$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f74cb62-d2f7-364f-acf7-3ea2aa25717f.roa File: 4f74cb62-d2f7-364f-acf7-3ea2aa25717f.roa (raw, json) Hash identifier: mQkMHbRdlrZOlPwBtaG5b8v33qLqEPCm9fMwT1602Fo= Subject key identifier: AA:09:18:C7:D0:F1:FB:A2:16:EC:47:E1:28:1C:29:12:36:02:BE:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DBFE52D30B3DAA55DF5240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f74cb62-d2f7-364f-acf7-3ea2aa25717f.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.29.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:fe:52:d3:0b:3d:aa:55:df:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=cf26bf9a-17f0-486d-bd02-d6a6c03bae7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:ae:00:b7:f2:e9:a8:ab:d1:9d:31:a0:a8: b9:e7:0f:1d:9f:a3:c7:7b:2f:cd:ec:e6:7b:02:5b: f4:9e:3d:5e:65:62:66:f9:b4:56:d0:ff:04:3e:70: 17:b7:26:8e:81:66:0d:9e:cc:d0:80:58:19:a8:30: ab:68:0c:84:53:f9:d6:c5:2f:49:a7:57:a2:8b:9d: af:55:80:a9:57:72:b5:e6:8b:ca:a3:70:fc:b5:c4: 68:a5:af:6d:5a:20:c7:77:2e:85:3f:65:f1:e5:21: 87:f5:e4:8f:87:4b:d8:1a:71:bd:1d:56:c6:b2:01: 35:7f:d3:45:be:70:65:b2:36:8a:3d:46:4c:08:69: 80:bd:be:ea:4f:6a:ff:c9:52:93:80:f6:38:77:db: ac:29:1d:9e:78:6d:7a:17:a0:ee:72:03:bb:34:49: 1b:6b:cf:aa:88:b9:5a:81:bc:6d:45:5b:e0:54:9b: ea:c3:8a:a8:ba:59:c3:c9:82:09:49:6e:e3:99:64: 83:f4:e3:46:4a:f0:07:4e:af:e8:aa:1c:1a:91:cf: 52:30:01:a8:18:c4:1c:3a:18:06:4b:be:cc:c9:5e: bb:d2:f8:b2:56:7d:fc:e7:d9:ae:dd:d9:47:2f:29: 92:ff:4e:09:de:3f:43:38:4f:f1:2b:a2:9d:0b:05: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:09:18:C7:D0:F1:FB:A2:16:EC:47:E1:28:1C:29:12:36:02:BE:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f74cb62-d2f7-364f-acf7-3ea2aa25717f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2a:1f:44:b6:59:ba:3b:b6:ae:cd:45:1c:19:f9:4a:ca:0f: 33:99:09:82:b3:5e:0c:13:f6:71:a0:81:74:c0:2f:d5:6f:77: 02:bd:53:00:97:c3:cf:b4:2c:20:a2:89:e4:fd:7d:b9:cb:3a: 69:d7:44:75:d9:4e:51:89:b5:5a:ec:b9:ae:38:bd:9e:03:e1: ad:51:ad:27:46:d6:74:dc:24:16:fe:3f:76:a5:92:99:51:2b: 01:76:ae:10:49:d3:f0:81:32:31:41:36:73:75:9d:8d:ed:f1: 73:3d:33:0e:ff:16:e9:ad:d7:ec:8f:49:30:c1:22:c4:e2:c9: 6b:d9:2d:5b:8a:95:07:b2:aa:3d:0b:a3:54:45:20:7c:08:f5: 0a:7b:dd:17:a9:47:60:75:a3:de:ed:d0:a9:8f:b7:13:87:ad: c5:b5:2c:6b:21:8c:97:14:25:ee:56:9a:2a:e0:67:db:3d:17: d9:b3:e7:62:6f:b9:06:d5:e8:82:45:9c:d3:df:6b:b2:5b:5a: a7:96:72:7c:81:62:d7:f9:f5:04:c1:65:c9:85:79:09:6a:32: 33:8f:1c:af:7c:ca:71:68:18:e2:0e:ac:99:af:67:4b:1f:77: c2:52:5d:bf:43:66:aa:91:3f:1f:a3:ef:47:c7:61:ab:c0:d6: 4a:20:c4:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/5S0ws9qlXfUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2YyNmJmOWEtMTdmMC00ODZkLWJkMDItZDZhNmMwM2JhZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/quALfy6air0Z0xoKi55w8dn6PHey/N7OZ7 Alv0nj1eZWJm+bRW0P8EPnAXtyaOgWYNnszQgFgZqDCraAyEU/nWxS9Jp1eii52v VYCpV3K15ovKo3D8tcRopa9tWiDHdy6FP2Xx5SGH9eSPh0vYGnG9HVbGsgE1f9NF vnBlsjaKPUZMCGmAvb7qT2r/yVKTgPY4d9usKR2eeG16F6DucgO7NEkba8+qiLla gbxtRVvgVJvqw4qoulnDyYIJSW7jmWSD9ONGSvAHTq/oqhwakc9SMAGoGMQcOhgG S77MyV670viyVn3859mu3dlHLymS/04J3j9DOE/xK6KdCwXcwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoJGMfQ8fuiFuxH4SgcKRI2Ar53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY3NGNiNjItZDJmNy0z NjRmLWFjZjctM2VhMmFhMjU3MTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsqH0S2Wbo7tq7NRRwZ+UrKDzOZCYKzXgwT9nGggXTAL9VvdwK9UwCX w8+0LCCiieT9fbnLOmnXRHXZTlGJtVrsua44vZ4D4a1RrSdG1nTcJBb+P3alkplR KwF2rhBJ0/CBMjFBNnN1nY3t8XM9Mw7/Fumt1+yPSTDBIsTiyWvZLVuKlQeyqj0L o1RFIHwI9Qp73RepR2B1o97t0KmPtxOHrcW1LGshjJcUJe5WmirgZ9s9F9mz52Jv uQbV6IJFnNPfa7JbWqeWcnyBYtf59QTBZcmFeQlqMjOPHK98ynFoGOIOrJmvZ0sf d8JSXb9DZqqRPx+j70fHYavA1kogxFY= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:25 2025 by rpki-client