$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa File: bfe8432c-0a39-369f-abd1-923404f53a2f.roa (raw, json) Hash identifier: MULJYHUfGpLwFzAy/TZKFDY9nww/Eyzmwvcn9lNjC58= Subject key identifier: 7D:7E:0D:34:7D:0E:03:5C:48:66:FE:6D:A9:EA:6A:B9:AE:17:B0:32 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841243948A3F25AFEA72CE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:43:94:8a:3f:25:af:ea:72:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a441809d-da04-4eb9-a56f-976b6e7da58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:19:f3:11:55:36:c6:aa:0f:06:a2:bf:7d: 2d:ee:b1:44:3d:5c:f2:34:2e:e2:b9:5a:75:c4:3f: 7a:56:06:ba:dd:af:4e:07:ee:69:6a:b4:16:dc:a4: 26:08:9a:82:fc:83:8a:d0:ae:c5:e5:21:e3:db:10: ae:4a:b4:38:41:10:6c:7a:90:f1:5a:e9:52:ed:63: 98:ff:cc:f4:53:2c:20:77:59:aa:d2:07:ef:21:f6: b3:7c:2e:8a:5a:4e:50:8d:e9:02:97:0d:a6:a8:3c: 27:1f:f0:23:29:0f:bf:b5:8d:d0:52:22:fb:64:47: b1:bc:f1:1f:51:1b:13:bf:c3:21:84:3f:fa:7d:9c: bf:e6:b5:4b:90:f7:5b:cd:32:c9:a1:69:5e:67:44: c6:66:04:44:49:71:5a:28:e4:c9:a1:72:bc:bb:af: 51:2c:35:4e:88:4d:b0:56:f2:ac:44:04:13:61:b7: f9:a6:ce:13:27:54:95:0c:1d:ae:8c:ca:f0:a4:3b: 4c:c8:58:a4:42:34:29:73:a7:b1:db:54:92:cc:55: 72:42:e0:f6:c7:99:f7:9b:36:88:96:05:cb:f7:bf: af:27:33:58:7b:89:e2:93:27:56:ae:25:50:ec:64: d8:c1:26:e4:11:b8:2e:08:03:47:bf:2d:23:25:2c: 57:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7E:0D:34:7D:0E:03:5C:48:66:FE:6D:A9:EA:6A:B9:AE:17:B0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:76:8f:e0:2a:7d:4a:54:a7:44:88:d7:6d:21:84:ef:11:45: 9f:12:0c:25:cf:d3:3f:6c:82:29:6c:a2:fb:62:3b:12:e9:40: 65:9b:5d:79:8f:a7:54:ad:c4:00:ee:9d:5d:91:74:0a:33:50: 4a:6a:9f:38:c4:21:5c:8c:78:8d:14:c3:10:82:31:41:eb:4e: de:7d:e0:b9:c3:b0:82:41:90:18:47:6c:b5:40:f9:f5:34:6a: c7:36:9b:cc:d3:a1:8a:1f:9e:00:ca:14:27:97:1c:42:7f:71: 7a:79:08:59:6c:27:d5:41:f9:d5:77:58:0c:12:6d:ec:1d:14: 36:92:b1:28:50:d0:0a:bf:b7:f6:d9:01:15:36:4d:f2:34:00: 3f:93:9e:ff:2d:4b:28:6d:46:89:e6:d4:ff:61:ca:b9:58:d2: 07:fb:09:12:40:a7:47:44:89:fa:57:c4:05:a5:5f:88:ee:23: ff:b5:c7:87:37:fb:9b:91:97:2e:fe:ec:2c:70:d1:99:a1:30: b7:8c:b9:da:62:13:a7:83:cc:66:f4:00:5f:84:fe:66:ad:c7: 77:a5:01:e2:c2:e6:22:cb:f0:d7:aa:d2:16:48:fc:b3:5e:45: 7d:4e:e1:83:9f:76:6b:43:ea:96:c1:c2:34:b5:82:f0:33:59: 43:a7:a5:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkOUij8lr+pyzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTQ0MTgwOWQtZGEwNC00ZWI5LWE1NmYtOTc2YjZlN2RhNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaEZ8xFVNsaqDwaiv30t7rFEPVzyNC7iuVp1 xD96Vga63a9OB+5parQW3KQmCJqC/IOK0K7F5SHj2xCuSrQ4QRBsepDxWulS7WOY /8z0Uywgd1mq0gfvIfazfC6KWk5QjekClw2mqDwnH/AjKQ+/tY3QUiL7ZEexvPEf URsTv8MhhD/6fZy/5rVLkPdbzTLJoWleZ0TGZgRESXFaKOTJoXK8u69RLDVOiE2w VvKsRAQTYbf5ps4TJ1SVDB2ujMrwpDtMyFikQjQpc6ex21SSzFVyQuD2x5n3mzaI lgXL97+vJzNYe4nikydWriVQ7GTYwSbkEbguCANHvy0jJSxXtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1+DTR9DgNcSGb+banqarmuF7AyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlODQzMmMtMGEzOS0z NjlmLWFiZDEtOTIzNDA0ZjUzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp2j+AqfUpUp0SI120hhO8RRZ8SDCXP0z9sgilsovtiOxLpQGWbXXmP p1StxADunV2RdAozUEpqnzjEIVyMeI0UwxCCMUHrTt594LnDsIJBkBhHbLVA+fU0 asc2m8zToYofngDKFCeXHEJ/cXp5CFlsJ9VB+dV3WAwSbewdFDaSsShQ0Aq/t/bZ ARU2TfI0AD+Tnv8tSyhtRonm1P9hyrlY0gf7CRJAp0dEifpXxAWlX4juI/+1x4c3 +5uRly7+7Cxw0ZmhMLeMudpiE6eDzGb0AF+E/matx3elAeLC5iLL8Neq0hZI/LNe RX1O4YOfdmtD6pbBwjS1gvAzWUOnpYY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:27:27 2025 by rpki-client