$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa File: 3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa (raw, json) Hash identifier: DBV0WjVUtg+a22VyjZJMfp2O7S+PEbFJCNlqpd1XVGo= Subject key identifier: 03:C1:55:27:2B:B6:C3:77:37:D2:59:B2:A9:A9:81:34:B3:2A:29:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81462746A7C32ACFF3FDC700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.28.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:27:46:a7:c3:2a:cf:f3:fd:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=7194243e-ea75-45a9-a6b2-288fae0af774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:26:58:c8:1f:61:d4:e2:fd:03:bb:73:3a: 84:dc:32:21:9f:b9:cd:2e:de:36:11:ee:4c:12:50: f1:10:de:94:e2:96:75:ca:b1:b4:df:85:96:3d:76: 66:48:1d:5d:45:17:ed:5a:02:bc:c2:d9:8c:17:a3: 7c:14:43:dc:1e:1a:c2:b6:1a:5f:20:59:95:b4:45: 4b:11:55:d0:69:aa:75:10:8b:00:86:a6:fd:8b:53: b2:11:dc:0b:f3:ee:9c:52:60:a5:e0:df:ff:ae:c7: 9a:bf:d3:0d:81:73:45:45:c6:e9:d3:67:ca:1a:ff: 35:93:51:6d:3a:0f:25:a6:5e:ba:e6:85:22:29:30: 88:65:bd:59:c5:62:5e:a7:39:c6:e0:38:c3:2b:d9: 1e:93:08:25:59:ca:fd:91:49:60:c7:bb:cc:fe:f3: b0:9a:c8:47:0a:76:2d:6f:9e:b4:d7:71:45:d7:1b: b2:c7:81:4c:99:33:fa:f2:e4:81:31:cf:c1:cf:62: e2:dd:e1:5b:c8:9a:c5:f4:65:f8:27:f2:fe:98:d2: 7e:89:8d:b9:47:59:a4:01:31:77:1e:39:93:38:88: 50:0d:54:b2:44:43:fb:22:b2:7a:e7:5d:94:50:7d: d8:9c:1e:c8:32:ff:70:0f:22:e9:47:dd:15:dc:98: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C1:55:27:2B:B6:C3:77:37:D2:59:B2:A9:A9:81:34:B3:2A:29:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:58:b3:c7:64:e0:7c:f4:79:b7:fc:d8:55:3a:8d:43:1a:be: 71:4f:6f:db:65:1f:59:a1:d1:3e:26:fb:c7:07:14:9f:ad:8a: f1:34:83:ba:0e:be:a8:91:bd:5c:c7:8b:c1:1f:d7:4b:f6:c6: 02:6e:51:4a:59:ec:d5:90:b7:47:da:11:c8:ad:1d:52:ec:e5: 97:f9:52:9f:c6:b6:b9:43:77:47:34:e4:57:46:5b:2f:f8:a8: 87:e8:39:b1:00:1a:31:f0:95:45:7b:75:2b:1f:94:38:4b:44: 77:72:76:7b:01:35:a0:79:3e:07:74:34:94:8d:c0:ca:a6:d8: 67:8f:6a:f0:22:5e:a2:4a:11:2a:0b:bc:50:72:e7:44:e1:9c: d2:a4:f1:b6:90:a2:75:f0:c1:f5:63:56:86:21:5f:b3:89:42: 02:19:dd:ba:8d:cd:92:6f:97:17:b5:87:ab:f0:04:ba:8f:2e: 79:ad:99:8e:c2:f0:1d:73:7c:3e:5b:29:8d:3b:35:25:f8:4a: 20:ee:bc:e3:e5:88:e9:9a:10:f8:8c:2f:22:be:8b:58:60:9f: 3e:d2:74:88:c5:04:62:4d:81:b7:9f:3e:14:de:86:02:81:e1: 89:c4:d2:24:f9:9a:4c:70:51:ed:20:1a:bd:d8:93:bc:ec:74: 72:71:6d:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRidGp8Mqz/P9xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzE5NDI0M2UtZWE3NS00NWE5LWE2YjItMjg4ZmFlMGFmNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6wmWMgfYdTi/QO7czqE3DIhn7nNLt42Ee5M ElDxEN6U4pZ1yrG034WWPXZmSB1dRRftWgK8wtmMF6N8FEPcHhrCthpfIFmVtEVL EVXQaap1EIsAhqb9i1OyEdwL8+6cUmCl4N//rseav9MNgXNFRcbp02fKGv81k1Ft Og8lpl665oUiKTCIZb1ZxWJepznG4DjDK9kekwglWcr9kUlgx7vM/vOwmshHCnYt b56013FF1xuyx4FMmTP68uSBMc/Bz2Li3eFbyJrF9GX4J/L+mNJ+iY25R1mkATF3 HjmTOIhQDVSyREP7IrJ6512UUH3YnB7IMv9wDyLpR90V3JiDtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPBVScrtsN3N9JZsqmpgTSzKilBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2VjMTEzYzgtODA0MS0z OGY0LTg0ZmItMTU3ZjJmZGY2NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFYs8dk4Hz0ebf82FU6jUMavnFPb9tlH1mh0T4m+8cHFJ+tivE0g7oO vqiRvVzHi8Ef10v2xgJuUUpZ7NWQt0faEcitHVLs5Zf5Up/GtrlDd0c05FdGWy/4 qIfoObEAGjHwlUV7dSsflDhLRHdydnsBNaB5Pgd0NJSNwMqm2GePavAiXqJKESoL vFBy50ThnNKk8baQonXwwfVjVoYhX7OJQgIZ3bqNzZJvlxe1h6vwBLqPLnmtmY7C 8B1zfD5bKY07NSX4SiDuvOPliOmaEPiMLyK+i1hgnz7SdIjFBGJNgbefPhTehgKB 4YnE0iT5mkxwUe0gGr3Yk7zsdHJxbSk= -----END CERTIFICATE-----Generated at Mon Aug 4 22:17:23 2025 by rpki-client