$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4650650-a2ec-3791-8bcc-7839988d0952.roa File: e4650650-a2ec-3791-8bcc-7839988d0952.roa (raw, json) Hash identifier: 1qTB/s8TRy6OdRNca9BWWE2Utfu3MU0m/TS7zSp8+Pc= Subject key identifier: 04:17:73:B8:40:3F:DE:24:DD:5F:6D:27:22:78:71:C3:A4:AB:DC:DA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8575FC0AA5CE29168F125880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4650650-a2ec-3791-8bcc-7839988d0952.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.28.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:fc:0a:a5:ce:29:16:8f:12:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=1d2f7a74-3217-4d9e-9de1-b578b897b05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:78:bd:75:5a:b8:8f:c4:81:af:18:74:b2: 9d:54:6c:d7:f7:82:f4:32:71:ad:ca:e1:75:51:00: 69:92:72:6e:b0:15:54:0c:d9:ec:b5:37:08:0a:aa: 95:88:cd:f0:d6:d3:0a:20:ee:53:21:98:93:65:49: d7:d5:10:69:1d:7c:ac:49:6f:9b:85:bb:96:31:ac: fb:ee:19:82:18:4d:b7:17:f4:37:78:b0:5c:b2:de: 11:81:35:fa:32:39:59:e3:0d:e1:a6:89:ec:61:de: 89:ce:86:64:17:42:36:da:57:9d:fa:40:2d:52:57: 41:39:47:8a:9a:5e:36:cc:ef:67:9f:fe:c9:38:be: 4b:48:62:65:a7:89:83:1d:cf:3a:0c:d0:5e:fe:51: db:b1:4b:84:b4:72:d0:64:70:c7:93:b8:88:15:de: a3:75:2e:51:41:8f:94:29:e3:a1:ba:c0:fa:ce:f1: f2:a5:f7:78:df:91:5c:3d:92:4d:e3:0e:cb:83:dd: 99:84:6c:a3:63:60:76:3a:a8:79:ee:74:a3:26:bb: 63:4d:f7:2f:f9:ff:21:b7:48:05:4b:5e:9a:90:36: dd:33:c7:20:4b:d5:7a:d6:e7:02:a4:e2:af:ec:a1: f0:d9:bf:12:d7:82:63:7e:e5:11:6d:f8:92:95:6e: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:17:73:B8:40:3F:DE:24:DD:5F:6D:27:22:78:71:C3:A4:AB:DC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4650650-a2ec-3791-8bcc-7839988d0952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e9:18:35:34:71:03:f3:4b:f3:07:48:de:84:3c:41:ca:2a: 76:8d:8c:b8:66:7b:d9:7f:f1:f5:67:f9:99:78:f3:3b:e1:9e: ac:77:db:8e:2d:08:36:27:a9:0c:b1:5f:c3:1c:bd:94:29:b2: 7d:09:eb:3e:91:0c:6f:bf:84:5f:d5:cc:c1:07:7d:f9:a4:7e: 1e:15:f2:58:b3:68:58:46:6f:ae:f2:cb:52:16:5d:ae:dc:f3: 26:67:2e:ed:f1:6c:51:9e:52:56:2f:3a:f6:36:bc:a0:12:15: b0:1e:c8:3b:00:2c:29:5f:71:02:3a:f7:24:2f:58:11:3d:63: d2:20:01:e4:67:09:3f:2e:d5:bb:e9:dd:b7:d7:ab:fe:55:e3: b2:5f:ab:54:dc:4a:8c:d8:44:ca:4e:ba:60:9a:c8:1c:ae:db: e2:b8:16:a9:24:9f:44:0e:00:a6:be:2a:f1:bc:55:82:db:c0: b5:d5:44:ca:ed:e7:cd:cd:8e:ee:7c:ce:44:79:47:51:0b:ea: 2a:6b:bb:0f:22:a4:ba:92:69:f0:21:3e:4f:02:7f:dc:d5:09: 26:91:0c:9e:93:bc:b5:8a:0b:f2:7a:6c:d5:76:46:1a:57:ab: 0d:d2:8d:47:d2:ef:40:a3:a2:f5:52:27:5f:8b:51:96:b1:a0: c7:26:e7:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfwKpc4pFo8SWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MWQyZjdhNzQtMzIxNy00ZDllLTlkZTEtYjU3OGI4OTdiMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+l4vXVauI/Ega8YdLKdVGzX94L0MnGtyuF1 UQBpknJusBVUDNnstTcICqqViM3w1tMKIO5TIZiTZUnX1RBpHXysSW+bhbuWMaz7 7hmCGE23F/Q3eLBcst4RgTX6MjlZ4w3hponsYd6JzoZkF0I22led+kAtUldBOUeK ml42zO9nn/7JOL5LSGJlp4mDHc86DNBe/lHbsUuEtHLQZHDHk7iIFd6jdS5RQY+U KeOhusD6zvHypfd435FcPZJN4w7Lg92ZhGyjY2B2Oqh57nSjJrtjTfcv+f8ht0gF S16akDbdM8cgS9V61ucCpOKv7KHw2b8S14JjfuURbfiSlW5sYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQXc7hAP94k3V9tJyJ4ccOkq9zaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTQ2NTA2NTAtYTJlYy0z NzkxLThiY2MtNzgzOTk4OGQwOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7pGDU0cQPzS/MHSN6EPEHKKnaNjLhme9l/8fVn+Zl48zvhnqx3244t CDYnqQyxX8McvZQpsn0J6z6RDG+/hF/VzMEHffmkfh4V8lizaFhGb67yy1IWXa7c 8yZnLu3xbFGeUlYvOvY2vKASFbAeyDsALClfcQI69yQvWBE9Y9IgAeRnCT8u1bvp 3bfXq/5V47Jfq1TcSozYRMpOumCayByu2+K4Fqkkn0QOAKa+KvG8VYLbwLXVRMrt 583Nju58zkR5R1EL6ipruw8ipLqSafAhPk8Cf9zVCSaRDJ6TvLWKC/J6bNV2RhpX qw3SjUfS70CjovVSJ1+LUZaxoMcm54k= -----END CERTIFICATE-----Generated at Wed Aug 6 00:43:48 2025 by rpki-client