$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa File: a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa (raw, json) Hash identifier: At5/oAOukrL7Nb7jTQQQUpuxXJeVNEVUYa0N7ooVXbw= Subject key identifier: 72:15:AC:46:07:0D:26:2D:D9:D0:BB:B4:F0:13:B0:B7:8F:B3:C9:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124490A06ABE632EAE1880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.29.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:44:90:a0:6a:be:63:2e:ae:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0a81989d-50af-4868-8813-b4ed5ba3f9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:ad:17:7a:0b:25:92:4d:d6:fb:96:c8:a0: 77:2b:a9:34:1d:21:84:77:5d:97:e8:87:19:1f:69: c6:d6:0a:4f:13:14:2e:a7:af:10:ce:da:c8:42:6f: f0:38:8e:23:83:7f:2c:a5:07:ab:c2:37:45:27:8a: c2:97:68:a2:f0:0b:28:d7:f8:97:89:cd:73:c9:26: 54:d9:04:ea:6b:68:95:00:e7:36:b5:e2:dc:8f:36: 90:58:d5:60:41:09:8d:e4:74:b4:a0:fc:54:97:e5: db:1c:da:ad:8b:58:11:c1:3f:6b:2d:79:03:59:34: 0e:b0:82:13:4b:22:8d:68:3f:ab:2e:c0:66:e6:fb: 86:8e:85:e7:bd:1f:eb:86:69:e4:82:5e:7f:2d:4c: b1:bf:15:48:29:12:e1:f2:e1:18:5c:48:55:a5:e5: d9:ba:e5:dd:12:fb:18:9f:08:7a:ed:f4:75:0e:e8: 39:ae:81:e2:cb:d8:98:ca:0a:fe:fb:19:b6:52:8b: 73:e0:ad:6c:c6:27:72:17:bc:20:40:26:90:23:51: 1f:d7:ff:0d:24:c1:3c:d2:9e:0f:6c:48:5a:c3:8b: 89:78:ec:a4:f9:04:25:83:0d:ff:01:26:bf:89:ef: 3a:bc:07:8c:bd:4d:03:c1:aa:83:22:7d:aa:45:54: 94:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:15:AC:46:07:0D:26:2D:D9:D0:BB:B4:F0:13:B0:B7:8F:B3:C9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:eb:ae:c5:79:8d:0c:1b:25:ba:85:c4:eb:60:b9:98:d8:02: 68:67:c5:fe:f8:d2:f9:5b:1c:de:c5:6b:99:6c:05:f8:c8:63: d5:d9:4a:22:54:ac:6f:b8:fa:79:dc:95:b8:c3:4d:7f:07:26: ae:e3:2a:a7:71:bd:2b:bf:bd:8b:33:1c:3b:80:40:ce:b2:f5: 25:7f:32:31:d2:99:72:ad:dc:02:5c:3d:4c:f1:7f:de:f8:6e: 8b:ff:d5:41:d3:c4:39:f2:c8:16:6c:3b:a7:19:d5:c4:25:86: 24:68:8a:5a:51:bf:cb:a1:d2:99:32:8d:fe:49:29:d8:f6:9b: 9c:62:9a:98:29:34:a5:c1:d6:57:e0:35:ea:06:af:14:50:89: 32:4e:33:ae:25:06:ae:32:95:64:19:e3:b0:2c:77:a9:6d:30: d1:ab:0e:44:87:04:8f:87:7a:b9:0e:4a:79:4f:4f:0b:ee:15: 40:69:56:0a:a0:2c:f5:13:77:9e:65:5c:5c:c5:a2:81:57:26: 03:a8:af:c3:aa:47:16:7b:c3:de:0f:c4:fb:5e:47:72:07:08: dd:91:26:bf:91:5b:a5:00:70:9c:2c:c5:b7:8c:f2:78:61:c2: 0d:38:8c:6f:92:6b:37:21:39:c6:5c:bd:83:5d:40:73:7f:f9: b1:a4:35:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkSQoGq+Yy6uGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGE4MTk4OWQtNTBhZi00ODY4LTg4MTMtYjRlZDViYTNmOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdqtF3oLJZJN1vuWyKB3K6k0HSGEd12X6IcZ H2nG1gpPExQup68QztrIQm/wOI4jg38spQerwjdFJ4rCl2ii8Aso1/iXic1zySZU 2QTqa2iVAOc2teLcjzaQWNVgQQmN5HS0oPxUl+XbHNqti1gRwT9rLXkDWTQOsIIT SyKNaD+rLsBm5vuGjoXnvR/rhmnkgl5/LUyxvxVIKRLh8uEYXEhVpeXZuuXdEvsY nwh67fR1Dug5roHiy9iYygr++xm2Uotz4K1sxidyF7wgQCaQI1Ef1/8NJME80p4P bEhaw4uJeOyk+QQlgw3/ASa/ie86vAeMvU0DwaqDIn2qRVSUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIVrEYHDSYt2dC7tPATsLePs8kkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhYzBhNjktMTk4Ny0z MDMyLWJiZTUtNGY3YmE4MDc4M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbrrsV5jQwbJbqFxOtguZjYAmhnxf740vlbHN7Fa5lsBfjIY9XZSiJU rG+4+nnclbjDTX8HJq7jKqdxvSu/vYszHDuAQM6y9SV/MjHSmXKt3AJcPUzxf974 bov/1UHTxDnyyBZsO6cZ1cQlhiRoilpRv8uh0pkyjf5JKdj2m5ximpgpNKXB1lfg NeoGrxRQiTJOM64lBq4ylWQZ47Asd6ltMNGrDkSHBI+HerkOSnlPTwvuFUBpVgqg LPUTd55lXFzFooFXJgOor8OqRxZ7w94PxPteR3IHCN2RJr+RW6UAcJwsxbeM8nhh wg04jG+SazchOcZcvYNdQHN/+bGkNZ4= -----END CERTIFICATE-----Generated at Wed Aug 6 04:14:39 2025 by rpki-client