D:EC:FD:2E:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E353A20F5D6A97149800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d61a8ca-6178-30ae-b891-caf66704f95f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e3:53:a2:0f:5d:6a:97:14:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ab29553e-695f-490c-a17d-6ad05534064a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:74:7f:c5:c7:1a:ce:68:a1:5e:50:7a:7e: 99:f2:c2:b9:fa:7d:85:4c:ea:c8:d2:cb:a0:a4:83: b4:fc:78:fe:93:6f:18:52:80:cc:00:12:81:f9:19: 8f:8a:ce:0c:48:04:39:79:0b:71:ed:f4:fd:de:41: 39:e7:49:bb:6b:65:ef:a3:6b:40:b0:e6:36:c0:ac: b3:d2:db:a4:cc:90:ad:00:53:60:60:07:fe:f4:29: 63:fd:68:46:58:26:31:47:23:1b:33:ca:7c:8e:4e: 00:5f:0f:ae:4e:8c:b1:21:6f:03:dc:f9:9d:80:ca: d3:b7:c7:7a:9c:5e:3c:7b:a3:a6:10:09:98:4f:be: 3f:bb:61:7c:27:91:95:d2:de:d4:2c:ad:fe:4d:68: 28:ad:94:fa:4e:15:75:ec:35:f6:3c:2f:c3:9c:16: b1:6b:30:fd:0c:91:36:1f:2e:c0:8a:13:53:4c:47: 78:d5:f2:ce:54:82:98:55:e3:db:a5:85:9c:43:c2: 78:32:29:a3:8f:b4:c8:dd:cc:44:e2:61:29:11:18: 5a:5b:a8:11:27:ba:29:55:a9:d8:70:60:29:ff:50: 89:0d:a9:1e:35:7e:ff:a3:67:74:4c:72:61:ae:f9: 25:88:3b:67:31:6b:05:2a:c7:7c:a7:14:90:6f:f6: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:19:BA:22:F1:87:6E:7D:08:05:47:98:9E:26:5B:1D:EC:FD:2E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d61a8ca-6178-30ae-b891-caf66704f95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8e:e2:43:e5:2c:66:7a:1d:fa:2c:5a:a5:aa:bd:c2:6e:7c: aa:0c:cd:0c:85:ad:1e:65:7d:e3:81:bb:88:d2:38:6a:b1:94: 42:af:d9:d6:c2:ad:98:9d:5d:23:72:8f:69:c4:90:0d:78:fc: 6c:47:ac:de:92:c7:ac:cc:08:35:56:d8:47:05:58:c6:5c:ff: f3:ae:cc:52:84:66:7d:d1:35:3a:35:e9:8b:c5:0d:aa:4c:09: 03:0f:78:d8:1d:a5:c5:e0:b2:fa:32:58:01:6b:89:2e:ff:d8: 2f:1f:ad:9b:01:6e:3d:0b:e8:61:0d:f3:68:4a:df:7e:60:37: 14:47:01:cf:8f:57:7c:93:b5:89:ca:6c:de:2f:e1:db:e8:94: b8:1e:a8:62:a8:62:28:ae:3a:d3:e4:1d:a7:d0:0d:0c:7f:d1: 5f:20:15:b8:03:9b:6c:32:fd:6a:0c:ef:95:62:f0:97:66:84: 36:5a:87:30:f1:72:0c:90:20:7b:6e:72:f9:7f:ba:7e:78:78: 3c:d5:59:d9:01:22:88:b5:f1:67:e1:87:03:ed:40:1e:98:f3: 65:5e:42:f7:2e:33:ef:78:fb:a8:57:1a:96:b6:d4:37:8a:1d: e8:c1:3a:41:a5:05:57:ba:77:56:13:34:bd:62:7e:d6:10:63: b2:ab:b5:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEONTog9dapcUmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWIyOTU1M2UtNjk1Zi00OTBjLWExN2QtNmFkMDU1MzQwNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvx0f8XHGs5ooV5Qen6Z8sK5+n2FTOrI0sug pIO0/Hj+k28YUoDMABKB+RmPis4MSAQ5eQtx7fT93kE550m7a2Xvo2tAsOY2wKyz 0tukzJCtAFNgYAf+9Clj/WhGWCYxRyMbM8p8jk4AXw+uToyxIW8D3PmdgMrTt8d6 nF48e6OmEAmYT74/u2F8J5GV0t7ULK3+TWgorZT6ThV17DX2PC/DnBaxazD9DJE2 Hy7AihNTTEd41fLOVIKYVePbpYWcQ8J4Mimjj7TI3cxE4mEpERhaW6gRJ7opVanY cGAp/1CJDakeNX7/o2d0THJhrvkliDtnMWsFKsd8pxSQb/bSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQZuiLxh259CAVHmJ4mWx3s/S5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q2MWE4Y2EtNjE3OC0z MGFlLWI4OTEtY2FmNjY3MDRmOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaO4kPlLGZ6HfosWqWqvcJufKoMzQyFrR5lfeOBu4jSOGqxlEKv2dbC rZidXSNyj2nEkA14/GxHrN6Sx6zMCDVW2EcFWMZc//OuzFKEZn3RNTo16YvFDapM CQMPeNgdpcXgsvoyWAFriS7/2C8frZsBbj0L6GEN82hK335gNxRHAc+PV3yTtYnK bN4v4dvolLgeqGKoYiiuOtPkHafQDQx/0V8gFbgDm2wy/WoM75Vi8JdmhDZahzDx cgyQIHtucvl/un54eDzVWdkBIoi18WfhhwPtQB6Y82VeQvcuM+94+6hXGpa21DeK HejBOkGlBVe6d1YTNL1iftYQY7KrtdI= -----END CERTIFICATE-----Generated at Wed Aug 6 07:58:45 2025 by rpki-client