$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa File: bfef74fc-994c-3502-b355-4ccb17c00e10.roa (raw, json) Hash identifier: tsyCe3g+lYmrNAE8WSeSdx9kxN8uYvqb+Qedvq2snco= Subject key identifier: 0B:77:CD:B0:A7:C1:F0:51:54:F3:2A:F6:BB:51:91:0D:B7:06:D4:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A7BB0AAD80D1AAB2690802880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 173.31.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:aa:d8:0d:1a:ab:26:90:80:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=f5a8023a-a0c7-4c52-9542-20b3af745784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:db:be:3b:14:4f:03:ad:51:62:42:32:67: 8f:f6:a6:2d:1f:8b:bb:3f:71:eb:05:c5:e8:2d:56: 62:17:c9:f4:c9:f2:a5:ec:48:f9:73:53:d4:f5:d0: 9a:3e:92:04:b8:70:5b:ac:3f:0e:19:9e:38:0f:7f: ce:80:db:97:cb:ba:66:db:eb:94:af:88:19:ce:60: 1d:21:db:ac:83:03:0d:56:bc:47:97:cd:69:a6:62: e0:a7:1d:05:3e:6c:2a:f1:b9:0f:09:35:24:c5:20: 96:16:87:b4:72:5e:6e:62:6c:5b:ca:c3:c5:dc:df: 9f:16:0b:54:90:50:fc:c2:d1:5e:b6:db:10:73:49: 0b:0e:53:08:53:1b:59:dd:42:42:b7:3e:ba:d5:fb: 55:48:2d:2f:6d:7d:7f:cb:04:5d:20:3b:3a:f6:15: 0c:d1:3f:78:e5:7c:bf:e0:d8:48:7a:fb:21:cb:33: 2b:6f:41:30:f7:ff:31:67:37:53:2c:22:61:b9:9e: a7:92:6f:bb:22:1e:21:57:5e:43:4b:1c:88:d6:6b: 51:c0:5d:25:7a:b4:cd:37:85:3e:f9:2e:de:ed:35: d4:95:2f:89:97:19:88:db:0e:87:b1:ed:86:46:30: eb:89:74:21:77:1e:e7:7f:43:74:e5:30:09:9a:2f: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:77:CD:B0:A7:C1:F0:51:54:F3:2A:F6:BB:51:91:0D:B7:06:D4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3e:73:e8:ce:96:b7:5b:e1:10:aa:ed:68:97:be:f9:54:eb: 9a:b9:3d:a4:3a:f1:a4:62:38:04:5a:d0:95:4c:4c:96:e1:ac: 05:e1:2c:57:17:38:f5:4f:ba:7b:d4:6c:df:5d:f3:5c:3d:8e: 7e:7e:27:d3:22:49:2f:31:b0:c8:51:44:9a:d5:57:65:ab:db: 0c:51:8f:09:5e:a5:4b:28:40:01:00:d2:9b:d7:fc:9b:f1:43: 1f:10:e8:5b:65:af:da:e4:43:79:33:d4:83:71:d2:b7:f6:ff: 60:e3:37:a2:90:06:39:8c:12:b2:9e:96:29:bb:1d:ff:82:12: 84:3d:75:e9:3d:45:15:28:30:4a:a3:83:2b:78:de:44:16:b0: 4b:89:f8:05:e4:39:93:a6:f2:d4:77:f2:9f:31:17:26:d8:c1: 8f:9a:28:1d:fa:ca:42:0a:23:e1:32:a5:bb:65:56:0c:64:f8: 38:f4:74:f6:b1:bd:f1:72:7a:4b:34:06:53:6e:5d:0f:1f:c4: 6b:18:9a:49:4a:a8:33:1a:0d:06:b8:22:85:24:9a:da:d1:29: 4d:56:91:12:10:a6:27:51:c9:69:27:cc:27:ee:ae:bb:a2:7b: fc:c2:a1:52:f3:eb:c0:8a:e3:b5:8e:c8:ac:59:45:2a:89:10: 65:ec:a1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sKrYDRqrJpCAKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZjVhODAyM2EtYTBjNy00YzUyLTk1NDItMjBiM2FmNzQ1Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpfbvjsUTwOtUWJCMmeP9qYtH4u7P3HrBcXo LVZiF8n0yfKl7Ej5c1PU9dCaPpIEuHBbrD8OGZ44D3/OgNuXy7pm2+uUr4gZzmAd IdusgwMNVrxHl81ppmLgpx0FPmwq8bkPCTUkxSCWFoe0cl5uYmxbysPF3N+fFgtU kFD8wtFettsQc0kLDlMIUxtZ3UJCtz661ftVSC0vbX1/ywRdIDs69hUM0T945Xy/ 4NhIevshyzMrb0Ew9/8xZzdTLCJhuZ6nkm+7Ih4hV15DSxyI1mtRwF0lerTNN4U+ +S7e7TXUlS+JlxmI2w6Hse2GRjDriXQhdx7nf0N05TAJmi8qcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAt3zbCnwfBRVPMq9rtRkQ23BtSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlZjc0ZmMtOTk0Yy0z NTAyLWIzNTUtNGNjYjE3YzAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA+c+jOlrdb4RCq7WiXvvlU65q5PaQ68aRiOARa0JVMTJbhrAXhLFcX OPVPunvUbN9d81w9jn5+J9MiSS8xsMhRRJrVV2Wr2wxRjwlepUsoQAEA0pvX/Jvx Qx8Q6Ftlr9rkQ3kz1INx0rf2/2DjN6KQBjmMErKelim7Hf+CEoQ9dek9RRUoMEqj gyt43kQWsEuJ+AXkOZOm8tR38p8xFybYwY+aKB36ykIKI+EypbtlVgxk+Dj0dPax vfFyeks0BlNuXQ8fxGsYmklKqDMaDQa4IoUkmtrRKU1WkRIQpidRyWknzCfurrui e/zCoVLz68CK47WOyKxZRSqJEGXsoWA= -----END CERTIFICATE-----Generated at Mon Aug 4 22:17:32 2025 by rpki-client