$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa File: ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa (raw, json) Hash identifier: mLWizawz3c4Z/2Qv6n5kq5LqN30Q7HCeqlZmB9Wffps= Subject key identifier: 3B:51:C3:C9:CB:A5:28:47:BA:65:89:21:59:13:4E:C0:07:D5:52:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E9C87BD86F36237CF4C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e9:c8:7b:d8:6f:36:23:7c:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=af333469-6c5e-4a62-a2fb-2f25f6340aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:b2:41:00:f8:37:00:68:84:b7:b2:4f:23: e4:9c:8c:6e:c6:1e:e6:22:0f:36:4a:3d:31:c3:56: d9:25:8a:39:ba:4f:92:71:79:f9:b6:1c:66:df:77: 66:4a:24:3e:a0:16:69:34:71:fe:9a:aa:91:75:0c: 47:ec:2e:88:d0:35:d4:22:65:c2:a7:3c:ff:d4:b3: a2:4e:ec:f0:f3:f6:1f:9e:59:68:37:b7:a2:9d:63: dc:0d:ad:98:94:4d:dc:14:c4:ad:53:1a:ee:fb:c1: 6b:64:fb:88:9c:54:d3:1c:07:1f:70:65:f4:dc:88: 7f:15:8e:73:a9:dd:91:57:f5:9a:f5:cc:ad:a2:5a: 67:d4:28:26:8e:81:d1:b2:22:8f:5a:b5:c9:eb:97: 1c:ac:c8:96:f9:06:d6:ff:75:ae:52:74:f7:11:64: 68:3b:9d:11:0e:e3:2f:b4:df:67:66:06:06:f6:6d: d5:3f:f3:49:ff:14:a0:5c:74:5f:c5:83:da:bc:81: 94:e4:40:8f:e6:c4:43:84:18:74:88:28:9e:ba:26: 60:53:54:49:1e:be:b7:3c:63:d2:9e:4e:80:9a:81: d0:01:a8:3a:49:1e:b9:3a:7b:b8:70:6f:e3:8d:59: 52:77:5d:fa:5c:7b:e9:99:38:db:99:29:0a:44:6d: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:51:C3:C9:CB:A5:28:47:BA:65:89:21:59:13:4E:C0:07:D5:52:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:33:d7:47:dd:d1:b9:97:c2:ae:1c:e9:a8:83:1a:5b:f6:c2: 65:ad:40:04:a7:cc:0a:6a:6b:b0:dc:d6:b9:28:76:ec:a7:13: 7b:fd:a8:26:d3:60:27:c5:e5:37:41:2b:75:91:bb:c6:31:54: 1d:77:03:d0:12:46:2d:30:0c:ff:8f:7a:13:df:47:82:56:35: 7f:7a:59:7e:47:75:d9:07:08:72:5b:6e:c9:ba:7f:c9:0c:6a: ba:2e:51:f5:27:2e:da:4a:36:f1:c2:fd:47:2f:c7:e0:4e:a2: 6e:6a:e4:21:fc:09:3f:16:97:a4:5c:b9:4a:13:e3:3c:ad:38: f6:6f:3c:2b:37:fe:0e:73:b4:00:30:68:aa:0d:0b:91:1e:65: 98:46:18:e5:80:a3:55:b0:ac:8a:96:42:5e:95:68:fd:19:54: 62:55:61:e8:fa:4e:42:27:ad:6c:d0:c9:51:dd:90:7a:28:ea: 80:ad:62:4d:81:3c:ec:02:0b:44:8f:9a:6e:21:d1:88:d7:6d: 63:f2:e0:23:20:6a:56:da:69:10:b2:c7:74:76:a4:23:1e:ad: 7e:0c:ce:2f:a5:98:f8:5e:bb:ba:ff:2f:a4:3d:a8:31:d5:f6: 30:35:f9:fb:eb:25:c1:27:b2:31:a8:b6:7f:85:92:a8:b2:e9: c3:20:74:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOnIe9hvNiN89MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWYzMzM0NjktNmM1ZS00YTYyLWEyZmItMmYyNWY2MzQwYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfOyQQD4NwBohLeyTyPknIxuxh7mIg82Sj0x w1bZJYo5uk+ScXn5thxm33dmSiQ+oBZpNHH+mqqRdQxH7C6I0DXUImXCpzz/1LOi Tuzw8/YfnlloN7einWPcDa2YlE3cFMStUxru+8FrZPuInFTTHAcfcGX03Ih/FY5z qd2RV/Wa9cytolpn1CgmjoHRsiKPWrXJ65ccrMiW+QbW/3WuUnT3EWRoO50RDuMv tN9nZgYG9m3VP/NJ/xSgXHRfxYPavIGU5ECP5sRDhBh0iCieuiZgU1RJHr63PGPS nk6AmoHQAag6SR65Onu4cG/jjVlSd136XHvpmTjbmSkKRG3jcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtRw8nLpShHumWJIVkTTsAH1VIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWY3ZjEwZWQtNGRkYy0z NWI4LTg2ZjctM2NlMjE5OTU3YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEz10fd0bmXwq4c6aiDGlv2wmWtQASnzApqa7Dc1rkoduynE3v9qCbT YCfF5TdBK3WRu8YxVB13A9ASRi0wDP+PehPfR4JWNX96WX5HddkHCHJbbsm6f8kM arouUfUnLtpKNvHC/Ucvx+BOom5q5CH8CT8Wl6RcuUoT4zytOPZvPCs3/g5ztAAw aKoNC5EeZZhGGOWAo1WwrIqWQl6VaP0ZVGJVYej6TkInrWzQyVHdkHoo6oCtYk2B POwCC0SPmm4h0YjXbWPy4CMgalbaaRCyx3R2pCMerX4Mzi+lmPheu7r/L6Q9qDHV 9jA1+fvrJcEnsjGotn+Fkqiy6cMgdDs= -----END CERTIFICATE-----Generated at Tue Aug 5 23:10:44 2025 by rpki-client