$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b4223f1-2a40-3978-8937-4cccfefac0ae.roa File: 5b4223f1-2a40-3978-8937-4cccfefac0ae.roa (raw, json) Hash identifier: TNyAijTYOWL6122S6L4QnvAZlQl0iUCUEJaQ+EV7M+s= Subject key identifier: BA:8F:E1:00:64:B7:04:B8:1B:4E:75:85:87:C2:41:80:1F:08:F7:F9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584ABEB0E155774EA777BDAEAC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b4223f1-2a40-3978-8937-4cccfefac0ae.roa Signing time: Mon 04 Aug 2025 13:00:36 +0000 ROA not before: Mon 04 Aug 2025 13:00:36 +0000 ROA not after: Sun 02 Nov 2025 14:00:36 +0000 asID: 30036 IP address blocks: 173.28.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:b0:e1:55:77:4e:a7:77:bd:ae:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 4 13:00:36 2025 GMT Not After : Nov 2 14:00:36 2025 GMT Subject: CN=f56ba3b2-af1c-4372-a67f-ee00d4e9858b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:47:a7:aa:2c:b7:a7:07:ae:06:cd:be:3c:d7: b0:ca:0b:3f:be:14:1b:f4:14:13:e4:cb:0e:43:08: 26:29:fb:7c:ae:df:64:f9:12:29:8f:5a:f8:4b:d6: 31:c6:53:97:81:d3:cd:93:91:bf:d4:62:06:95:21: 20:07:f9:0c:63:77:5b:26:2f:1f:61:20:38:7c:80: 29:23:42:1d:f5:aa:18:e9:04:60:6e:6e:ee:63:3b: 25:c4:65:bd:29:28:97:ec:99:a6:fa:f9:5e:c2:f5: 6e:0b:5b:5c:b1:9c:1e:22:6d:12:06:39:5a:5a:bc: 8b:30:74:08:87:96:2d:6c:a4:c0:6c:4f:38:da:45: 90:02:0c:5d:13:20:b4:4a:4e:34:71:d7:6b:19:a2: 13:51:d0:a4:43:d1:fc:ff:d4:1f:15:eb:64:6d:92: da:52:1d:9a:b4:ca:ed:47:db:7c:90:b6:cb:1f:64: 88:6d:5f:c2:ef:17:d4:92:5c:1c:4c:5b:39:18:69: ae:e9:e2:ce:8b:48:bd:8c:07:3b:fc:ef:49:94:d1: 14:99:d0:e7:d8:61:26:81:c3:25:65:24:e1:ff:c8: 52:44:3b:fa:4b:50:7d:48:dd:e7:4c:af:22:e5:5c: 0c:c7:76:ec:32:95:f5:0e:05:c7:fb:91:1d:96:d0: 9d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8F:E1:00:64:B7:04:B8:1B:4E:75:85:87:C2:41:80:1F:08:F7:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b4223f1-2a40-3978-8937-4cccfefac0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:df:b7:97:55:ab:19:7b:1e:82:a1:31:d5:ac:80:b3:7d:3e: fe:6b:c5:65:ce:c9:ff:ff:40:a4:7b:25:43:f9:12:d3:06:49: 43:ab:d8:d2:cb:ff:f1:99:b8:5f:51:c0:fd:a0:49:53:f0:23: 05:de:e0:45:14:b9:ac:fc:9e:20:dd:95:0b:ba:2b:86:df:f7: 15:51:9f:3a:99:8c:d6:83:e9:8b:a6:3e:53:10:ec:38:b9:15: 76:1b:15:68:ef:c0:9b:94:45:5a:62:ab:16:53:3e:a0:f6:90: 16:3f:d9:22:4e:db:31:11:86:3c:ae:95:cd:4e:46:37:36:59: 41:7f:80:46:6b:c4:71:ae:7e:ef:d2:54:b3:e7:36:05:f1:26: bf:3c:e1:03:19:a3:45:d6:8e:24:f8:ad:61:9a:92:71:a6:bb: 2e:51:84:67:23:22:c8:59:32:4f:fc:bd:92:bd:ba:46:3a:3f: cd:04:5b:30:50:76:8c:cb:e4:b0:21:16:8d:01:c7:d7:28:bf: 0a:82:a9:e6:86:df:07:ee:5f:95:19:99:95:97:3a:9b:75:3a: 1d:ad:c2:bd:87:76:03:31:78:4f:a0:33:61:74:39:2d:5c:37: 17:a4:df:d8:8e:c7:a5:48:f5:0d:a0:bf:1f:91:ef:51:6f:ff: 03:94:9e:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+sOFVd06nd72urIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk ZjU2YmEzYjItYWYxYy00MzcyLWE2N2YtZWUwMGQ0ZTk4NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0enqiy3pweuBs2+PNewygs/vhQb9BQT5MsO QwgmKft8rt9k+RIpj1r4S9YxxlOXgdPNk5G/1GIGlSEgB/kMY3dbJi8fYSA4fIAp I0Id9aoY6QRgbm7uYzslxGW9KSiX7Jmm+vlewvVuC1tcsZweIm0SBjlaWryLMHQI h5YtbKTAbE842kWQAgxdEyC0Sk40cddrGaITUdCkQ9H8/9QfFetkbZLaUh2atMrt R9t8kLbLH2SIbV/C7xfUklwcTFs5GGmu6eLOi0i9jAc7/O9JlNEUmdDn2GEmgcMl ZSTh/8hSRDv6S1B9SN3nTK8i5VwMx3bsMpX1DgXH+5EdltCd5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqP4QBktwS4G051hYfCQYAfCPf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWI0MjIzZjEtMmE0MC0z OTc4LTg5MzctNGNjY2ZlZmFjMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRy/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvft5dVqxl7HoKhMdWsgLN9Pv5rxWXOyf//QKR7JUP5EtMGSUOr2NLL //GZuF9RwP2gSVPwIwXe4EUUuaz8niDdlQu6K4bf9xVRnzqZjNaD6YumPlMQ7Di5 FXYbFWjvwJuURVpiqxZTPqD2kBY/2SJO2zERhjyulc1ORjc2WUF/gEZrxHGufu/S VLPnNgXxJr884QMZo0XWjiT4rWGaknGmuy5RhGcjIshZMk/8vZK9ukY6P80EWzBQ dozL5LAhFo0Bx9covwqCqeaG3wfuX5UZmZWXOpt1Oh2twr2HdgMxeE+gM2F0OS1c Nxek39iOx6VI9Q2gvx+R71Fv/wOUngM= -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:20 2025 by rpki-client