$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76a898fe-6533-3358-84e3-fea34863f5f9.roa File: 76a898fe-6533-3358-84e3-fea34863f5f9.roa (raw, json) Hash identifier: bVQPWcuRvUMtviKqFKM5+cmD71qYhA2QvuL6zwRf3T0= Subject key identifier: D3:38:A3:F0:B4:C9:76:45:13:92:D9:8C:7B:BB:96:B4:5D:FB:86:52 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AC44640B6FF21B52CF6D13300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76a898fe-6533-3358-84e3-fea34863f5f9.roa Signing time: Wed 06 Aug 2025 13:00:42 +0000 ROA not before: Wed 06 Aug 2025 13:00:42 +0000 ROA not after: Tue 04 Nov 2025 14:00:42 +0000 asID: 30036 IP address blocks: 173.29.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:46:40:b6:ff:21:b5:2c:f6:d1:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 6 13:00:42 2025 GMT Not After : Nov 4 14:00:42 2025 GMT Subject: CN=ea70bdc4-3c24-40c8-abaf-bf40b39ac691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:0f:f3:73:3d:46:95:08:f3:32:7d:c3:c9: 28:ce:29:30:8d:a2:d9:35:72:b3:77:e9:b4:b6:f6: fc:7f:84:c3:c5:ef:ea:f8:16:dd:a3:04:cd:bb:33: fc:28:26:09:3d:c1:6d:d4:12:4f:83:43:3c:66:ac: 3c:90:0b:8c:27:48:21:60:7a:ef:5d:bc:d4:49:d3: 4c:65:b7:cf:ae:d7:30:7a:d5:6b:b1:dd:5f:13:4a: 85:e0:13:01:0c:8c:e2:b9:c5:02:fc:e3:72:7d:b6: 03:e8:c5:6a:81:b9:b3:3c:cf:bd:4b:de:17:ed:72: 66:b5:2f:2a:45:e7:64:aa:5a:b5:51:76:37:b2:de: b6:26:ba:26:34:74:87:9f:33:01:e2:23:4d:20:ef: 43:36:d8:97:93:3b:ec:ba:0b:0b:9b:2f:79:a6:57: 63:55:08:b9:0b:87:67:c2:ed:76:f2:b2:64:93:3e: 61:2d:43:8c:88:a6:b3:aa:fb:a2:e3:b5:d3:1a:56: 04:b0:a5:83:6b:cd:10:5d:9d:7c:69:98:f3:97:19: e4:f3:2a:49:cf:42:28:ca:2e:3e:f8:49:12:fc:28: ef:b3:e7:20:6d:fc:eb:8f:82:8c:0f:d1:1d:e6:ac: b3:b1:62:bc:4b:06:3b:d2:ad:a2:28:0b:40:76:70: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:38:A3:F0:B4:C9:76:45:13:92:D9:8C:7B:BB:96:B4:5D:FB:86:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76a898fe-6533-3358-84e3-fea34863f5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:00:ea:c2:36:85:32:78:75:e6:d5:a2:d8:d7:a2:2b:18:34: 2f:db:aa:8f:79:46:88:df:5e:df:4c:67:2e:4c:64:14:22:ae: 45:36:50:d2:33:92:94:e6:ab:28:33:d6:8d:cb:3f:e3:04:a4: bc:e3:eb:0a:db:d7:ed:bb:5a:2c:4a:f9:df:e1:2d:a2:08:da: 36:ac:b7:c6:6f:17:b7:80:d2:c5:9c:03:46:5c:2e:06:6f:4a: b1:81:42:e1:68:74:f8:16:34:9a:18:96:36:a1:49:dc:70:d9: 00:9a:6b:19:e8:4d:ee:9a:1b:68:1c:8a:8e:b8:3f:72:87:dc: ae:e9:7b:c9:2a:05:3b:26:7b:46:54:62:38:59:28:61:8f:ce: bb:08:5d:02:f5:61:c9:e6:73:d0:8a:fb:5b:62:01:99:9c:5f: 4a:2e:5c:ce:f1:32:2e:df:c9:cf:13:77:bf:df:8e:13:ce:49: 11:55:02:99:bd:f0:0d:0d:fb:0a:a2:7a:c5:35:62:46:e2:90: 37:99:d3:db:23:1f:56:38:47:6a:4f:0c:07:58:0c:b7:61:35: 7a:ac:7f:f8:63:7f:d3:ab:a4:28:07:4a:50:07:6d:fe:48:ba: f8:d7:2a:49:2f:96:16:f7:d0:63:9e:25:83:07:08:7d:64:36: 9f:c7:df:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErERkC2/yG1LPbRMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgwNjEzMDA0MloXDTI1MTEwNDE0MDA0MlowLzEtMCsGA1UEAxMk ZWE3MGJkYzQtM2MyNC00MGM4LWFiYWYtYmY0MGIzOWFjNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsisP83M9RpUI8zJ9w8kozikwjaLZNXKzd+m0 tvb8f4TDxe/q+BbdowTNuzP8KCYJPcFt1BJPg0M8Zqw8kAuMJ0ghYHrvXbzUSdNM ZbfPrtcwetVrsd1fE0qF4BMBDIziucUC/ONyfbYD6MVqgbmzPM+9S94X7XJmtS8q Redkqlq1UXY3st62JromNHSHnzMB4iNNIO9DNtiXkzvsugsLmy95pldjVQi5C4dn wu128rJkkz5hLUOMiKazqvui47XTGlYEsKWDa80QXZ18aZjzlxnk8ypJz0Ioyi4+ +EkS/Cjvs+cgbfzrj4KMD9Ed5qyzsWK8SwY70q2iKAtAdnA6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM4o/C0yXZFE5LZjHu7lrRd+4ZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzZhODk4ZmUtNjUzMy0z MzU4LTg0ZTMtZmVhMzQ4NjNmNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwA6sI2hTJ4debVotjXoisYNC/bqo95RojfXt9MZy5MZBQirkU2UNIz kpTmqygz1o3LP+MEpLzj6wrb1+27WixK+d/hLaII2jast8ZvF7eA0sWcA0ZcLgZv SrGBQuFodPgWNJoYljahSdxw2QCaaxnoTe6aG2gcio64P3KH3K7pe8kqBTsme0ZU YjhZKGGPzrsIXQL1Ycnmc9CK+1tiAZmcX0ouXM7xMi7fyc8Td7/fjhPOSRFVApm9 8A0N+wqiesU1YkbikDeZ09sjH1Y4R2pPDAdYDLdhNXqsf/hjf9OrpCgHSlAHbf5I uvjXKkkvlhb30GOeJYMHCH1kNp/H36A= -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:21 2025 by rpki-client