$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67772ca0-2a72-3281-ba51-b5712fac0617.roa File: 67772ca0-2a72-3281-ba51-b5712fac0617.roa (raw, json) Hash identifier: KMejvoGVEhQovw8poXY4eTW7BgN/+pipMgByK3D5VsM= Subject key identifier: A8:54:3B:09:55:C2:73:56:CB:5C:62:16:32:60:75:95:00:E8:D2:3B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AB220C619CF9A7A10E342E7F0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67772ca0-2a72-3281-ba51-b5712fac0617.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 30036 IP address blocks: 173.29.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c6:19:cf:9a:7a:10:e3:42:e7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=107510b6-b861-404d-b351-9b322a95d6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bd:7e:55:88:5d:b5:94:2a:3b:96:48:6c:9e: 59:0b:aa:5b:5d:02:15:72:41:20:0f:96:ec:9e:85: 5e:58:e4:bc:9e:49:00:4f:d7:7b:8c:ba:1c:cf:ee: 89:6d:b1:64:9b:28:ca:d1:f7:f9:72:da:44:86:fa: 12:ea:d7:37:39:31:74:f0:bc:c8:a0:58:46:91:59: 0c:83:27:cf:ca:e4:6b:1e:69:ed:4d:d6:41:58:06: 5d:4b:b2:2a:eb:4d:05:70:aa:95:ad:0d:ae:a5:2f: c9:bc:19:03:69:54:32:b7:6d:47:db:77:1d:ba:45: 11:6a:99:44:a2:2b:55:01:6d:5f:25:af:c2:40:1e: 96:75:92:c4:6c:74:d5:4f:4d:bf:ce:e5:89:24:ff: 0c:33:12:d2:c8:18:d7:3f:ac:90:e6:56:ea:3d:98: 5e:06:25:af:de:1b:e9:ed:8d:f6:e5:3b:5c:f1:46: 9d:94:db:42:13:01:2c:bf:20:f6:aa:04:97:94:5b: d8:c2:24:a6:b6:36:01:6b:28:f5:a2:bc:8f:a6:24: 2e:de:39:2e:23:02:f0:1e:01:01:47:dc:ab:25:d0: f3:8e:64:28:80:c4:ac:de:1c:44:c5:44:40:bf:df: 2c:d7:19:9b:34:1c:a0:4e:6b:8c:a9:92:d6:ff:81: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:54:3B:09:55:C2:73:56:CB:5C:62:16:32:60:75:95:00:E8:D2:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67772ca0-2a72-3281-ba51-b5712fac0617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d4:47:3f:8f:ad:52:5e:2b:1a:b0:0d:35:66:99:8b:e2:67: 92:5a:a9:e9:54:97:5a:db:fe:ac:71:e6:de:71:85:39:4a:51: f1:f8:2e:c8:21:13:27:19:4a:91:6c:3f:ee:26:be:72:d6:83: 77:2f:2e:42:85:76:d3:34:57:38:e5:54:35:f3:66:a2:10:15: a5:84:aa:22:c0:86:6b:4d:a9:e1:6d:50:13:99:fe:1c:9d:00: 4b:9b:65:40:19:8b:64:6e:f5:29:2b:9f:37:88:a7:ef:1a:09: 98:ae:12:34:27:4f:11:90:04:57:c8:0b:d3:1f:6f:1d:52:47: 63:17:b7:c3:84:3e:88:9c:e3:19:70:16:ec:81:da:01:93:42: 0e:aa:ac:0c:bb:0e:5d:ed:81:30:71:e5:7f:e8:85:94:71:ff: 7a:3e:1c:d9:41:e0:16:9c:42:5c:96:ce:df:5e:37:58:17:d5: 27:05:fb:13:14:ad:be:06:4a:e4:8c:c3:ba:44:6b:95:3e:61: 77:e9:bb:3b:6c:6d:57:4c:8f:19:85:b6:36:a5:95:cd:2f:a6: d3:b0:54:27:64:95:e5:e7:7b:cd:be:83:4e:96:67:f9:13:5c: 2d:66:9b:ff:0c:07:6f:30:f6:ac:15:19:92:0b:63:ee:97:ce: 7c:17:cb:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMYZz5p6EONC5/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTA3NTEwYjYtYjg2MS00MDRkLWIzNTEtOWIzMjJhOTVkNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb1+VYhdtZQqO5ZIbJ5ZC6pbXQIVckEgD5bs noVeWOS8nkkAT9d7jLocz+6JbbFkmyjK0ff5ctpEhvoS6tc3OTF08LzIoFhGkVkM gyfPyuRrHmntTdZBWAZdS7Iq600FcKqVrQ2upS/JvBkDaVQyt21H23cdukURaplE oitVAW1fJa/CQB6WdZLEbHTVT02/zuWJJP8MMxLSyBjXP6yQ5lbqPZheBiWv3hvp 7Y325Ttc8UadlNtCEwEsvyD2qgSXlFvYwiSmtjYBayj1oryPpiQu3jkuIwLwHgEB R9yrJdDzjmQogMSs3hxExURAv98s1xmbNBygTmuMqZLW/4HvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhUOwlVwnNWy1xiFjJgdZUA6NI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjc3NzJjYTAtMmE3Mi0z MjgxLWJhNTEtYjU3MTJmYWMwNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnURz+PrVJeKxqwDTVmmYviZ5JaqelUl1rb/qxx5t5xhTlKUfH4Lsgh EycZSpFsP+4mvnLWg3cvLkKFdtM0VzjlVDXzZqIQFaWEqiLAhmtNqeFtUBOZ/hyd AEubZUAZi2Ru9SkrnzeIp+8aCZiuEjQnTxGQBFfIC9Mfbx1SR2MXt8OEPoic4xlw FuyB2gGTQg6qrAy7Dl3tgTBx5X/ohZRx/3o+HNlB4BacQlyWzt9eN1gX1ScF+xMU rb4GSuSMw7pEa5U+YXfpuztsbVdMjxmFtjallc0vptOwVCdkleXne82+g06WZ/kT XC1mm/8MB28w9qwVGZILY+6XznwXy4s= -----END CERTIFICATE-----Generated at Wed Aug 6 13:13:15 2025 by rpki-client