$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa File: cb25a333-11c3-3035-a32b-9d722b26f788.roa (raw, json) Hash identifier: /Q4HD3INP0PGhWfMVnHemymKCAY4K2VU1dM4cvQ7AWc= Subject key identifier: 41:4C:0A:5D:DC:5B:13:1B:F0:A6:5E:AE:F1:79:CE:27:EB:4F:08:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A814665A044F5EC93E189C900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.28.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:65:a0:44:f5:ec:93:e1:89:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=780b185d-ea97-4531-af42-4a126293c706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:ee:7a:d0:7c:c6:6d:34:d4:54:3e:80:b7: a2:1f:26:58:63:f9:1b:87:94:55:6a:15:e6:5a:6e: 22:d8:e1:c3:4a:29:b8:cf:34:5e:21:3c:74:72:73: d0:a3:2f:58:35:8d:90:60:84:71:2f:29:45:5e:53: 5a:c9:1f:9d:ed:5a:30:c5:c6:93:0e:20:68:cd:cc: e1:20:44:bb:68:c3:18:59:08:46:0a:9b:ba:ee:49: e7:f6:ac:2c:e0:a2:a2:b1:ba:4d:ee:ed:77:73:e8: 59:96:db:96:8f:9b:c6:f2:a7:8d:60:94:65:e0:b3: f5:f9:0a:04:33:09:db:84:ae:69:f7:48:57:7a:9e: 2f:5b:35:d8:b0:7c:ce:97:70:db:67:8f:ac:c8:f4: 4a:55:b3:f9:87:f2:ff:3f:2c:89:6f:7f:30:16:ff: 20:10:63:2a:9e:47:f1:25:dd:6f:8c:25:72:e5:fa: 9a:fb:74:52:e0:2a:78:96:91:16:0f:cc:f1:f4:47: bc:eb:00:24:d4:19:fa:09:ba:78:30:50:59:b6:a6: dc:30:cb:6a:d1:2a:4f:93:ad:4b:32:bd:54:15:ba: 3a:d1:16:d0:a7:c8:d3:30:e7:1b:4e:e9:c2:ee:5b: ba:5d:2f:11:c8:14:8c:9a:82:77:ca:d8:00:ab:7d: 53:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4C:0A:5D:DC:5B:13:1B:F0:A6:5E:AE:F1:79:CE:27:EB:4F:08:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb25a333-11c3-3035-a32b-9d722b26f788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b9:2c:d3:4b:58:8d:bf:57:8d:da:b6:f1:e1:9b:e1:bf:03: a5:48:26:eb:a3:36:27:d0:ba:58:0a:19:2d:d5:d0:1f:7d:bf: 8f:2b:1f:61:1a:8f:ce:45:86:75:4d:49:d0:5d:fd:c0:2f:5e: f1:39:ec:aa:ca:68:ba:a8:53:58:f6:d8:6a:07:a3:8c:a1:56: e7:cf:57:65:f5:1c:84:f8:c6:72:98:f8:47:87:38:fd:a3:c9: a1:49:3d:df:95:87:dc:79:9e:93:9a:e2:c5:d3:0f:50:83:4f: c7:e6:e3:af:c3:f9:2c:25:8d:4d:c1:cd:2d:ee:b9:86:4b:53: a8:cc:53:d0:a5:4e:ec:8e:3c:d8:48:d9:46:49:85:98:70:2d: ad:14:80:c3:ec:83:a0:8d:05:94:22:d9:11:22:e0:ab:9c:46: 27:bb:bb:fc:bf:17:25:bc:1f:fe:f9:1b:4d:ca:ee:2b:95:b9: 2e:f7:8b:54:e9:3f:d8:c6:25:9b:39:d2:97:7a:36:68:58:76: 05:51:02:c1:f4:19:7a:a4:2a:f1:33:4d:00:c0:c8:ed:bb:ca: bf:3b:a7:ab:04:19:6b:c8:99:f2:ff:b6:d9:bd:6f:7e:13:68: 34:dd:3f:00:1e:65:c5:23:d2:a1:dd:09:1e:be:eb:96:b4:b1: 41:58:de:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRmWgRPXsk+GJyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzgwYjE4NWQtZWE5Ny00NTMxLWFmNDItNGExMjYyOTNjNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt3uetB8xm001FQ+gLeiHyZYY/kbh5RVahXm Wm4i2OHDSim4zzReITx0cnPQoy9YNY2QYIRxLylFXlNayR+d7VowxcaTDiBozczh IES7aMMYWQhGCpu67knn9qws4KKisbpN7u13c+hZltuWj5vG8qeNYJRl4LP1+QoE MwnbhK5p90hXep4vWzXYsHzOl3DbZ4+syPRKVbP5h/L/PyyJb38wFv8gEGMqnkfx Jd1vjCVy5fqa+3RS4Cp4lpEWD8zx9Ee86wAk1Bn6Cbp4MFBZtqbcMMtq0SpPk61L Mr1UFbo60RbQp8jTMOcbTunC7lu6XS8RyBSMmoJ3ytgAq31TOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFMCl3cWxMb8KZervF5zifrTwgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2IyNWEzMzMtMTFjMy0z MDM1LWEzMmItOWQ3MjJiMjZmNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+5LNNLWI2/V43atvHhm+G/A6VIJuujNifQulgKGS3V0B99v48rH2Ea j85FhnVNSdBd/cAvXvE57KrKaLqoU1j22GoHo4yhVufPV2X1HIT4xnKY+EeHOP2j yaFJPd+Vh9x5npOa4sXTD1CDT8fm46/D+SwljU3BzS3uuYZLU6jMU9ClTuyOPNhI 2UZJhZhwLa0UgMPsg6CNBZQi2REi4KucRie7u/y/FyW8H/75G03K7iuVuS73i1Tp P9jGJZs50pd6NmhYdgVRAsH0GXqkKvEzTQDAyO27yr87p6sEGWvImfL/ttm9b34T aDTdPwAeZcUj0qHdCR6+65a0sUFY3oE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:24 2025 by rpki-client