$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa File: bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa (raw, json) Hash identifier: dgyIRkjgaAKeER+Gs99hup5aVhxEd0UNRiZUwS8KXos= Subject key identifier: 6D:EB:D4:61:88:3B:2D:36:A4:94:8D:B6:0E:D3:5E:DE:18:B1:EC:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DBFE05DC9FBD157D4CF800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:fe:05:dc:9f:bd:15:7d:4c:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=76b47adf-b8df-4844-ae38-b25548bfc0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:3c:93:c4:ec:1b:50:15:3e:dc:9c:1f:a9: 5f:0c:f5:d3:a0:a8:7a:af:08:40:34:e6:81:0d:7c: 36:86:5c:a1:7b:68:5f:43:a4:d9:8a:ff:0c:7c:28: 8f:91:d1:7f:50:36:97:2c:17:2a:a4:ef:6b:cb:e7: 1b:32:13:f9:46:60:9c:55:de:0b:5a:fb:52:83:e1: 44:7f:6a:3d:7d:74:9f:2b:d5:86:86:f5:42:a4:7e: 95:73:cb:72:15:75:ba:4d:6c:49:78:94:96:86:81: 80:58:66:2b:7e:aa:76:e4:1e:bb:50:b0:80:ff:71: bf:54:50:4e:8b:05:59:38:e3:9a:8e:c0:74:fb:7b: 37:11:48:32:9b:92:e2:af:83:79:7d:5f:57:4d:a3: c9:4f:2d:af:c1:c1:0b:21:f6:16:00:d5:c2:bb:aa: cd:2e:2e:01:25:52:07:d5:1f:8d:de:70:e0:f7:25: 32:5e:3d:df:d8:3c:e5:41:e3:87:2e:e5:69:70:96: 05:43:02:ba:29:58:a5:d8:4d:c0:d1:f9:a2:70:30: ac:2b:06:5b:bb:0d:7c:9d:b8:b0:d9:57:5e:c9:99: ec:91:d9:bb:a1:a1:bb:8b:07:9e:ab:f6:6c:76:20: e6:7d:d1:aa:74:85:4b:5e:f7:b2:3d:30:cf:75:81: 32:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:D4:61:88:3B:2D:36:A4:94:8D:B6:0E:D3:5E:DE:18:B1:EC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf3e5360-3519-3ef1-a551-44b1b707b8cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:54:6c:b2:0d:ca:89:1b:4b:bc:70:c5:ac:fa:23:8a:c4:4d: 0e:2a:cf:a4:c1:d3:b6:b5:7e:49:e1:20:f6:d3:48:03:db:99: b0:7a:a0:dc:35:09:eb:aa:24:53:e6:f9:81:33:52:e0:ee:9c: 9b:59:e7:39:d1:5b:ac:1a:7f:ab:cc:65:ff:b2:b5:68:9f:56: ba:44:1c:d1:4e:b5:32:2c:30:08:f9:ac:17:a4:1a:51:10:01: 37:1c:16:09:4f:ed:ac:35:b9:cb:80:d9:0c:bc:7e:27:39:32: 99:78:94:ab:86:bf:c8:85:89:e5:00:31:99:79:35:4a:c5:a3: 45:29:4d:11:10:4f:d2:98:55:1f:72:ad:ef:3c:b1:26:4f:36: dd:12:c9:55:87:4c:4a:5e:cb:07:e1:0d:f4:1c:40:dc:a0:e9: cb:3f:cd:28:dd:d7:b9:48:c9:fa:63:de:a6:84:51:4f:5e:8f: 23:6b:7b:7f:7b:b9:45:f3:d7:26:84:22:72:7f:c8:22:db:30: 5b:46:7b:66:37:49:01:d4:9a:10:10:35:71:32:d6:0e:e1:4c: 97:66:ee:7c:3e:a6:39:4b:46:68:bb:31:ac:c5:72:36:7e:2d: ac:98:5e:b4:8f:3d:61:aa:c0:ee:92:2a:da:11:3d:c7:a9:07: 79:82:3c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/4F3J+9FX1M+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzZiNDdhZGYtYjhkZi00ODQ0LWFlMzgtYjI1NTQ4YmZjMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BU8k8TsG1AVPtycH6lfDPXToKh6rwhANOaB DXw2hlyhe2hfQ6TZiv8MfCiPkdF/UDaXLBcqpO9ry+cbMhP5RmCcVd4LWvtSg+FE f2o9fXSfK9WGhvVCpH6Vc8tyFXW6TWxJeJSWhoGAWGYrfqp25B67ULCA/3G/VFBO iwVZOOOajsB0+3s3EUgym5Lir4N5fV9XTaPJTy2vwcELIfYWANXCu6rNLi4BJVIH 1R+N3nDg9yUyXj3f2DzlQeOHLuVpcJYFQwK6KVil2E3A0fmicDCsKwZbuw18nbiw 2VdeyZnskdm7oaG7iweeq/ZsdiDmfdGqdIVLXveyPTDPdYEyJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3r1GGIOy02pJSNtg7TXt4YseyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmYzZTUzNjAtMzUxOS0z ZWYxLWE1NTEtNDRiMWI3MDdiOGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJUbLINyokbS7xwxaz6I4rETQ4qz6TB07a1fknhIPbTSAPbmbB6oNw1 CeuqJFPm+YEzUuDunJtZ5znRW6waf6vMZf+ytWifVrpEHNFOtTIsMAj5rBekGlEQ ATccFglP7aw1ucuA2Qy8fic5Mpl4lKuGv8iFieUAMZl5NUrFo0UpTREQT9KYVR9y re88sSZPNt0SyVWHTEpeywfhDfQcQNyg6cs/zSjd17lIyfpj3qaEUU9ejyNre397 uUXz1yaEInJ/yCLbMFtGe2Y3SQHUmhAQNXEy1g7hTJdm7nw+pjlLRmi7MazFcjZ+ LayYXrSPPWGqwO6SKtoRPcepB3mCPNo= -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:50 2025 by rpki-client