$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa File: 76b9fae5-463a-3488-ad50-00b232211f44.roa (raw, json) Hash identifier: fNyKHdtfBovtI1i56p6LW+BwiHVNdPSQpbxvyUZXLuQ= Subject key identifier: 0D:1F:55:D1:AE:FE:EA:BC:6A:81:50:E7:AA:D1:B0:10:58:12:59:44 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410C5895DCF2D251E806A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c5:89:5d:cf:2d:25:1e:80:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b850ccf1-51f5-4f32-8fd6-e3cfaba0bda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ec:0c:f0:f6:54:ac:be:cf:37:ca:db:2f:44: 17:f3:0b:d8:45:31:52:65:4a:53:d6:10:6a:83:2e: 65:40:8a:61:34:41:c6:a8:a6:57:8e:77:0d:e8:3b: da:8e:6f:0e:cf:46:54:aa:fe:61:ae:18:d3:32:07: 7d:f4:7b:77:af:23:ed:b4:84:c0:39:c7:41:32:d3: bf:07:8e:29:89:5e:4c:da:4e:51:cd:e3:57:07:a6: 92:e0:8d:98:d4:08:88:7b:f8:1d:a1:ff:2b:88:21: 1e:5c:c8:3e:39:de:f9:ff:f0:36:e8:29:ff:93:b0: d0:64:25:6d:1d:65:c8:a3:3a:b8:6e:4e:1b:36:0a: 78:72:8f:5b:0a:47:f9:17:07:67:32:5b:e7:ac:b7: 4b:5c:08:ad:86:0a:c4:ff:1b:d2:23:34:24:66:35: f4:1a:6d:ed:a9:98:36:ba:5b:7e:92:fa:e1:1c:cd: 2d:cf:d8:cf:08:1b:c9:de:01:ec:fa:d5:3d:d2:66: 30:e4:44:66:f4:75:af:50:ac:4f:0b:5d:e9:a6:69: 42:81:cc:c0:a6:a4:3d:b3:4d:23:e3:be:14:40:c3: d9:cd:24:b8:8c:56:62:58:0a:73:bb:72:e4:cc:36: bd:3f:c2:3e:cb:b1:e1:04:96:d6:15:bc:8b:6a:35: 48:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1F:55:D1:AE:FE:EA:BC:6A:81:50:E7:AA:D1:B0:10:58:12:59:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:11:4d:8c:46:12:c9:25:70:9d:bf:5f:2d:c6:f2:85:c8:c4: c3:3c:9b:1a:e7:2c:6e:dc:45:00:5f:4e:3e:0b:5f:4b:9d:86: e3:ba:f8:2d:dc:39:4a:8a:89:c3:c1:5a:43:cd:23:3a:bd:08: 7a:b7:ff:94:84:3a:5d:65:d2:e5:68:37:ab:6b:67:f9:28:ca: 00:f2:a6:dc:71:fa:2b:60:ae:d8:71:b3:99:33:48:65:e8:86: c8:7f:ec:26:9c:de:ff:53:62:ab:53:28:84:26:51:6b:58:16: a8:b9:01:a7:cd:75:43:f7:d8:72:51:4c:a2:29:8a:d8:3f:2a: 53:81:59:32:ba:3f:fa:43:ee:bc:14:fd:3e:82:09:62:18:5f: 21:ac:90:2c:53:c3:8b:1e:ca:40:0a:2d:bd:e5:fe:f8:ab:c9: 76:83:77:15:e5:f6:e4:d7:87:f1:da:38:c2:da:15:32:8e:9a: 33:88:bf:a0:62:4e:b4:ec:fb:24:bc:07:a3:ef:d3:86:95:d0: e2:b4:a1:a1:e3:0e:33:74:8b:94:54:d0:28:52:e8:98:30:df: 1b:41:41:38:53:67:52:29:11:11:c5:bf:66:a1:7a:cd:3d:8d: 30:cb:e4:42:ac:90:c7:01:ef:71:56:a9:ba:ce:35:fd:07:08: 66:93:63:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEMWJXc8tJR6AaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Yjg1MGNjZjEtNTFmNS00ZjMyLThmZDYtZTNjZmFiYTBiZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+wM8PZUrL7PN8rbL0QX8wvYRTFSZUpT1hBq gy5lQIphNEHGqKZXjncN6Dvajm8Oz0ZUqv5hrhjTMgd99Ht3ryPttITAOcdBMtO/ B44piV5M2k5RzeNXB6aS4I2Y1AiIe/gdof8riCEeXMg+Od75//A26Cn/k7DQZCVt HWXIozq4bk4bNgp4co9bCkf5FwdnMlvnrLdLXAithgrE/xvSIzQkZjX0Gm3tqZg2 ult+kvrhHM0tz9jPCBvJ3gHs+tU90mYw5ERm9HWvUKxPC13ppmlCgczApqQ9s00j 474UQMPZzSS4jFZiWApzu3LkzDa9P8I+y7HhBJbWFbyLajVI7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0fVdGu/uq8aoFQ56rRsBBYEllEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzZiOWZhZTUtNDYzYS0z NDg4LWFkNTAtMDBiMjMyMjExZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsRTYxGEsklcJ2/Xy3G8oXIxMM8mxrnLG7cRQBfTj4LX0udhuO6+C3c OUqKicPBWkPNIzq9CHq3/5SEOl1l0uVoN6trZ/koygDyptxx+itgrthxs5kzSGXo hsh/7Cac3v9TYqtTKIQmUWtYFqi5AafNdUP32HJRTKIpitg/KlOBWTK6P/pD7rwU /T6CCWIYXyGskCxTw4seykAKLb3l/viryXaDdxXl9uTXh/HaOMLaFTKOmjOIv6Bi TrTs+yS8B6Pv04aV0OK0oaHjDjN0i5RU0ChS6Jgw3xtBQThTZ1IpERHFv2ahes09 jTDL5EKskMcB73FWqbrONf0HCGaTYyI= -----END CERTIFICATE-----Generated at Wed Aug 6 00:53:13 2025 by rpki-client