$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7dcf371f-23da-32ba-95bf-4f9d8917038b.roa File: 7dcf371f-23da-32ba-95bf-4f9d8917038b.roa (raw, json) Hash identifier: K3Yrm2LycJ+TWiddDJM+ey+jTWk17m7VLu9mHOQnDn8= Subject key identifier: 86:01:FF:7E:DB:19:2A:A5:FB:D5:45:78:9C:30:51:1B:D8:F0:D8:1A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410C39F4CCA501B1119C400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7dcf371f-23da-32ba-95bf-4f9d8917038b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c3:9f:4c:ca:50:1b:11:19:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c2127dd5-32aa-43d3-be30-770296117d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:61:be:dc:e0:41:3b:42:34:a3:81:9d:df: 65:46:f3:e1:ac:d8:dd:2f:3c:87:12:c4:78:15:9c: 47:2e:a4:7e:7c:05:ac:73:73:53:bd:b2:0a:6e:bd: 7e:6f:be:9a:a4:e7:63:4d:ca:86:25:48:eb:d4:56: 88:a1:72:2f:df:ea:cd:d6:e5:45:18:7b:58:17:9e: f1:b0:ef:74:e0:ba:ea:1e:c9:8d:64:48:23:39:31: 10:72:99:04:77:26:76:0a:72:dd:08:04:6f:9c:cf: 0b:57:75:be:c6:54:f6:bd:63:3f:0b:6f:c5:71:5e: df:8a:02:b0:bb:d1:5a:ba:bb:3d:f8:a0:a1:a9:26: 59:17:5e:1e:58:04:57:80:2b:93:a9:b8:9c:70:9a: 53:66:6c:e7:55:40:96:d7:35:f5:2a:91:fd:d0:8c: 3e:ee:1e:95:be:89:fb:23:9a:8b:e7:0f:b7:37:88: 54:eb:dc:09:1b:b0:98:d1:bb:5d:24:4a:72:98:a2: c2:66:4a:cd:81:62:60:fc:be:8a:61:44:7c:2b:28: 46:ba:3a:c4:cd:d0:ef:6b:b2:e4:a1:57:b9:09:09: 27:aa:a1:4a:47:d0:ed:f5:02:61:92:a5:a1:3c:ab: 0b:2d:6c:6b:e7:c7:b9:e2:4b:5f:55:b0:69:6c:1d: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:01:FF:7E:DB:19:2A:A5:FB:D5:45:78:9C:30:51:1B:D8:F0:D8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7dcf371f-23da-32ba-95bf-4f9d8917038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:73:0f:a0:e7:67:6e:a9:0b:6f:85:1d:9f:88:92:30:ba:2c: ae:43:61:9f:bf:31:c1:5e:4d:16:67:2a:5c:67:83:e5:d0:19: 1a:ad:48:b7:2c:b1:52:a8:23:b1:d6:ad:c6:96:28:54:cd:4a: 28:dd:94:d9:3d:a9:6d:5a:7b:17:a4:12:6f:6b:1e:fb:46:d9: b8:24:9f:9e:50:85:77:e1:fe:c9:0f:27:8c:14:7b:17:df:7d: f2:83:db:84:35:ed:fd:bb:d2:41:f5:1a:7a:db:db:6a:f7:55: 53:b3:75:17:26:3a:fe:b3:f0:08:d2:1c:98:20:f3:6c:88:9f: d5:8c:19:1f:e5:15:d0:ba:9a:f5:3a:12:1f:cc:71:da:af:29: 1b:01:5a:ef:f9:0f:05:5a:17:54:e9:40:20:60:91:8b:1a:fe: cf:f9:38:05:9d:9a:8c:1b:79:ab:88:11:81:25:e5:c8:6f:d7: be:62:c5:3e:43:09:65:df:db:f1:b3:77:0a:3f:22:36:c2:57: be:10:2e:3f:43:a9:df:16:1b:57:1b:8f:e8:fd:c6:58:a6:90: bc:e5:64:44:c7:82:84:37:b8:3d:40:76:76:41:67:85:f6:7d: 3f:b9:d8:66:73:4d:a2:bc:1b:10:81:d0:4b:7c:a7:e2:81:73: 66:60:78:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEMOfTMpQGxEZxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzIxMjdkZDUtMzJhYS00M2QzLWJlMzAtNzcwMjk2MTE3ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFFhvtzgQTtCNKOBnd9lRvPhrNjdLzyHEsR4 FZxHLqR+fAWsc3NTvbIKbr1+b76apOdjTcqGJUjr1FaIoXIv3+rN1uVFGHtYF57x sO904LrqHsmNZEgjOTEQcpkEdyZ2CnLdCARvnM8LV3W+xlT2vWM/C2/FcV7figKw u9Faurs9+KChqSZZF14eWARXgCuTqbiccJpTZmznVUCW1zX1KpH90Iw+7h6Vvon7 I5qL5w+3N4hU69wJG7CY0btdJEpymKLCZkrNgWJg/L6KYUR8KyhGujrEzdDva7Lk oVe5CQknqqFKR9Dt9QJhkqWhPKsLLWxr58e54ktfVbBpbB0YrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYB/37bGSql+9VFeJwwURvY8NgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2RjZjM3MWYtMjNkYS0z MmJhLTk1YmYtNGY5ZDg5MTcwMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtzD6DnZ26pC2+FHZ+IkjC6LK5DYZ+/McFeTRZnKlxng+XQGRqtSLcs sVKoI7HWrcaWKFTNSijdlNk9qW1aexekEm9rHvtG2bgkn55QhXfh/skPJ4wUexff ffKD24Q17f270kH1Gnrb22r3VVOzdRcmOv6z8AjSHJgg82yIn9WMGR/lFdC6mvU6 Eh/McdqvKRsBWu/5DwVaF1TpQCBgkYsa/s/5OAWdmowbeauIEYEl5chv175ixT5D CWXf2/Gzdwo/IjbCV74QLj9Dqd8WG1cbj+j9xlimkLzlZETHgoQ3uD1AdnZBZ4X2 fT+52GZzTaK8GxCB0Et8p+KBc2ZgeBk= -----END CERTIFICATE-----Generated at Wed Aug 6 10:19:21 2025 by rpki-client