$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa File: c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa (raw, json) Hash identifier: mDoFunwEq2mceAwgDe2BcG6kYq8b/W6nUa+5QNXxZZ8= Subject key identifier: E4:73:7C:36:56:8A:FE:E2:FE:81:55:3B:31:FF:D4:26:EB:03:96:2B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81464CC2E9968B1279D91D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.29.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:4c:c2:e9:96:8b:12:79:d9:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=50fc33f0-22a5-45fe-919c-407c281e21b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:2d:a2:c0:36:f7:96:94:c6:90:f6:a5:2c: d4:e2:4b:6b:98:e1:e1:37:83:07:9d:4e:3a:aa:fc: 49:1b:5f:84:f7:0e:bc:87:6a:90:36:17:56:01:1d: 70:91:dc:7b:09:46:3d:18:40:a3:c3:62:b4:4b:6a: 1d:e9:59:54:47:e6:c5:32:f7:b9:a6:aa:25:fa:57: 76:14:a2:8a:31:ea:cb:69:a8:3f:eb:8e:fc:57:2b: cd:d0:b6:18:0a:94:b0:13:ed:50:06:c4:51:f1:ce: bc:2d:3a:a1:da:67:fb:78:22:1b:3e:84:8b:1d:06: c4:43:9d:88:78:17:9b:75:37:44:00:7a:88:67:16: 4e:ac:a4:7e:5b:2f:36:27:1e:4d:80:2b:66:81:5f: 9f:38:b1:70:1e:9d:7e:7c:70:8e:4f:a7:68:20:fe: cf:be:83:54:b8:04:6b:dc:de:a2:f8:6e:67:73:6a: 4a:dd:93:8b:85:c1:86:41:a9:61:05:30:b9:d7:c0: c5:e5:47:00:be:bd:a1:2e:28:cf:be:b8:63:de:bc: 5c:53:c2:b6:5d:ed:1a:e1:82:ae:91:eb:1d:d7:0d: 47:62:c8:a2:d3:e0:40:09:bc:fc:7a:d5:9c:c9:a7: 70:00:20:8b:c4:8e:73:28:a8:77:85:82:af:d3:51: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:73:7C:36:56:8A:FE:E2:FE:81:55:3B:31:FF:D4:26:EB:03:96:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:fa:dc:0b:3d:ad:38:51:d9:0c:7e:08:4d:a1:34:c9:51:70: dc:7e:be:f8:d9:41:c4:b5:69:09:99:7b:03:51:f8:1e:60:d9: 9d:36:08:5f:54:c8:d4:e3:d4:83:2d:df:85:9f:06:02:73:ce: 18:57:a0:3e:9f:ad:f3:4b:00:fd:e5:09:01:c4:ed:ca:ad:b6: 33:b0:e0:e7:2d:53:b5:94:4c:0c:c1:cc:48:a7:83:ab:5d:83: e3:1f:a4:af:9e:45:63:c5:3e:ea:ab:a8:22:43:2b:b7:13:20: 71:4c:fc:de:45:cd:a4:fa:81:69:e1:91:11:3f:91:e9:52:3a: d3:18:51:ba:8a:cc:74:bc:be:b5:6c:b1:47:39:f9:e4:b1:db: d4:a4:47:48:14:12:46:16:9f:68:c3:70:31:ba:ea:ff:e6:81: f6:41:7c:af:69:1d:9c:08:8c:d2:b0:97:31:49:26:e3:19:2d: bc:eb:ae:d2:52:ad:32:60:35:93:9d:65:eb:9b:05:f0:71:d3: 08:31:48:52:20:98:9b:91:51:35:71:31:1b:72:2d:1c:96:36: 44:e5:91:1c:8f:d3:63:e5:6f:85:01:c1:a8:c7:80:bc:c6:7f: 8d:54:45:02:ff:d6:ee:58:db:7e:92:a1:4b:4b:7f:76:47:3c: 9e:a7:46:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkzC6ZaLEnnZHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NTBmYzMzZjAtMjJhNS00NWZlLTkxOWMtNDA3YzI4MWUyMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEQtosA295aUxpD2pSzU4ktrmOHhN4MHnU46 qvxJG1+E9w68h2qQNhdWAR1wkdx7CUY9GECjw2K0S2od6VlUR+bFMve5pqol+ld2 FKKKMerLaag/6478VyvN0LYYCpSwE+1QBsRR8c68LTqh2mf7eCIbPoSLHQbEQ52I eBebdTdEAHqIZxZOrKR+Wy82Jx5NgCtmgV+fOLFwHp1+fHCOT6doIP7PvoNUuARr 3N6i+G5nc2pK3ZOLhcGGQalhBTC518DF5UcAvr2hLijPvrhj3rxcU8K2Xe0a4YKu kesd1w1HYsii0+BACbz8etWcyadwACCLxI5zKKh3hYKv01FwcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORzfDZWiv7i/oFVOzH/1CbrA5YrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMxYWM5MDEtMmQ4Ny0z YWNiLThhYTQtMmFmMWViNGU2NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv63As9rThR2Qx+CE2hNMlRcNx+vvjZQcS1aQmZewNR+B5g2Z02CF9U yNTj1IMt34WfBgJzzhhXoD6frfNLAP3lCQHE7cqttjOw4OctU7WUTAzBzEing6td g+MfpK+eRWPFPuqrqCJDK7cTIHFM/N5FzaT6gWnhkRE/kelSOtMYUbqKzHS8vrVs sUc5+eSx29SkR0gUEkYWn2jDcDG66v/mgfZBfK9pHZwIjNKwlzFJJuMZLbzrrtJS rTJgNZOdZeubBfBx0wgxSFIgmJuRUTVxMRtyLRyWNkTlkRyP02Plb4UBwajHgLzG f41URQL/1u5Y236SoUtLf3ZHPJ6nRn0= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:02 2025 by rpki-client