$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa File: b0ffd58b-7b60-361e-b355-4e02a51b117f.roa (raw, json) Hash identifier: 0ZWxxdNzJcyDjEdrK45SOT14V93dlAXpLRdjzHjgF78= Subject key identifier: 7C:8A:E5:7B:1A:81:A9:DC:CB:4C:90:F9:FC:D3:A6:4C:8E:5B:E9:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFFBBF2B2042F7BEF0081F580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa Signing time: Wed 27 Aug 2025 20:10:35 +0000 ROA not before: Wed 27 Aug 2025 20:10:35 +0000 ROA not after: Tue 25 Nov 2025 21:10:35 +0000 asID: 19905 IP address blocks: 173.29.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:bb:f2:b2:04:2f:7b:ef:00:81:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 27 20:10:35 2025 GMT Not After : Nov 25 21:10:35 2025 GMT Subject: CN=2bb5db5d-75e6-423c-ab3a-7379872970ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:54:f3:d1:43:49:a6:8e:38:2d:47:05:57:11: 75:a5:cc:e8:33:42:e9:43:9f:53:d1:8a:6e:e2:42: fc:9c:51:5a:ec:bb:d6:4e:7a:d0:0d:0a:a4:c2:b3: 46:f2:1f:65:31:6c:b1:a5:5d:d4:e9:19:95:45:61: 82:5a:75:74:8a:a3:ea:9d:bf:51:12:ec:a3:e5:ca: 38:34:16:51:01:97:92:a9:6a:91:b7:6c:b2:0e:b3: 56:5c:08:b1:0d:79:86:2e:c1:df:88:d5:da:cf:e0: f6:a4:82:9d:89:2a:83:2e:97:3b:81:64:15:11:34: 6e:65:1b:67:db:00:b8:b1:ba:75:13:ea:df:a8:15: 38:e4:65:dc:ff:a4:b5:5f:d4:0b:56:46:97:e4:49: 0a:33:64:c0:1e:5d:f6:57:da:53:d2:24:0d:d9:06: c2:03:07:b9:16:45:da:0f:8c:b5:76:55:01:0c:33: b0:5f:41:5e:8b:48:8b:73:dd:5e:72:6e:17:a2:fe: 9d:7f:d6:aa:99:ef:d9:5a:15:56:14:7e:9a:cf:c2: f7:d1:05:74:d3:ca:1c:cd:4d:dc:81:0e:3d:e7:fa: 58:64:81:1b:9c:8b:c4:ca:f0:63:c3:0d:dd:48:af: 5a:fa:33:02:d8:c4:d7:65:e9:14:67:c6:ca:68:26: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8A:E5:7B:1A:81:A9:DC:CB:4C:90:F9:FC:D3:A6:4C:8E:5B:E9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7d:7a:f4:38:20:1e:5e:54:21:f2:4e:c0:ac:a2:82:05:9c: e9:c8:5e:60:e2:5c:90:98:c2:9c:a7:96:e8:e3:3b:ee:62:5f: f6:7d:7b:6d:f3:e5:6c:22:0e:4d:b2:ca:b8:9e:cd:13:fe:ed: 22:7f:96:79:51:26:26:47:26:61:0d:72:a7:6b:94:eb:16:83: 30:88:f9:62:12:da:99:12:16:ef:2a:36:88:0e:2b:0c:13:fd: b6:3b:aa:62:26:97:a1:71:ee:e7:e9:47:76:47:01:a0:6f:4d: aa:93:bb:3f:b3:6b:d8:86:6f:5e:44:6f:7e:2b:ec:76:55:5e: ea:8f:15:b1:84:b3:68:c0:14:62:f4:b4:c0:a1:bf:33:90:d5: 93:9c:5e:cc:34:2a:04:2a:2f:61:8c:da:7e:85:a3:c8:1d:c3: 80:77:37:7e:a5:30:a6:52:75:61:91:a7:b3:6a:b2:13:04:1a: 68:b0:56:f1:33:ec:60:a7:bf:6a:9d:53:f8:19:5e:be:75:04: e9:b3:67:4c:af:19:28:a4:e2:29:f6:fa:cd:17:02:82:90:9f: d1:4d:d9:7e:3f:d0:1a:25:ad:b7:05:31:0e:e5:2d:9c:1c:26: a8:91:eb:67:26:90:c7:f8:52:c9:1f:cd:ed:1e:40:9f:a6:aa: 65:56:fb:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/u/KyBC977wCB9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNzIwMTAzNVoXDTI1MTEyNTIxMTAzNVowLzEtMCsGA1UEAxMk MmJiNWRiNWQtNzVlNi00MjNjLWFiM2EtNzM3OTg3Mjk3MGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFTz0UNJpo44LUcFVxF1pczoM0LpQ59T0Ypu 4kL8nFFa7LvWTnrQDQqkwrNG8h9lMWyxpV3U6RmVRWGCWnV0iqPqnb9REuyj5co4 NBZRAZeSqWqRt2yyDrNWXAixDXmGLsHfiNXaz+D2pIKdiSqDLpc7gWQVETRuZRtn 2wC4sbp1E+rfqBU45GXc/6S1X9QLVkaX5EkKM2TAHl32V9pT0iQN2QbCAwe5FkXa D4y1dlUBDDOwX0Fei0iLc91ecm4Xov6df9aqme/ZWhVWFH6az8L30QV008oczU3c gQ495/pYZIEbnIvEyvBjww3dSK9a+jMC2MTXZekUZ8bKaCaktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyK5Xsagancy0yQ+fzTpkyOW+laMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjBmZmQ1OGItN2I2MC0z NjFlLWIzNTUtNGUwMmE1MWIxMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF19evQ4IB5eVCHyTsCsooIFnOnIXmDiXJCYwpynlujjO+5iX/Z9e23z 5WwiDk2yyriezRP+7SJ/lnlRJiZHJmENcqdrlOsWgzCI+WIS2pkSFu8qNogOKwwT /bY7qmIml6Fx7ufpR3ZHAaBvTaqTuz+za9iGb15Eb34r7HZVXuqPFbGEs2jAFGL0 tMChvzOQ1ZOcXsw0KgQqL2GM2n6Fo8gdw4B3N36lMKZSdWGRp7NqshMEGmiwVvEz 7GCnv2qdU/gZXr51BOmzZ0yvGSik4in2+s0XAoKQn9FN2X4/0BolrbcFMQ7lLZwc JqiR62cmkMf4Uskfze0eQJ+mqmVW+yU= -----END CERTIFICATE-----Generated at Sat Sep 6 05:34:17 2025 by rpki-client