$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf2623c-577b-3043-a7be-ee9058d77505.roa File: cdf2623c-577b-3043-a7be-ee9058d77505.roa (raw, json) Hash identifier: /s++ndbRaHYJfhCfREozyq7T7s06z6ri/V/nemdMpgY= Subject key identifier: EB:D5:F6:B0:B4:42:02:30:EA:D2:A0:CA:C3:4E:08:31:53:E5:AE:2A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B7290EC1C180A3EBAD650 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf2623c-577b-3043-a7be-ee9058d77505.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.28.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:72:90:ec:1c:18:0a:3e:ba:d6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=8c809b9f-0bb0-49c3-b878-d61b912b64d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:b9:cf:3c:f3:c0:48:40:ed:79:f3:17:50: c3:22:49:05:6b:43:52:ca:63:52:b4:da:6d:87:f7: 05:37:1e:a9:ad:b6:31:0d:aa:ba:e6:8f:65:02:ab: 36:54:af:0b:0e:ac:74:42:06:2b:c9:81:56:d9:3b: 65:cb:47:da:13:bb:0c:0e:85:05:4a:fe:f0:b2:c6: 34:48:c7:dc:de:fb:00:ca:de:31:2e:64:34:c6:ec: 43:11:9d:be:97:01:62:4b:8b:40:2f:ec:05:57:7d: c5:83:0e:3a:08:52:60:36:43:b4:9f:76:30:db:24: 11:4c:01:42:73:cd:ec:b8:04:89:a1:a0:47:46:45: c5:20:9e:c7:11:e8:91:9b:ff:5e:cb:f2:9a:1d:d8: 3d:f3:fc:c5:8d:a8:46:a4:ec:87:9b:6c:38:f5:e1: 28:35:ca:ac:0b:e7:b4:7b:bd:dc:f3:ea:2f:53:aa: c2:be:ab:f4:7a:1a:57:67:a2:70:97:8b:55:71:5d: 15:b3:d5:4c:b3:e3:05:29:52:5f:1e:c4:ea:03:a6: 07:fd:57:38:c9:65:8b:e9:d8:1a:b5:cb:d2:cf:38: 18:4f:00:e9:fa:38:a3:40:b9:aa:49:65:73:ae:14: 5f:8a:19:3f:b4:15:f3:cf:4b:c5:be:f8:7b:ef:e3: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D5:F6:B0:B4:42:02:30:EA:D2:A0:CA:C3:4E:08:31:53:E5:AE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf2623c-577b-3043-a7be-ee9058d77505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7c:c0:a1:6d:e1:20:92:c5:5b:10:8b:5e:6f:2c:f6:b4:1b: 8b:ac:5c:ce:51:0f:39:07:b9:10:80:d2:38:8e:aa:0e:94:11: fc:f9:76:d4:6b:59:f0:b6:2e:03:ae:e0:11:62:95:37:4f:99: c5:9f:3c:18:70:c8:d9:70:19:61:ba:a6:d7:27:ee:01:9f:90: aa:3c:86:50:ae:47:a4:59:c7:51:32:ff:b1:4f:a3:72:42:5e: 19:90:0e:59:bc:81:77:ee:e4:f5:e6:40:66:e0:6f:0b:cf:5a: 65:a3:5d:05:1f:18:1d:da:fc:73:1a:24:2c:1c:99:ad:40:23: b6:b1:ef:1d:0d:69:ca:46:a8:50:6a:89:87:2b:c7:93:42:a3: c2:61:82:5b:2d:1a:88:e1:53:6b:a3:59:ee:3e:03:7f:08:de: 89:d5:b6:94:ef:6a:63:41:f9:c5:46:eb:54:d3:84:11:8e:b7: 8f:e9:0b:0b:31:f0:c9:d4:7f:ff:be:be:02:e2:7a:a2:f7:2a: 1a:1a:19:69:e8:54:84:4b:50:fe:72:6b:63:16:a2:3d:b3:48: c1:42:74:fe:3c:e9:b5:68:00:2b:57:99:c7:ff:a1:39:ca:e6: 4d:05:21:e4:23:8c:d0:c5:c4:96:60:13:01:1e:2e:34:f2:f8: 33:65:58:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G3KQ7BwYCj661lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk OGM4MDliOWYtMGJiMC00OWMzLWI4NzgtZDYxYjkxMmI2NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9G5zzzzwEhA7XnzF1DDIkkFa0NSymNStNpt h/cFNx6prbYxDaq65o9lAqs2VK8LDqx0QgYryYFW2Ttly0faE7sMDoUFSv7wssY0 SMfc3vsAyt4xLmQ0xuxDEZ2+lwFiS4tAL+wFV33Fgw46CFJgNkO0n3Yw2yQRTAFC c83suASJoaBHRkXFIJ7HEeiRm/9ey/KaHdg98/zFjahGpOyHm2w49eEoNcqsC+e0 e73c8+ovU6rCvqv0ehpXZ6Jwl4tVcV0Vs9VMs+MFKVJfHsTqA6YH/Vc4yWWL6dga tcvSzzgYTwDp+jijQLmqSWVzrhRfihk/tBXzz0vFvvh77+PCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvV9rC0QgIw6tKgysNOCDFT5a4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RmMjYyM2MtNTc3Yi0z MDQzLWE3YmUtZWU5MDU4ZDc3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR8wKFt4SCSxVsQi15vLPa0G4usXM5RDzkHuRCA0jiOqg6UEfz5dtRr WfC2LgOu4BFilTdPmcWfPBhwyNlwGWG6ptcn7gGfkKo8hlCuR6RZx1Ey/7FPo3JC XhmQDlm8gXfu5PXmQGbgbwvPWmWjXQUfGB3a/HMaJCwcma1AI7ax7x0NacpGqFBq iYcrx5NCo8JhglstGojhU2ujWe4+A38I3onVtpTvamNB+cVG61TThBGOt4/pCwsx 8MnUf/++vgLieqL3KhoaGWnoVIRLUP5ya2MWoj2zSMFCdP486bVoACtXmcf/oTnK 5k0FIeQjjNDFxJZgEwEeLjTy+DNlWH8= -----END CERTIFICATE-----Generated at Thu Jul 10 01:35:44 2025 by rpki-client