$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b45d096e-a02f-3f9c-ae5d-c100ae7d3db2.roa File: b45d096e-a02f-3f9c-ae5d-c100ae7d3db2.roa (raw, json) Hash identifier: Wtyeh8kHh73UNqjoB4xictadWNV22L2qgggwExZM3fo= Subject key identifier: F0:70:31:44:13:D4:05:35:FA:1F:5F:E6:17:CE:C1:FB:77:6B:8D:DF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B777279EC253C7F3D6C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b45d096e-a02f-3f9c-ae5d-c100ae7d3db2.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.25.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:77:72:79:ec:25:3c:7f:3d:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=47ce5757-08f0-479d-bfaa-3621a58f9cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:74:14:cb:e5:3c:54:6b:eb:d3:d2:27:e7: f9:26:36:4e:3a:bf:a7:24:9b:3b:06:29:bc:61:65: ce:fa:e8:c8:26:f6:4b:22:da:15:ec:f5:d8:e6:05: 4e:f2:91:5f:88:34:bb:4e:4e:ef:5f:2d:ed:32:c1: 65:49:63:fa:7c:3d:ee:f2:dc:fd:c1:15:d5:63:cb: 69:76:4d:4d:87:cd:4b:11:4f:0a:ce:88:9c:d6:b5: bb:6a:59:a8:de:b5:e8:84:14:39:9d:da:e8:e5:bb: 49:3e:49:42:e7:36:7e:d1:9a:d4:2d:cf:89:e9:db: 06:af:f0:4a:93:91:7f:e0:e8:88:20:7a:ed:61:fe: bc:b1:45:5f:e1:2b:8f:65:b0:13:85:6c:d5:26:3d: 39:fe:8b:b0:58:8b:eb:55:9c:3d:db:b5:ba:65:80: b9:b0:11:12:0b:e7:53:28:1d:12:3c:a2:be:94:6b: 70:4f:b9:2f:5b:d0:ed:d9:2b:a5:2f:67:8c:c4:5c: 5b:ec:ea:00:b2:8b:01:df:b9:07:cb:de:bd:ef:2c: 57:44:05:0b:4c:07:8e:5b:56:0b:9b:6c:ec:fb:e8: 46:0a:32:08:a5:b4:49:33:6a:f8:5a:eb:60:90:fa: d4:6e:64:cf:bc:f1:ae:a2:f7:ec:cd:9f:bc:81:3b: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:31:44:13:D4:05:35:FA:1F:5F:E6:17:CE:C1:FB:77:6B:8D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b45d096e-a02f-3f9c-ae5d-c100ae7d3db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:39:bc:e9:57:76:c9:02:8b:50:d7:09:2d:a4:f5:e7:7a:fe: 1c:ff:91:e1:55:1f:2b:83:72:0c:c3:e5:fd:34:23:15:d3:2a: 38:eb:a5:20:8e:71:8d:ef:bd:a8:8b:15:b3:60:b1:13:1a:45: 7a:b2:b3:2e:29:e7:59:b6:6f:7d:81:19:9d:05:bd:93:54:bf: 94:ee:08:15:6f:cd:58:7e:86:91:2d:41:99:12:8d:2a:ff:ea: dd:e4:7d:1d:97:8c:60:52:2c:40:b8:44:71:f7:55:00:3e:4e: 87:56:41:29:93:2d:2b:59:5a:d3:f4:96:67:6f:fc:0d:ca:1e: 62:a2:28:52:3c:63:5c:d3:d4:d9:be:0e:ee:ae:56:88:99:56: 9a:94:3d:4d:3e:de:1b:6d:4b:d8:d6:01:fe:46:8d:83:69:48: 53:48:80:2d:06:a6:cc:a4:49:1b:57:20:6c:c6:fc:d8:c4:a1: 65:01:3c:62:d6:26:95:a8:17:8e:98:bd:48:8b:0b:20:71:3b: e5:a9:ed:b2:21:60:75:e7:cc:df:cd:68:7c:c5:a7:17:45:5f: 25:43:c3:a5:37:b0:e5:6b:9d:6b:7d:ba:00:06:cc:35:cf:18: 55:53:56:e1:84:c4:f2:28:09:e4:2f:13:c2:84:d4:89:8a:42: a2:5f:93:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G3dyeewlPH89bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk NDdjZTU3NTctMDhmMC00NzlkLWJmYWEtMzYyMWE1OGY5Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvl0FMvlPFRr69PSJ+f5JjZOOr+nJJs7Bim8 YWXO+ujIJvZLItoV7PXY5gVO8pFfiDS7Tk7vXy3tMsFlSWP6fD3u8tz9wRXVY8tp dk1Nh81LEU8Kzoic1rW7almo3rXohBQ5ndro5btJPklC5zZ+0ZrULc+J6dsGr/BK k5F/4OiIIHrtYf68sUVf4SuPZbAThWzVJj05/ouwWIvrVZw927W6ZYC5sBESC+dT KB0SPKK+lGtwT7kvW9Dt2SulL2eMxFxb7OoAsosB37kHy9697yxXRAULTAeOW1YL m2zs++hGCjIIpbRJM2r4WutgkPrUbmTPvPGuovfszZ+8gTvD6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBwMUQT1AU1+h9f5hfOwft3a43fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjQ1ZDA5NmUtYTAyZi0z ZjljLWFlNWQtYzEwMGFlN2QzZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU5vOlXdskCi1DXCS2k9ed6/hz/keFVHyuDcgzD5f00IxXTKjjrpSCO cY3vvaiLFbNgsRMaRXqysy4p51m2b32BGZ0FvZNUv5TuCBVvzVh+hpEtQZkSjSr/ 6t3kfR2XjGBSLEC4RHH3VQA+TodWQSmTLStZWtP0lmdv/A3KHmKiKFI8Y1zT1Nm+ Du6uVoiZVpqUPU0+3httS9jWAf5GjYNpSFNIgC0GpsykSRtXIGzG/NjEoWUBPGLW JpWoF46YvUiLCyBxO+Wp7bIhYHXnzN/NaHzFpxdFXyVDw6U3sOVrnWt9ugAGzDXP GFVTVuGExPIoCeQvE8KE1ImKQqJfkxQ= -----END CERTIFICATE-----Generated at Thu Jul 10 13:52:23 2025 by rpki-client