$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e359330a-4a40-314e-8402-e126c3756160.roa File: e359330a-4a40-314e-8402-e126c3756160.roa (raw, json) Hash identifier: PqGxtQa9Hmcae5WM0ghmhnz0vwsixEUzq9lQXdExYRw= Subject key identifier: 46:91:A0:FE:12:E6:83:CE:9B:89:6B:33:97:4E:63:12:EC:A0:71:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8575EF8BAFC407EDC8AB6B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e359330a-4a40-314e-8402-e126c3756160.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.19.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:ef:8b:af:c4:07:ed:c8:ab:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=3d477ae2-b75f-45cd-9204-9aa810c3d31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:3e:56:03:bb:a7:8b:e8:08:07:52:6b:5e: c0:b8:02:77:ce:e7:be:13:26:34:48:cb:fc:da:d1: af:ea:1c:46:fa:fa:3d:be:23:3f:a1:6f:d0:d0:26: 95:96:15:8e:3b:ec:73:e1:6b:e8:70:e3:07:36:27: e0:ae:a1:51:4e:52:68:63:6f:e8:fd:1f:d0:b3:f6: 7b:83:f4:e4:bd:a1:75:72:3f:10:8c:0a:0a:6f:40: 26:ba:25:53:51:0f:26:95:e7:66:0b:a5:6f:0c:3d: 53:3a:90:6e:ff:b9:ed:d7:12:ef:01:54:75:8c:f4: 51:f0:fc:70:72:86:bb:7d:42:ac:a5:ce:70:69:b6: d1:70:e7:f5:b4:87:e4:a8:98:88:eb:49:96:ce:8b: 5e:84:05:dd:cb:14:88:c1:b8:1d:64:ac:c6:d9:d8: b6:9a:76:b4:eb:cf:34:ce:1b:10:83:fa:2b:63:b0: 7d:a4:21:ae:65:57:a2:44:a9:bc:6e:a5:1a:99:c5: bf:4e:1b:a8:5c:8e:33:cf:75:46:e0:32:0b:74:90: 34:82:c3:0e:b1:f8:16:37:02:e2:31:42:b6:18:89: 0e:01:38:58:92:7b:1e:90:5c:00:54:49:17:8f:8e: 91:c2:dc:c2:56:71:7a:cd:4e:10:c1:f4:7d:8c:5c: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:91:A0:FE:12:E6:83:CE:9B:89:6B:33:97:4E:63:12:EC:A0:71:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e359330a-4a40-314e-8402-e126c3756160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0d:64:1d:81:8f:17:9e:23:38:19:01:4b:cb:a1:05:9a:c2: b4:73:11:b0:19:35:53:34:3c:4e:2b:85:58:a2:35:e5:e0:d3: 22:75:76:f9:d4:92:1a:9e:2e:81:cf:17:ce:03:dc:31:4c:ae: ef:1c:16:86:74:4c:36:d4:a2:79:20:cb:cb:0b:56:6c:0a:04: d4:6b:b1:df:ab:a0:25:c7:16:1f:eb:28:42:ee:b8:46:4f:65: 13:01:32:01:2d:a0:04:80:d8:fc:5c:80:58:ab:01:f3:96:d0: 1e:e7:4e:51:10:19:5f:ee:b3:57:6e:38:2e:5c:3b:d5:fd:5b: 55:cb:b7:bc:86:c2:f6:53:ff:08:69:06:ed:14:66:3f:8f:9b: 62:a0:9b:fc:44:8e:e8:a4:f9:40:2e:ae:71:5f:5c:a5:18:6f: 98:25:3c:d1:b8:14:58:ec:16:6a:20:e6:0d:95:88:ac:4e:dc: 4d:0d:f3:c8:3a:1b:fd:82:f1:76:c3:75:3c:ba:d2:be:e8:03: fc:ed:50:59:08:a0:5a:42:e2:94:11:42:17:05:72:d8:64:05: 05:d6:22:c3:0f:64:f2:3f:e4:23:cd:3d:27:bc:95:be:b8:77: 50:41:22:da:0f:8b:2e:67:ed:62:90:52:6a:c9:58:94:2b:3d: 27:85:44:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFde+Lr8QH7cira0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk M2Q0NzdhZTItYjc1Zi00NWNkLTkyMDQtOWFhODEwYzNkMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix8+VgO7p4voCAdSa17AuAJ3zue+EyY0SMv8 2tGv6hxG+vo9viM/oW/Q0CaVlhWOO+xz4WvocOMHNifgrqFRTlJoY2/o/R/Qs/Z7 g/TkvaF1cj8QjAoKb0AmuiVTUQ8mledmC6VvDD1TOpBu/7nt1xLvAVR1jPRR8Pxw coa7fUKspc5wabbRcOf1tIfkqJiI60mWzotehAXdyxSIwbgdZKzG2di2mna06880 zhsQg/orY7B9pCGuZVeiRKm8bqUamcW/ThuoXI4zz3VG4DILdJA0gsMOsfgWNwLi MUK2GIkOAThYknsekFwAVEkXj46RwtzCVnF6zU4QwfR9jFx9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaRoP4S5oPOm4lrM5dOYxLsoHEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTM1OTMzMGEtNGE0MC0z MTRlLTg0MDItZTEyNmMzNzU2MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8NZB2BjxeeIzgZAUvLoQWawrRzEbAZNVM0PE4rhViiNeXg0yJ1dvnU khqeLoHPF84D3DFMru8cFoZ0TDbUonkgy8sLVmwKBNRrsd+roCXHFh/rKELuuEZP ZRMBMgEtoASA2PxcgFirAfOW0B7nTlEQGV/us1duOC5cO9X9W1XLt7yGwvZT/whp Bu0UZj+Pm2Kgm/xEjuik+UAurnFfXKUYb5glPNG4FFjsFmog5g2ViKxO3E0N88g6 G/2C8XbDdTy60r7oA/ztUFkIoFpC4pQRQhcFcthkBQXWIsMPZPI/5CPNPSe8lb64 d1BBItoPiy5n7WKQUmrJWJQrPSeFREs= -----END CERTIFICATE-----Generated at Wed Aug 6 05:23:01 2025 by rpki-client