$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa File: c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa (raw, json) Hash identifier: WT+A1gGdao/5+Lnm+pjpysVTf6NIaFg6Zu5kA5FnOU4= Subject key identifier: B2:BD:00:53:43:4B:93:2B:F2:20:B1:0A:A5:DC:1A:CE:73:19:EC:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC0210B5277DA13813FB40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.29.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:02:10:b5:27:7d:a1:38:13:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=24f648c8-af46-4994-8c0e-994e4cc16322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:48:d6:9e:ea:5c:ff:2d:a5:8c:b0:cd:29: 39:8e:a3:52:92:c1:e2:a9:bb:8c:28:a4:06:b2:e9: 41:d0:5d:69:f7:ab:59:4e:7f:d2:f7:49:f3:df:14: e5:10:02:c8:45:60:c5:db:e5:e1:34:a0:74:42:dd: d9:24:cd:45:d4:76:61:40:a7:04:eb:81:17:d2:41: 0a:b8:6f:8b:87:2e:4e:78:e0:fa:d3:2b:8c:db:88: 6a:14:ff:41:ab:9c:88:85:65:b6:e2:73:73:66:2f: d7:68:d9:3a:36:f0:b4:91:47:58:90:4d:c8:aa:2e: fb:9c:f1:9b:10:be:fa:53:4f:7f:d5:38:1e:4a:c4: b1:65:ec:8a:e4:5d:aa:22:23:a1:61:29:2c:dd:e3: d3:3e:eb:5e:59:6c:3d:b0:23:22:f3:5e:6d:e8:30: c0:17:34:c0:c1:3c:35:15:62:49:4f:33:0f:44:2e: 42:9a:92:76:18:d2:1d:fc:2e:7d:8d:59:5a:41:d0: b1:c5:b3:ed:6d:67:22:ad:20:4e:d8:da:56:0f:72: 5e:ea:4a:60:9c:69:4a:1a:3f:7b:3a:e5:5d:3f:05: 18:a9:ba:86:1b:57:e9:39:1c:5d:f4:c0:2f:28:d9: 35:5f:5e:52:24:4d:d7:0b:6c:a0:b5:9e:66:55:16: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BD:00:53:43:4B:93:2B:F2:20:B1:0A:A5:DC:1A:CE:73:19:EC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:70:82:46:53:6b:4a:06:14:ca:bd:e5:ff:87:07:cd:08:d8: 72:bd:c8:e2:e2:80:3a:54:9e:a0:45:7d:03:77:c5:b1:10:e5: 07:f0:d0:59:dd:a3:db:03:2b:0c:9f:a7:8a:4c:34:46:95:08: 44:3f:91:b3:a2:5c:9b:e1:bf:95:4d:27:39:d3:e2:b4:c2:cb: bd:c0:6e:5b:b8:19:fa:05:30:d5:4b:26:88:71:3f:0e:53:4a: a6:f2:24:70:f1:17:37:a7:d5:ba:a2:59:cf:e6:aa:4c:51:e0: 43:86:5d:4e:f5:9e:62:71:21:da:5a:b0:7e:3a:df:7f:8c:b7: 67:ae:dc:84:22:aa:14:cf:4b:2c:1b:c3:75:5a:66:f4:6f:77: 99:cc:e3:c8:2d:ad:10:14:1a:85:5b:92:22:72:a7:97:2a:db: 62:89:b2:53:d4:a6:6f:77:7b:55:3e:76:52:08:55:9c:dc:5c: bd:69:18:27:92:47:7d:a2:18:1b:7d:c6:1b:b5:c0:3e:59:09: c2:4f:b5:57:56:34:6c:79:21:cb:54:1a:43:82:52:18:d9:e7: e3:b2:cf:da:e4:04:4c:12:e3:ec:3b:2f:7b:a3:18:aa:45:04: e4:51:e4:d4:9d:d8:15:e9:8a:da:4c:dc:85:00:f0:bf:5f:35: 58:a8:54:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3AIQtSd9oTgT+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MjRmNjQ4YzgtYWY0Ni00OTk0LThjMGUtOTk0ZTRjYzE2MzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXVI1p7qXP8tpYywzSk5jqNSksHiqbuMKKQG sulB0F1p96tZTn/S90nz3xTlEALIRWDF2+XhNKB0Qt3ZJM1F1HZhQKcE64EX0kEK uG+Lhy5OeOD60yuM24hqFP9Bq5yIhWW24nNzZi/XaNk6NvC0kUdYkE3Iqi77nPGb EL76U09/1TgeSsSxZeyK5F2qIiOhYSks3ePTPuteWWw9sCMi815t6DDAFzTAwTw1 FWJJTzMPRC5CmpJ2GNId/C59jVlaQdCxxbPtbWcirSBO2NpWD3Je6kpgnGlKGj97 OuVdPwUYqbqGG1fpORxd9MAvKNk1X15SJE3XC2ygtZ5mVRaMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK9AFNDS5Mr8iCxCqXcGs5zGewiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzFjNzhhMTktZDlkNS0z ZmEyLWJjMGMtNTJlYWMxNTQwYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhwgkZTa0oGFMq95f+HB80I2HK9yOLigDpUnqBFfQN3xbEQ5Qfw0Fnd o9sDKwyfp4pMNEaVCEQ/kbOiXJvhv5VNJznT4rTCy73Ablu4GfoFMNVLJohxPw5T SqbyJHDxFzen1bqiWc/mqkxR4EOGXU71nmJxIdpasH4633+Mt2eu3IQiqhTPSywb w3VaZvRvd5nM48gtrRAUGoVbkiJyp5cq22KJslPUpm93e1U+dlIIVZzcXL1pGCeS R32iGBt9xhu1wD5ZCcJPtVdWNGx5IctUGkOCUhjZ5+Oyz9rkBEwS4+w7L3ujGKpF BORR5NSd2BXpitpM3IUA8L9fNVioVCo= -----END CERTIFICATE-----Generated at Tue Aug 5 22:59:49 2025 by rpki-client