$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa File: b6bab816-d4d8-3af5-adf4-707f711c713e.roa (raw, json) Hash identifier: 5qYlXq/q7S5jINf1KiuDVDgcCPoZC2XZkpOsi0db5s0= Subject key identifier: 9C:BD:44:C5:A8:30:96:16:3C:64:19:B5:8F:A4:50:3C:D8:31:16:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410DEA36656FFDAD71B58A8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.29.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:de:a3:66:56:ff:da:d7:1b:58:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a46a5a1d-a074-4399-bafc-9c5de24666e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:0f:27:25:97:37:95:1a:8f:91:9a:50:66: 8b:4e:b9:8d:2f:5a:04:66:ed:3c:1b:ad:56:d4:71: 5e:24:3c:07:6a:bf:2d:bb:d3:15:9e:3b:b2:cf:af: 64:d0:61:23:cd:4e:fc:a5:76:90:bc:b6:db:fc:e0: 6f:68:f7:ee:8a:68:b2:fb:d0:b0:83:f9:09:33:07: aa:d1:57:82:f0:9f:e0:52:99:03:ba:7a:07:3e:b7: b7:88:4d:00:26:b4:1b:41:0b:66:67:ab:df:bd:d2: f0:8e:9c:77:43:f5:e1:e5:7c:65:d9:b5:39:0e:34: ea:bf:d9:f7:17:4c:d7:b6:52:a8:38:8b:56:94:74: 76:a1:30:ae:8f:56:53:df:cd:8b:da:d3:6d:2e:8a: a8:a2:46:f4:69:b1:77:cf:9d:3c:69:b5:ac:07:ed: 69:83:22:3f:53:6c:38:c6:5c:67:dd:df:8f:70:23: 2d:11:fc:bf:2f:1b:b8:24:b5:e9:dc:de:e1:61:96: a6:3e:06:c0:fc:c3:15:84:22:2e:64:16:79:e2:06: 0b:63:e8:54:fd:1a:25:ee:98:86:c4:12:13:6f:5f: 21:33:cd:8d:53:8e:b4:67:36:22:6a:17:5b:89:45: 71:bc:19:58:c0:12:b4:36:ca:44:19:b1:74:9c:a0: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BD:44:C5:A8:30:96:16:3C:64:19:B5:8F:A4:50:3C:D8:31:16:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6bab816-d4d8-3af5-adf4-707f711c713e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ed:8b:16:13:21:21:50:77:00:5e:b8:5b:5f:39:d9:ab:a2: 7a:dd:e3:34:bc:b1:62:5b:a7:49:48:df:a2:3e:55:d2:50:0e: a8:e2:42:31:60:b9:34:d7:92:aa:6e:79:38:19:5b:af:53:cb: 44:7d:ed:5b:7c:6d:d8:ef:8c:89:3b:eb:ef:a9:6c:a0:9c:61: 28:3f:d3:10:aa:e9:3e:fa:a8:b2:91:ce:92:6b:0e:d4:15:84: d9:f9:c6:f9:ac:fa:f1:4e:f6:90:af:d8:77:3a:48:a0:85:f6: b1:06:b0:e7:27:a8:73:d6:2b:37:af:5a:16:b6:19:76:d4:f9: bc:66:a4:47:80:b6:7a:14:95:06:f7:0a:59:dc:14:30:29:d7: 86:ca:4f:c1:ff:64:87:75:a2:9f:f3:d0:34:ba:87:4f:4e:e1: cf:8a:8e:75:31:bd:e6:1c:db:ef:8a:b3:4f:98:a3:b3:4a:a1: 99:0c:42:20:b0:ab:a6:26:90:fd:d8:f8:f0:28:1f:c3:60:48: 02:c7:6f:7f:23:ed:b9:e6:66:c9:4e:0e:d0:f5:06:e4:42:0b: 54:d9:dd:37:16:64:b8:74:59:00:03:6f:31:32:da:37:5b:ad: e4:4d:4a:00:a9:5b:b6:67:d8:e0:41:c0:2a:c5:0b:2b:80:1c: b8:ea:aa:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEN6jZlb/2tcbWKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTQ2YTVhMWQtYTA3NC00Mzk5LWJhZmMtOWM1ZGUyNDY2NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGUPJyWXN5Uaj5GaUGaLTrmNL1oEZu08G61W 1HFeJDwHar8tu9MVnjuyz69k0GEjzU78pXaQvLbb/OBvaPfuimiy+9Cwg/kJMweq 0VeC8J/gUpkDunoHPre3iE0AJrQbQQtmZ6vfvdLwjpx3Q/Xh5Xxl2bU5DjTqv9n3 F0zXtlKoOItWlHR2oTCuj1ZT382L2tNtLoqookb0abF3z508abWsB+1pgyI/U2w4 xlxn3d+PcCMtEfy/Lxu4JLXp3N7hYZamPgbA/MMVhCIuZBZ54gYLY+hU/Rol7piG xBITb18hM82NU460ZzYiahdbiUVxvBlYwBK0NspEGbF0nKCh2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy9RMWoMJYWPGQZtY+kUDzYMRbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjZiYWI4MTYtZDRkOC0z YWY1LWFkZjQtNzA3ZjcxMWM3MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELtixYTISFQdwBeuFtfOdmronrd4zS8sWJbp0lI36I+VdJQDqjiQjFg uTTXkqpueTgZW69Ty0R97Vt8bdjvjIk76++pbKCcYSg/0xCq6T76qLKRzpJrDtQV hNn5xvms+vFO9pCv2Hc6SKCF9rEGsOcnqHPWKzevWha2GXbU+bxmpEeAtnoUlQb3 ClncFDAp14bKT8H/ZId1op/z0DS6h09O4c+KjnUxveYc2++Ks0+Yo7NKoZkMQiCw q6YmkP3Y+PAoH8NgSALHb38j7bnmZslODtD1BuRCC1TZ3TcWZLh0WQADbzEy2jdb reRNSgCpW7Zn2OBBwCrFCyuAHLjqqoA= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:00 2025 by rpki-client