$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dca7a2a4-f862-364d-804a-1dde8a6df71e.roa File: dca7a2a4-f862-364d-804a-1dde8a6df71e.roa (raw, json) Hash identifier: aobJQEYOB6Hs+xIZUDYkJUlytNhwie4pEC2ax6nphzw= Subject key identifier: 8A:C0:DA:BB:2B:98:71:13:68:B2:FE:B0:E7:6B:00:92:55:07:20:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB675CF93DA16FBC50A300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dca7a2a4-f862-364d-804a-1dde8a6df71e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:67:5c:f9:3d:a1:6f:bc:50:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e390911c-6fa0-418c-983a-cf310c7771c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:95:3d:69:a2:7d:83:35:e9:91:28:8f:f9:a9: a3:5b:9b:20:5f:a4:6f:a1:45:26:04:fe:b0:df:dd: e2:89:1c:d6:bd:09:47:bd:4e:2d:21:8f:04:21:d3: 0c:02:5f:03:fe:16:4d:9e:10:71:72:8b:5d:db:c0: 44:05:7c:bb:87:25:f4:bf:39:97:0d:74:ac:07:43: 61:e5:d1:d7:10:32:17:67:15:5d:50:4e:09:0a:a7: 0f:df:eb:c7:9d:a2:69:f3:bb:5a:5f:eb:34:03:f0: 38:9e:52:44:f4:cf:6c:4d:38:77:94:df:db:6c:3f: fa:0d:01:e9:1c:fc:9f:72:8a:f9:d9:63:0d:8b:61: 20:fa:97:9d:91:08:b0:7e:20:f8:c3:4b:35:e7:e4: 49:d1:99:6e:59:7c:0a:f9:93:b1:f0:a1:fd:71:ae: 6b:ce:19:78:cf:17:a8:42:d9:75:3e:48:be:52:10: 41:c1:d2:ae:12:e6:be:eb:6c:e3:ef:63:c8:db:a0: 7b:38:7e:4f:0c:ff:db:98:28:28:36:0c:4b:51:dd: 69:d9:38:00:f8:f0:16:1e:f0:15:a8:0d:43:e5:d2: f0:3c:7a:f7:ae:17:4d:95:77:52:47:62:d4:f4:54: 05:c3:b7:87:89:c6:14:c8:f2:56:a3:42:1e:ee:68: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C0:DA:BB:2B:98:71:13:68:B2:FE:B0:E7:6B:00:92:55:07:20:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dca7a2a4-f862-364d-804a-1dde8a6df71e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:9b:5d:dd:6b:8d:9d:56:c0:04:92:f1:02:90:64:c7:5c:b2: fd:04:d1:0f:1f:31:b3:8e:42:cc:ea:61:af:b3:b9:20:a3:7f: 92:66:df:9f:c7:cb:20:ad:ae:be:09:55:19:27:27:aa:18:07: a9:8a:99:08:85:cb:f2:de:46:cf:2c:6b:58:ac:ac:4e:22:10: ca:ed:6f:cc:c9:ea:7e:ec:b5:78:dc:16:04:b9:91:42:30:03: a3:78:49:10:69:53:83:99:ad:2b:58:eb:3a:35:50:4a:66:90: f3:fa:28:d4:51:46:b0:8c:34:67:68:d5:41:a5:59:36:22:c6: 14:97:c0:ed:ff:a6:b5:72:12:21:8c:e4:8b:10:fc:d1:e9:5e: 4a:56:88:6e:8b:9d:e8:f0:e6:97:00:84:78:4f:ed:ba:23:ba: 8c:54:b5:84:19:b7:39:f8:50:0b:50:1d:17:ef:da:d2:72:90: fc:62:2a:02:86:26:6e:b7:b5:a2:c3:9c:0a:c3:3a:10:a2:8a: f8:d8:d9:da:57:5b:32:c9:12:eb:28:f8:16:40:bc:6f:00:f7: 00:fe:40:53:92:37:ce:f7:7e:1f:d0:c8:91:78:45:09:11:6e: dc:4b:e7:2a:06:b3:87:14:bf:72:b8:16:da:b4:47:19:1b:69: 74:05:2f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG22dc+T2hb7xQowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTM5MDkxMWMtNmZhMC00MThjLTk4M2EtY2YzMTBjNzc3MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JU9aaJ9gzXpkSiP+amjW5sgX6RvoUUmBP6w 393iiRzWvQlHvU4tIY8EIdMMAl8D/hZNnhBxcotd28BEBXy7hyX0vzmXDXSsB0Nh 5dHXEDIXZxVdUE4JCqcP3+vHnaJp87taX+s0A/A4nlJE9M9sTTh3lN/bbD/6DQHp HPyfcor52WMNi2Eg+pedkQiwfiD4w0s15+RJ0ZluWXwK+ZOx8KH9ca5rzhl4zxeo Qtl1Pki+UhBBwdKuEua+62zj72PI26B7OH5PDP/bmCgoNgxLUd1p2TgA+PAWHvAV qA1D5dLwPHr3rhdNlXdSR2LU9FQFw7eHicYUyPJWo0Ie7mgoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrA2rsrmHETaLL+sOdrAJJVByBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGNhN2EyYTQtZjg2Mi0z NjRkLTgwNGEtMWRkZThhNmRmNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEebXd1rjZ1WwASS8QKQZMdcsv0E0Q8fMbOOQszqYa+zuSCjf5Jm35/H yyCtrr4JVRknJ6oYB6mKmQiFy/LeRs8sa1isrE4iEMrtb8zJ6n7stXjcFgS5kUIw A6N4SRBpU4OZrStY6zo1UEpmkPP6KNRRRrCMNGdo1UGlWTYixhSXwO3/prVyEiGM 5IsQ/NHpXkpWiG6Lnejw5pcAhHhP7bojuoxUtYQZtzn4UAtQHRfv2tJykPxiKgKG Jm63taLDnArDOhCiivjY2dpXWzLJEuso+BZAvG8A9wD+QFOSN873fh/QyJF4RQkR btxL5yoGs4cUv3K4Ftq0RxkbaXQFLws= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:03 2025 by rpki-client