$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa File: 7ddf2659-7157-340a-a60b-bc3915120be3.roa (raw, json) Hash identifier: p3pfYnPmA7OKJFqfnJ3moZBNVfccUxIe+2Phhv4PEPQ= Subject key identifier: 3D:38:40:69:72:49:B9:61:90:8D:7D:0D:74:6E:68:A2:4A:0E:1F:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412565FA7B9C2E508FBE5C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.29.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:56:5f:a7:b9:c2:e5:08:fb:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4bda2e3b-dcc4-4c09-8696-c134e59c9863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:44:9d:8d:1f:47:dd:84:73:e4:29:a6:ef: e6:ec:61:5d:89:a0:9a:4e:af:a5:0c:d2:35:66:32: 39:4c:50:ae:df:b5:26:58:ba:d9:61:43:51:3c:f0: e0:1a:cf:39:2e:6a:ae:55:fa:e2:af:e4:b8:5e:a2: 08:b2:c5:ea:97:53:2a:60:e1:ce:f7:a1:77:13:1e: 31:72:c6:6d:57:51:d3:a2:9e:7f:26:a0:ba:87:ff: a3:bd:8b:f0:c4:47:7c:bf:21:ca:04:9e:52:d5:2b: 18:b1:0c:18:74:9a:88:b4:10:44:a4:58:49:11:f0: a0:b3:c9:6b:3d:31:b3:c6:d9:1f:81:51:34:84:21: 45:ac:d1:9d:85:98:1b:0f:62:2c:5e:ee:ea:7b:88: af:e8:78:72:d8:ce:da:46:27:c7:2c:a0:e1:08:35: c3:c7:47:37:ae:bd:29:05:5f:39:c4:86:14:cb:22: e9:da:02:0a:78:8a:37:00:80:3c:cf:df:14:1d:e8: a9:35:d4:f1:0f:f5:95:f0:26:6a:3a:8e:da:88:96: 67:2b:08:6e:5c:3d:78:40:8d:3d:d9:3b:11:f7:47: af:a6:a3:ba:f9:7a:99:4d:2f:a0:0d:a6:17:4f:51: f8:80:3e:88:e5:c1:9c:b6:fd:d6:4d:5d:6a:69:76: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:38:40:69:72:49:B9:61:90:8D:7D:0D:74:6E:68:A2:4A:0E:1F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ddf2659-7157-340a-a60b-bc3915120be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:00:ff:77:ee:fa:f8:0b:86:92:cb:12:26:f2:b6:c9:ec:80: 97:54:f6:bb:ce:62:99:b3:bc:1b:17:a4:e4:43:35:06:51:6c: 9c:32:0d:d4:d5:da:60:64:33:57:34:c6:79:a8:4b:42:f8:3d: 3c:2a:67:5a:73:7d:eb:bd:62:3c:ec:86:48:0e:a3:3c:d7:fd: d7:96:6a:cd:3f:2f:4a:75:3c:c9:5f:f4:fb:a8:9e:7f:b3:83: 00:6f:f4:26:51:a1:12:01:44:8d:a5:01:ca:e1:d2:3a:89:3d: bf:06:a4:4c:d6:16:9b:9e:0e:2d:d6:12:93:37:4b:01:20:16: 96:39:17:72:30:4c:63:84:99:c7:b0:4a:61:dc:d3:46:f4:e9: 2c:d9:9e:b5:af:45:e8:7f:34:7a:dc:87:10:04:07:d5:54:7b: ae:93:e7:9d:96:88:21:de:89:f4:91:27:b5:81:9a:13:d1:02: c9:94:17:c4:c4:5a:eb:e9:82:9f:38:12:54:84:b5:4c:e7:c7: b1:93:9a:31:f2:ee:c3:eb:0e:38:c1:23:2a:92:57:a0:40:e1: 3d:69:bd:7d:39:3e:ed:65:cf:56:63:5f:a9:a9:ec:e7:5a:4e: b3:24:77:14:91:47:7f:c9:d8:92:de:0b:18:a4:10:f2:38:f6: e4:d3:ea:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElZfp7nC5Qj75cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGJkYTJlM2ItZGNjNC00YzA5LTg2OTYtYzEzNGU1OWM5ODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWFEnY0fR92Ec+Qppu/m7GFdiaCaTq+lDNI1 ZjI5TFCu37UmWLrZYUNRPPDgGs85LmquVfrir+S4XqIIssXql1MqYOHO96F3Ex4x csZtV1HTop5/JqC6h/+jvYvwxEd8vyHKBJ5S1SsYsQwYdJqItBBEpFhJEfCgs8lr PTGzxtkfgVE0hCFFrNGdhZgbD2IsXu7qe4iv6Hhy2M7aRifHLKDhCDXDx0c3rr0p BV85xIYUyyLp2gIKeIo3AIA8z98UHeipNdTxD/WV8CZqOo7aiJZnKwhuXD14QI09 2TsR90evpqO6+XqZTS+gDaYXT1H4gD6I5cGctv3WTV1qaXbG+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD04QGlySblhkI19DXRuaKJKDh8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2RkZjI2NTktNzE1Ny0z NDBhLWE2MGItYmMzOTE1MTIwYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcA/3fu+vgLhpLLEibytsnsgJdU9rvOYpmzvBsXpORDNQZRbJwyDdTV 2mBkM1c0xnmoS0L4PTwqZ1pzfeu9YjzshkgOozzX/deWas0/L0p1PMlf9Puonn+z gwBv9CZRoRIBRI2lAcrh0jqJPb8GpEzWFpueDi3WEpM3SwEgFpY5F3IwTGOEmcew SmHc00b06SzZnrWvReh/NHrchxAEB9VUe66T552WiCHeifSRJ7WBmhPRAsmUF8TE Wuvpgp84ElSEtUznx7GTmjHy7sPrDjjBIyqSV6BA4T1pvX05Pu1lz1ZjX6mp7Oda TrMkdxSRR3/J2JLeCxikEPI49uTT6pk= -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:26 2025 by rpki-client