$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa File: df95bfc8-2440-38d8-933c-5620004442e8.roa (raw, json) Hash identifier: OPmHGweEZA37EEpP14UmF+CTCi3YXl3iEOtJv7UUan0= Subject key identifier: 67:B1:4A:3A:0A:32:2D:79:C7:71:C6:C8:91:F9:DD:FB:45:98:D6:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124971A188C49E566CAE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:49:71:a1:88:c4:9e:56:6c:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=85452cd6-5208-4242-aa75-ec8db9f48fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:c4:b1:33:80:6e:1d:a8:c9:ad:93:8b:03: b2:e0:7d:58:5f:08:2c:54:15:11:bf:2d:b8:68:3b: 91:c6:d4:bc:b8:fd:7f:e1:41:41:6d:be:59:ee:1d: 47:d8:18:98:9b:bc:68:12:bd:5c:e6:b1:be:f3:ad: f4:91:b3:65:ec:90:dc:bf:7d:e8:16:23:1a:f9:17: 37:56:53:a0:01:31:98:85:ea:d0:8f:9d:44:c5:44: 50:1c:72:3c:0e:23:c4:99:f3:ad:c1:4d:33:69:89: fc:fc:c5:15:29:c1:b5:59:62:a1:66:71:f1:7f:61: ab:bc:f1:43:fa:3b:3b:f0:f7:2e:56:41:2b:5b:8e: f5:69:69:28:18:be:3b:33:09:a7:16:e3:cd:21:f4: 3e:66:46:02:20:41:1e:52:24:13:be:85:aa:c1:d2: ad:81:0b:6e:3a:42:be:4b:04:60:42:c3:d4:bc:2f: 13:dd:91:7f:2c:50:9b:4d:ad:e3:a5:db:af:77:ab: 30:40:89:98:bc:84:c9:81:34:ff:42:0e:e8:d8:69: 17:5f:97:9b:9b:a8:68:75:a8:d0:a3:91:27:f7:24: 98:2b:66:6b:12:d6:93:68:46:d1:81:f9:7d:70:db: b5:b5:bb:e0:4e:87:2a:85:15:30:f6:dc:b3:04:fe: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B1:4A:3A:0A:32:2D:79:C7:71:C6:C8:91:F9:DD:FB:45:98:D6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4d:9b:47:d4:b5:07:59:38:55:fc:a9:d9:50:eb:ac:e6:ac: 7e:f1:98:09:f3:07:19:fd:83:41:b1:b6:af:d3:55:8a:4b:55: cf:a3:bb:b7:53:b5:87:43:64:eb:2e:14:85:b2:6b:1e:41:70: d9:09:f3:6d:0e:a2:65:11:d2:85:ba:34:01:0a:18:98:21:4d: 44:bd:50:76:06:33:90:06:57:d6:a7:11:2a:23:78:ce:15:2c: 76:16:83:ec:fb:47:56:ad:93:05:97:6c:88:2b:82:5a:ca:34: 95:f6:86:02:35:f4:cb:64:eb:56:70:da:c1:d4:da:5a:7b:a0: 34:74:ad:bf:5b:f2:08:2e:9f:97:dc:58:74:9d:f7:6d:71:27: 7b:29:6b:14:4b:c3:73:7f:c6:79:70:b0:e3:1f:c2:fc:f1:92: a7:9e:6c:17:ac:2f:9f:a7:26:6a:ea:11:d5:20:5d:26:99:b1: 91:a5:39:1c:6c:19:4b:96:5c:29:5f:d0:bb:72:78:f8:7f:d8: fd:10:c0:87:ab:b5:ec:09:d4:98:f6:8f:af:af:c3:e2:1e:59: 93:86:32:d0:17:fb:dc:16:12:1e:e4:e4:6e:80:50:f3:83:1c: 67:ac:1a:cf:41:94:36:28:12:b8:fc:40:37:50:aa:f2:f2:54: 95:e2:50:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEklxoYjEnlZsrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODU0NTJjZDYtNTIwOC00MjQyLWFhNzUtZWM4ZGI5ZjQ4ZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4vEsTOAbh2oya2TiwOy4H1YXwgsVBURvy24 aDuRxtS8uP1/4UFBbb5Z7h1H2BiYm7xoEr1c5rG+8630kbNl7JDcv33oFiMa+Rc3 VlOgATGYherQj51ExURQHHI8DiPEmfOtwU0zaYn8/MUVKcG1WWKhZnHxf2GrvPFD +js78PcuVkErW471aWkoGL47MwmnFuPNIfQ+ZkYCIEEeUiQTvoWqwdKtgQtuOkK+ SwRgQsPUvC8T3ZF/LFCbTa3jpduvd6swQImYvITJgTT/Qg7o2GkXX5ebm6hodajQ o5En9ySYK2ZrEtaTaEbRgfl9cNu1tbvgTocqhRUw9tyzBP7u8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGexSjoKMi15x3HGyJH53ftFmNZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGY5NWJmYzgtMjQ0MC0z OGQ4LTkzM2MtNTYyMDAwNDQ0MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1Nm0fUtQdZOFX8qdlQ66zmrH7xmAnzBxn9g0Gxtq/TVYpLVc+ju7dT tYdDZOsuFIWyax5BcNkJ820OomUR0oW6NAEKGJghTUS9UHYGM5AGV9anESojeM4V LHYWg+z7R1atkwWXbIgrglrKNJX2hgI19Mtk61Zw2sHU2lp7oDR0rb9b8ggun5fc WHSd921xJ3spaxRLw3N/xnlwsOMfwvzxkqeebBesL5+nJmrqEdUgXSaZsZGlORxs GUuWXClf0LtyePh/2P0QwIertewJ1Jj2j6+vw+IeWZOGMtAX+9wWEh7k5G6AUPOD HGesGs9BlDYoErj8QDdQqvLyVJXiUCs= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:01 2025 by rpki-client