$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa File: 9d9be207-a67e-35f2-b44f-60bfe095dea2.roa (raw, json) Hash identifier: 1U3VXUQ2UFB1W12llF2wlrGW2Q+5EOgzea/r639m/3U= Subject key identifier: 19:63:E2:5E:CD:6B:3C:A1:93:A9:3B:46:6B:C9:05:09:4B:C3:33:F4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841253F1E2D0EA61EB16D8C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:53:f1:e2:d0:ea:61:eb:16:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=aff6e3ce-3acc-422b-b0b9-43dc085cbe50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ad:49:59:96:4b:86:fa:c5:05:c7:1f:44:e0: 02:e5:42:25:9a:cd:53:9a:52:80:ea:78:a2:13:a0: 35:ee:f4:10:6b:d5:f2:49:d5:c3:51:48:41:fb:36: e0:b1:d2:68:f4:e0:e2:f8:fa:6e:7f:1e:b0:2d:a9: be:86:45:2c:cb:aa:07:97:3c:29:b9:55:2c:64:dd: bf:7d:5f:81:e8:e3:98:fb:47:af:ec:ae:dd:7f:ed: 5b:34:74:da:94:4a:b9:00:db:6c:9a:97:fc:44:31: ff:bb:8e:69:1f:ed:82:cc:5f:28:04:1e:e0:08:a0: 9f:2b:9b:86:36:ed:d7:5f:e8:34:7c:d4:1b:a7:d2: dc:37:77:71:12:e9:f3:c4:fa:29:76:23:25:ba:d0: fa:9a:c4:9c:7b:62:4a:c4:e7:2f:9c:11:4b:f7:3b: e9:57:c5:3c:0f:34:94:b1:71:d4:e1:e0:30:0a:24: c6:c9:2e:5f:08:3f:c8:91:09:68:2b:3e:e1:06:7b: 1d:0e:e8:f2:34:8c:c4:6d:db:0d:ad:3a:8b:d9:8f: a8:64:66:70:5d:8b:41:d5:01:c7:de:de:cc:a7:2d: 4c:d1:94:70:1e:83:f9:1f:7d:4b:09:2a:0a:0a:00: ba:a5:4d:8a:f7:3d:26:7a:c6:a9:44:4f:f3:03:d6: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:63:E2:5E:CD:6B:3C:A1:93:A9:3B:46:6B:C9:05:09:4B:C3:33:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3c:a0:9b:2b:2e:37:65:14:9a:a6:92:b1:72:9a:12:f5:01: 2d:47:2c:07:06:e7:92:33:b5:42:c5:9f:54:90:60:81:77:46: 37:2c:cb:a5:43:96:46:42:df:63:0f:9c:ef:46:d1:99:25:ee: e6:0e:e4:77:09:b7:18:08:fa:b2:67:2e:30:99:e0:6f:b6:5d: 85:7c:d2:9a:76:c5:1f:59:43:1b:07:a5:97:47:b3:58:2d:db: 4b:e4:dc:bc:89:12:26:d1:4a:ff:0a:1e:03:c0:4a:91:5a:40: a7:55:67:ee:d5:33:92:22:20:b3:bc:94:03:42:9b:e3:62:3e: 13:cc:2d:16:8e:be:81:d3:ed:7c:f1:68:c8:cc:ca:c8:f1:8b: 83:c0:38:ea:ec:46:3d:e5:bf:a2:4c:6a:c1:f0:5e:80:6d:cd: 43:61:21:da:69:89:30:9c:34:bc:7c:fc:96:ce:e7:3c:da:38: 31:25:93:16:c6:5a:c1:83:44:a0:6d:21:36:5c:a8:6b:1c:19: 6e:91:69:6c:72:ed:ca:fa:26:4e:c1:61:23:53:35:9a:d1:84: c2:b2:be:3a:32:49:fa:57:b6:ac:29:a4:24:b6:37:6d:1d:b2: 40:12:0a:b5:02:39:28:95:fb:83:27:11:d2:49:dc:1c:eb:01: 72:96:55:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElPx4tDqYesW2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWZmNmUzY2UtM2FjYy00MjJiLWIwYjktNDNkYzA4NWNiZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq1JWZZLhvrFBccfROAC5UIlms1TmlKA6nii E6A17vQQa9XySdXDUUhB+zbgsdJo9ODi+Ppufx6wLam+hkUsy6oHlzwpuVUsZN2/ fV+B6OOY+0ev7K7df+1bNHTalEq5ANtsmpf8RDH/u45pH+2CzF8oBB7gCKCfK5uG Nu3XX+g0fNQbp9LcN3dxEunzxPopdiMlutD6msSce2JKxOcvnBFL9zvpV8U8DzSU sXHU4eAwCiTGyS5fCD/IkQloKz7hBnsdDujyNIzEbdsNrTqL2Y+oZGZwXYtB1QHH 3t7Mpy1M0ZRwHoP5H31LCSoKCgC6pU2K9z0mesapRE/zA9YltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlj4l7Nazyhk6k7RmvJBQlLwzP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWQ5YmUyMDctYTY3ZS0z NWYyLWI0NGYtNjBiZmUwOTVkZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA8oJsrLjdlFJqmkrFymhL1AS1HLAcG55IztULFn1SQYIF3Rjcsy6VD lkZC32MPnO9G0Zkl7uYO5HcJtxgI+rJnLjCZ4G+2XYV80pp2xR9ZQxsHpZdHs1gt 20vk3LyJEibRSv8KHgPASpFaQKdVZ+7VM5IiILO8lANCm+NiPhPMLRaOvoHT7Xzx aMjMysjxi4PAOOrsRj3lv6JMasHwXoBtzUNhIdppiTCcNLx8/JbO5zzaODElkxbG WsGDRKBtITZcqGscGW6RaWxy7cr6Jk7BYSNTNZrRhMKyvjoySfpXtqwppCS2N20d skASCrUCOSiV+4MnEdJJ3BzrAXKWVdw= -----END CERTIFICATE-----Generated at Wed Aug 6 04:11:47 2025 by rpki-client