$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b15424d3-ec1c-340c-a268-61f5c6ba2813.roa File: b15424d3-ec1c-340c-a268-61f5c6ba2813.roa (raw, json) Hash identifier: fm39OpIvwtsNgXHxchv8ruOuUSmpk7PmzdJ61B76ds4= Subject key identifier: 53:C8:65:C6:66:70:F1:D2:ED:9D:46:68:36:0E:5A:BD:53:92:7F:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412505962BD7427A2B1ACC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b15424d3-ec1c-340c-a268-61f5c6ba2813.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.29.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:50:59:62:bd:74:27:a2:b1:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1c241f3c-a075-49c8-bf91-f868bb04c4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:9a:de:57:dd:17:4a:47:3d:d3:66:6a:1a: 0c:ee:76:0c:26:b9:d4:cf:e6:bd:5b:81:01:19:b8: b3:d2:d8:f6:16:41:43:98:39:79:68:45:86:59:0e: c4:7c:7b:03:69:89:1c:e7:76:16:d7:07:5f:d3:81: a9:2d:2f:75:74:b2:4a:8f:43:77:53:32:09:b9:04: 54:c1:df:36:32:88:9d:5a:d2:66:6f:cf:a1:15:d9: ee:b3:9f:dc:4d:50:9c:f3:67:26:42:af:c6:e6:4c: a8:dc:1b:c1:fc:08:93:89:34:74:24:22:2a:d1:95: ea:5e:5d:bd:82:23:c3:03:ea:15:eb:9d:28:cf:f8: b2:53:72:81:88:fb:7d:0f:63:9e:b2:aa:15:a0:9c: c2:82:b0:c6:da:e8:f0:7a:01:22:eb:63:db:f9:d1: b9:6b:5e:5d:cb:c2:be:8e:a4:14:f7:57:fd:8d:cf: 00:24:7a:29:8c:7d:5b:29:6d:87:e8:75:40:82:50: e5:5e:e1:4e:ae:4d:da:4a:fd:e5:a5:76:38:a5:b1: b1:e2:e2:d9:97:4f:10:4e:00:0b:3d:f6:c7:1a:8e: 1f:4d:5d:9b:79:6e:9e:30:10:94:42:7a:f0:d4:9f: c9:e7:f8:aa:d4:33:7b:d4:1f:6c:9c:d5:76:2b:b4: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C8:65:C6:66:70:F1:D2:ED:9D:46:68:36:0E:5A:BD:53:92:7F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b15424d3-ec1c-340c-a268-61f5c6ba2813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:db:60:70:15:7f:ab:c3:f1:e6:a5:3d:9b:1b:a4:8b:55:b8: 84:87:ec:fd:16:99:50:31:c8:39:73:be:fc:59:22:99:af:f2: ea:5e:69:45:99:e2:d0:92:25:e0:37:82:09:60:8d:61:2c:85: 5d:c5:c7:c5:6e:3c:a5:b9:fb:6d:ce:7d:07:ef:1c:f4:08:37: d0:b0:31:8b:50:1d:e4:e2:1f:79:7a:3d:45:5c:03:85:e3:a6: d0:9c:af:8c:18:80:40:d4:60:3a:58:52:e6:52:36:a0:27:ef: 25:58:1c:99:61:e2:51:f4:a1:22:d6:fd:7d:ae:4b:55:fd:5d: 68:72:fb:47:56:b4:a7:2e:45:22:5d:60:24:a8:1b:74:8a:93: 99:68:22:43:58:b4:f5:dd:7c:74:5e:60:ce:da:e3:15:cd:6f: 2f:25:39:9f:d5:a3:37:d6:41:19:c5:55:73:c7:0c:94:cb:db: b4:6a:4e:b6:02:38:4e:43:92:d7:79:e4:e7:ec:dc:71:66:6a: fe:fc:c0:5a:42:b9:19:15:14:61:83:9b:b0:09:63:74:ae:73: 0f:87:48:f2:82:43:bb:2b:0f:f3:c7:7b:05:e6:7c:0c:cb:4d: d6:df:d4:e5:2a:78:69:5e:d6:de:f3:ad:34:e6:66:b3:60:84: 0b:18:d2:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElBZYr10J6KxrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWMyNDFmM2MtYTA3NS00OWM4LWJmOTEtZjg2OGJiMDRjNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIya3lfdF0pHPdNmahoM7nYMJrnUz+a9W4EB Gbiz0tj2FkFDmDl5aEWGWQ7EfHsDaYkc53YW1wdf04GpLS91dLJKj0N3UzIJuQRU wd82MoidWtJmb8+hFdnus5/cTVCc82cmQq/G5kyo3BvB/AiTiTR0JCIq0ZXqXl29 giPDA+oV650oz/iyU3KBiPt9D2OesqoVoJzCgrDG2ujwegEi62Pb+dG5a15dy8K+ jqQU91f9jc8AJHopjH1bKW2H6HVAglDlXuFOrk3aSv3lpXY4pbGx4uLZl08QTgAL PfbHGo4fTV2beW6eMBCUQnrw1J/J5/iq1DN71B9snNV2K7SmjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPIZcZmcPHS7Z1GaDYOWr1Tkn+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjE1NDI0ZDMtZWMxYy0z NDBjLWEyNjgtNjFmNWM2YmEyODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHbYHAVf6vD8ealPZsbpItVuISH7P0WmVAxyDlzvvxZIpmv8upeaUWZ 4tCSJeA3gglgjWEshV3Fx8VuPKW5+23OfQfvHPQIN9CwMYtQHeTiH3l6PUVcA4Xj ptCcr4wYgEDUYDpYUuZSNqAn7yVYHJlh4lH0oSLW/X2uS1X9XWhy+0dWtKcuRSJd YCSoG3SKk5loIkNYtPXdfHReYM7a4xXNby8lOZ/VozfWQRnFVXPHDJTL27RqTrYC OE5Dktd55Ofs3HFmav78wFpCuRkVFGGDm7AJY3Sucw+HSPKCQ7srD/PHewXmfAzL Tdbf1OUqeGle1t7zrTTmZrNghAsY0ng= -----END CERTIFICATE-----Generated at Tue Aug 5 23:09:07 2025 by rpki-client