$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/272f8a43-bfd5-3784-80ef-ca7630e95de7.roa File: 272f8a43-bfd5-3784-80ef-ca7630e95de7.roa (raw, json) Hash identifier: sp3CpAXkQnlt/X0YmlKr+Gp6VteoAJdwvT3t0vhl8A8= Subject key identifier: 31:F6:BA:C5:C7:B9:28:71:12:B2:AD:AB:5C:F3:F7:47:38:B6:26:50 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AD3A12A5CBF8DB94403F69940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/272f8a43-bfd5-3784-80ef-ca7630e95de7.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 173.29.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:2a:5c:bf:8d:b9:44:03:f6:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=4a67eb37-7952-4b99-82a1-e5595a1d6c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:1e:3a:c9:23:f1:f5:bd:7f:a1:f1:21:97: 47:39:28:a2:ab:3a:24:96:6d:6f:37:05:6d:ea:43: a2:55:16:ec:46:d1:f5:91:18:29:d1:34:ba:42:0e: 96:9b:d3:65:72:1f:40:ff:d8:d2:27:3d:9c:79:5e: c6:5f:8e:b6:68:b2:ba:9f:58:52:4c:b7:35:a3:0e: ae:7e:fb:75:3d:cd:d7:21:78:5c:dd:68:05:37:20: 5e:6b:99:31:a0:10:71:a6:44:d7:38:09:df:76:bb: e7:5e:a3:7c:a2:8f:ca:3b:f1:b9:0a:01:5f:44:77: 09:fa:dc:cb:6f:27:42:48:51:a5:c6:16:5e:29:45: 2f:e2:5d:e2:79:00:7e:5a:39:e1:6a:45:ac:c8:e2: 80:16:72:19:b6:53:33:b2:16:1a:7d:12:fc:b3:a9: 64:da:97:4c:8f:97:6b:05:7e:85:27:2d:74:71:a7: e1:5b:ae:77:16:62:8a:e6:cf:95:a0:ea:28:aa:59: 65:1a:94:a5:be:4f:61:86:92:3f:e5:3c:4e:36:9d: 2d:65:9d:e7:04:aa:f1:e0:bf:bf:ae:5e:3f:00:4a: df:fd:b5:a6:8a:21:e7:32:0d:6a:f2:0e:2f:9e:2f: 9e:78:5a:60:88:a9:b8:a6:5d:6e:a7:9c:6f:b4:e8: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F6:BA:C5:C7:B9:28:71:12:B2:AD:AB:5C:F3:F7:47:38:B6:26:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/272f8a43-bfd5-3784-80ef-ca7630e95de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:de:98:50:cb:30:33:9e:54:16:fd:01:3a:d0:2c:fd:49:4d: cd:eb:d2:ee:cf:e0:84:32:5e:d9:5c:6f:f9:b2:a9:b7:36:8c: 80:d8:13:ef:8f:d3:a5:bb:43:20:8c:41:04:25:ae:cf:11:39: 42:9b:b2:10:ce:60:37:81:8b:44:fa:4f:6e:96:9d:d3:c9:01: eb:b4:5e:f6:51:8d:59:8d:72:9b:df:21:f4:2e:05:47:e3:6c: 8c:82:eb:69:87:e2:62:30:65:5e:0c:d1:f0:bc:63:72:58:93: 94:43:5d:9d:bf:64:75:a0:29:26:e1:24:1a:df:32:84:83:1c: 2a:dd:c1:94:4c:bb:50:9d:a3:ae:9c:56:d5:6b:c6:7b:4d:ed: 47:f4:b1:54:e5:e7:51:3c:7d:c0:60:04:3d:da:42:ae:a9:3c: b5:83:27:f1:2d:5c:05:7c:35:08:4e:0c:54:dc:03:1b:0d:a8: 75:40:ef:a8:2f:43:e1:a5:8d:0c:48:9a:44:cd:a4:56:e6:fe: a0:f1:75:d5:f4:46:36:53:64:5f:b6:28:3b:34:e6:6c:be:fd: 3b:ef:6d:7b:2c:d1:8f:c4:4e:4a:b2:70:72:77:47:b3:50:1b: 6c:b7:22:bb:94:63:16:fd:29:06:43:26:4b:39:c6:88:19:0d: fc:17:a2:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSpcv425RAP2mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NGE2N2ViMzctNzk1Mi00Yjk5LTgyYTEtZTU1OTVhMWQ2YzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZAeOskj8fW9f6HxIZdHOSiiqzoklm1vNwVt 6kOiVRbsRtH1kRgp0TS6Qg6Wm9Nlch9A/9jSJz2ceV7GX462aLK6n1hSTLc1ow6u fvt1Pc3XIXhc3WgFNyBea5kxoBBxpkTXOAnfdrvnXqN8oo/KO/G5CgFfRHcJ+tzL bydCSFGlxhZeKUUv4l3ieQB+WjnhakWsyOKAFnIZtlMzshYafRL8s6lk2pdMj5dr BX6FJy10cafhW653FmKK5s+VoOooqlllGpSlvk9hhpI/5TxONp0tZZ3nBKrx4L+/ rl4/AErf/bWmiiHnMg1q8g4vni+eeFpgiKm4pl1up5xvtOgbnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH2usXHuShxErKtq1zz90c4tiZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjcyZjhhNDMtYmZkNS0z Nzg0LTgwZWYtY2E3NjMwZTk1ZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7emFDLMDOeVBb9ATrQLP1JTc3r0u7P4IQyXtlcb/myqbc2jIDYE++P 06W7QyCMQQQlrs8ROUKbshDOYDeBi0T6T26WndPJAeu0XvZRjVmNcpvfIfQuBUfj bIyC62mH4mIwZV4M0fC8Y3JYk5RDXZ2/ZHWgKSbhJBrfMoSDHCrdwZRMu1Cdo66c VtVrxntN7Uf0sVTl51E8fcBgBD3aQq6pPLWDJ/EtXAV8NQhODFTcAxsNqHVA76gv Q+GljQxImkTNpFbm/qDxddX0RjZTZF+2KDs05my+/TvvbXss0Y/ETkqycHJ3R7NQ G2y3IruUYxb9KQZDJks5xogZDfwXomQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:02 2025 by rpki-client