$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6904a255-a90a-3d28-85e2-981e81446f76.roa File: 6904a255-a90a-3d28-85e2-981e81446f76.roa (raw, json) Hash identifier: GF/tRQE6r1OgGco6AJcxlREiLjE0LewDRYEf98eCtiU= Subject key identifier: 3A:A8:45:FF:76:00:E2:A0:54:EE:64:EA:B4:8A:61:C7:E4:1D:40:DE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A857607079489E4A0F10F1000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6904a255-a90a-3d28-85e2-981e81446f76.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.28.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:07:07:94:89:e4:a0:f1:0f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=7fc0e59c-d0ad-4a20-bf29-6fd3f1cc68b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:d5:8b:72:42:1f:e4:aa:a6:7c:3e:c3:7f: 54:3a:27:01:e2:8c:92:f6:32:f8:cb:29:64:fa:90: 96:36:43:7b:47:ed:83:bb:47:a4:fc:fc:e8:da:d5: 59:6a:c0:ca:c8:d7:aa:22:55:cc:13:57:b4:1e:21: 0c:b7:39:8b:a0:62:ee:78:72:0d:8c:2a:3c:c0:55: 6c:72:de:81:08:1c:92:d0:85:87:1f:1b:29:9f:2d: e9:81:b3:dd:94:16:44:a6:12:dc:26:7b:a9:82:57: 71:29:63:72:0e:ad:4f:ae:33:d7:04:c7:66:0e:9c: e6:a5:01:04:a0:0e:e4:88:27:43:0d:ec:81:f6:36: 49:59:e2:af:0b:a8:52:fb:42:fa:ea:75:67:4f:bc: 2f:f5:c8:18:d4:c9:63:af:39:23:1f:e7:b8:9b:e1: ec:26:9c:21:74:a8:f7:04:d5:4b:58:f3:e2:60:66: 0d:a5:79:0c:35:c5:9b:f4:b9:aa:96:46:0d:95:ee: 08:ca:3a:f7:6b:01:88:ff:ab:ad:d6:ec:d8:79:21: bc:1c:c0:84:b7:59:1f:26:c6:d7:4f:0d:34:3f:ab: db:fe:1a:21:96:7f:ed:4e:a5:1e:6e:86:5c:3d:5f: 1a:4e:32:0a:1d:7e:95:c3:4a:68:1f:c9:f7:53:67: a0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:45:FF:76:00:E2:A0:54:EE:64:EA:B4:8A:61:C7:E4:1D:40:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6904a255-a90a-3d28-85e2-981e81446f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9e:2c:bb:22:72:18:98:9f:fb:8d:4a:7b:43:f3:1b:26:39: e2:13:ca:a3:8f:b4:f2:4e:02:9a:40:2f:97:e2:a2:27:ac:f4: 91:e8:3d:4f:9b:83:a9:7b:5e:33:e3:38:f1:82:ca:3f:db:35: 57:67:11:a0:85:85:95:f3:03:cd:7f:c2:15:11:90:5a:c7:05: 6b:b0:71:bf:41:08:5b:46:7d:cf:6f:55:cc:e9:d3:a5:da:d6: af:47:e2:c8:c6:ea:12:70:1b:bb:1f:e1:ea:b2:ee:ec:91:f6: 17:69:da:83:46:8d:56:5d:41:af:59:f9:e6:0c:95:64:c7:b4: 79:9a:fd:44:4f:3e:a5:10:7e:39:78:66:a8:c3:00:2c:65:ab: ea:ff:1a:23:7a:8f:e7:3d:00:bf:6a:a4:2b:d7:39:1b:b2:c8: db:2f:dd:70:41:74:0e:48:90:ef:90:b3:cb:54:26:08:40:70: 55:eb:17:7b:bc:e4:7c:e2:be:d1:95:17:40:84:6c:cb:84:32: 24:f2:cf:b5:14:8d:7e:d4:a4:6c:d6:ae:02:92:45:4c:aa:e9: 9d:1b:f2:e5:8d:a0:66:1b:c7:59:77:87:2f:e2:c6:62:4b:93: de:10:bf:34:94:5a:03:a7:98:8f:78:98:24:6f:fe:f1:a3:f1: 3c:3b:01:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgcHlInkoPEPEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk N2ZjMGU1OWMtZDBhZC00YTIwLWJmMjktNmZkM2YxY2M2OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0jVi3JCH+Sqpnw+w39UOicB4oyS9jL4yylk +pCWNkN7R+2Du0ek/Pzo2tVZasDKyNeqIlXME1e0HiEMtzmLoGLueHINjCo8wFVs ct6BCByS0IWHHxspny3pgbPdlBZEphLcJnupgldxKWNyDq1PrjPXBMdmDpzmpQEE oA7kiCdDDeyB9jZJWeKvC6hS+0L66nVnT7wv9cgY1MljrzkjH+e4m+HsJpwhdKj3 BNVLWPPiYGYNpXkMNcWb9LmqlkYNle4Iyjr3awGI/6ut1uzYeSG8HMCEt1kfJsbX Tw00P6vb/hohln/tTqUeboZcPV8aTjIKHX6Vw0poH8n3U2egawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqoRf92AOKgVO5k6rSKYcfkHUDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjkwNGEyNTUtYTkwYS0z ZDI4LTg1ZTItOTgxZTgxNDQ2Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGueLLsichiYn/uNSntD8xsmOeITyqOPtPJOAppAL5fioies9JHoPU+b g6l7XjPjOPGCyj/bNVdnEaCFhZXzA81/whURkFrHBWuwcb9BCFtGfc9vVczp06Xa 1q9H4sjG6hJwG7sf4eqy7uyR9hdp2oNGjVZdQa9Z+eYMlWTHtHma/URPPqUQfjl4 ZqjDACxlq+r/GiN6j+c9AL9qpCvXORuyyNsv3XBBdA5IkO+Qs8tUJghAcFXrF3u8 5HzivtGVF0CEbMuEMiTyz7UUjX7UpGzWrgKSRUyq6Z0b8uWNoGYbx1l3hy/ixmJL k94QvzSUWgOnmI94mCRv/vGj8Tw7AVA= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:11 2025 by rpki-client