$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49633c0-e4d6-3326-87e7-8f541659f819.roa File: c49633c0-e4d6-3326-87e7-8f541659f819.roa (raw, json) Hash identifier: nkoEL4G/KNIRLHEFmzZhZUJPRE1+2MKqmqweTAAPp+k= Subject key identifier: 4B:08:C3:4F:27:BC:89:28:56:48:1A:78:F7:2A:B3:C9:D4:E8:4B:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB6A29A4F2332B6766DE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49633c0-e4d6-3326-87e7-8f541659f819.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.29.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:6a:29:a4:f2:33:2b:67:66:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e35ebdc4-28ac-44df-81f9-2e679aa3e5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:6f:ad:b1:37:1b:16:b4:39:0f:b0:37:48: 08:8c:28:67:8e:84:99:ee:e1:df:07:09:0c:d6:6e: 63:cc:d6:97:8f:8c:20:1c:98:90:e4:82:d6:d1:b9: 14:d6:64:62:67:c0:3f:1f:2f:bb:bc:b8:c6:b4:9c: db:96:92:26:df:9e:4b:a2:37:67:90:5f:1c:c0:77: 39:d1:11:a3:18:6c:e1:cf:a5:56:72:d6:b9:7f:e4: 18:e5:e1:56:46:ca:92:b8:da:2a:33:85:88:d1:b0: a8:11:14:64:a4:6a:57:1f:09:0a:39:d0:d4:58:f7: 99:09:bd:cf:6a:43:2e:3b:55:3f:83:ef:46:ff:73: 1f:65:9c:5b:62:43:c1:eb:f1:3a:1a:40:5c:5d:2f: a4:9a:4b:e0:ff:81:cc:3a:d9:96:36:22:a1:cb:9b: 6c:5c:ff:0b:91:32:85:1c:10:4d:e4:a4:e3:e0:a5: 9e:b3:c8:9d:e9:ec:15:53:55:7c:1b:20:c3:67:a6: cd:50:9d:56:b8:39:76:cd:73:74:06:b8:da:e8:77: a5:01:87:e9:71:df:f9:90:ce:e4:99:11:2c:5c:0b: 79:cc:8e:77:5e:73:50:db:c8:1f:b0:b7:c4:9c:64: 3f:97:d9:e5:10:67:ff:02:e0:76:f2:b1:bf:02:a4: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:08:C3:4F:27:BC:89:28:56:48:1A:78:F7:2A:B3:C9:D4:E8:4B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49633c0-e4d6-3326-87e7-8f541659f819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:32:33:83:86:fb:96:c5:9a:3b:4d:42:8a:21:f1:7b:24:1d: 2f:d4:55:31:72:ea:70:49:4f:3b:a4:dc:a2:f7:f6:cb:83:71: 29:b9:88:31:a6:78:e4:fa:48:e2:c1:5c:bd:ac:a4:b9:30:4d: 05:c2:44:d0:e0:20:8d:b3:dc:3b:d4:c9:25:2a:2f:b7:1e:cb: af:f4:2c:f1:38:70:76:65:b1:16:bd:98:24:e6:4a:cc:8e:3c: 13:8e:51:35:f5:5f:5c:ff:90:ce:de:3d:67:88:2a:6c:dc:27: 84:40:d6:75:44:6c:3c:35:10:91:de:56:07:ae:c0:73:e0:e3: 38:d7:1c:2f:7f:ea:06:cf:c1:89:a2:f6:93:a9:d4:d2:03:e0: 39:9e:58:3f:12:0d:33:d4:61:d7:a9:3f:c3:e8:3d:75:72:cb: 22:2d:90:d8:38:10:fe:02:11:b7:7a:79:64:e6:74:11:c7:2a: 31:c4:ff:84:7d:70:99:bd:a9:5e:eb:fc:c6:5e:be:ec:e4:32: f7:f6:df:77:7c:9a:e7:79:27:71:f2:f6:9d:96:14:78:b8:89: 57:71:55:a7:04:31:5d:ff:eb:bb:3e:43:c6:6c:d0:2c:8a:c3: ea:1a:f3:ab:d4:0e:8d:f0:a4:0c:e5:52:4c:9c:2e:56:9c:93: d3:88:29:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG22oppPIzK2dm3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTM1ZWJkYzQtMjhhYy00NGRmLTgxZjktMmU2NzlhYTNlNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWlvrbE3Gxa0OQ+wN0gIjChnjoSZ7uHfBwkM 1m5jzNaXj4wgHJiQ5ILW0bkU1mRiZ8A/Hy+7vLjGtJzblpIm355LojdnkF8cwHc5 0RGjGGzhz6VWcta5f+QY5eFWRsqSuNoqM4WI0bCoERRkpGpXHwkKOdDUWPeZCb3P akMuO1U/g+9G/3MfZZxbYkPB6/E6GkBcXS+kmkvg/4HMOtmWNiKhy5tsXP8LkTKF HBBN5KTj4KWes8id6ewVU1V8GyDDZ6bNUJ1WuDl2zXN0Brja6HelAYfpcd/5kM7k mREsXAt5zI53XnNQ28gfsLfEnGQ/l9nlEGf/AuB28rG/AqTMTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsIw08nvIkoVkgaePcqs8nU6EuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzQ5NjMzYzAtZTRkNi0z MzI2LTg3ZTctOGY1NDE2NTlmODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0yM4OG+5bFmjtNQooh8XskHS/UVTFy6nBJTzuk3KL39suDcSm5iDGm eOT6SOLBXL2spLkwTQXCRNDgII2z3DvUySUqL7cey6/0LPE4cHZlsRa9mCTmSsyO PBOOUTX1X1z/kM7ePWeIKmzcJ4RA1nVEbDw1EJHeVgeuwHPg4zjXHC9/6gbPwYmi 9pOp1NID4DmeWD8SDTPUYdepP8PoPXVyyyItkNg4EP4CEbd6eWTmdBHHKjHE/4R9 cJm9qV7r/MZevuzkMvf233d8mud5J3Hy9p2WFHi4iVdxVacEMV3/67s+Q8Zs0CyK w+oa86vUDo3wpAzlUkycLlack9OIKac= -----END CERTIFICATE-----Generated at Tue Aug 5 23:10:47 2025 by rpki-client