$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8954cdb0-4fa2-3ce3-8817-56f09b67efc9.roa File: 8954cdb0-4fa2-3ce3-8817-56f09b67efc9.roa (raw, json) Hash identifier: YIK8OXqFh4q7jjhUZEu3uLoUY/2rFZ4K0d+5udBvP3E= Subject key identifier: 93:85:0E:1E:35:CD:C6:FA:7D:84:94:A6:29:99:86:EF:F0:6C:DD:8F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A464F457DBC535F9D183B1A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8954cdb0-4fa2-3ce3-8817-56f09b67efc9.roa Signing time: Sun 22 Jun 2025 10:07:04 +0000 ROA not before: Sun 22 Jun 2025 10:07:04 +0000 ROA not after: Sat 20 Sep 2025 10:07:04 +0000 asID: 19905 IP address blocks: 173.23.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:4f:45:7d:bc:53:5f:9d:18:3b:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 22 10:07:04 2025 GMT Not After : Sep 20 10:07:04 2025 GMT Subject: CN=afa3ca55-66cc-4f65-a2df-de3424485abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:83:5f:d1:ae:25:d0:ea:d1:ff:7e:6d:67:db: 63:ee:05:87:df:65:19:ab:1e:09:69:3a:2a:97:93: cc:b1:5f:0a:35:e0:d9:e5:60:9b:3d:22:3b:77:ae: 5e:f2:4f:76:c7:8c:f3:95:c3:4a:14:31:42:a3:b3: 1f:22:0e:ca:38:9e:7a:fc:bb:38:6f:78:c9:17:87: 7c:f1:37:c3:7a:84:b6:47:cf:40:20:e0:84:a9:39: f6:34:fd:ae:73:ac:af:90:61:04:01:3b:87:c7:a5: 45:42:1f:d2:38:4b:f6:97:7c:1e:66:ef:ec:32:e4: a2:c0:e1:b2:2d:a3:93:a9:c0:60:a3:e2:87:68:80: 42:c8:46:cd:1e:91:ca:f4:51:0f:cb:62:da:66:8a: ae:ed:13:40:b9:6f:bd:6e:8a:09:5c:0e:b8:26:27: 9c:08:df:55:a0:2e:29:e7:b0:fa:34:b6:d6:08:60: 1e:90:13:7a:4f:44:01:40:fe:a3:56:35:7b:6d:f6: 6c:5d:03:f7:ad:6a:ac:08:c4:d7:0f:9c:3e:03:6b: ae:74:99:a3:3d:43:5e:9f:7c:b8:b6:cc:f6:73:29: 22:04:2d:17:30:e0:63:3c:48:8d:14:da:48:a9:ed: c3:31:9e:53:18:c9:80:c5:34:41:2e:a2:c4:2f:33: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:85:0E:1E:35:CD:C6:FA:7D:84:94:A6:29:99:86:EF:F0:6C:DD:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8954cdb0-4fa2-3ce3-8817-56f09b67efc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:7d:c9:77:be:35:14:24:b0:09:47:e0:e2:a7:21:b8:ea:f9: 13:46:ee:b1:64:b5:af:0d:90:5a:10:0a:81:bb:e2:53:f7:38: 21:52:7c:2b:87:4c:10:26:f7:02:4d:3c:ca:d8:11:73:a4:4c: cf:74:04:dc:35:8c:fa:1a:9a:45:82:61:c8:5b:9c:2b:ad:33: 52:6e:c8:b9:1e:c5:b1:51:b4:fc:ae:f4:2f:09:b0:b1:57:f4: cf:cb:43:db:20:c0:9a:21:7a:0a:9d:b2:f6:b4:85:70:49:54: 12:24:4e:c7:7b:04:35:96:f0:14:36:b8:6b:7c:f4:00:45:a6: 5b:a6:69:45:eb:6b:c0:b7:35:41:b8:be:a3:52:dd:dc:e2:bc: 96:e9:89:11:20:46:10:26:4d:78:55:ca:a3:ac:ca:9d:fc:07: 4a:53:b2:1a:04:a2:e6:d5:d8:2f:09:54:46:de:f6:0c:27:e3: f0:cf:78:78:94:a0:c3:da:b9:7d:61:af:9e:d3:2b:32:69:30: 64:66:75:0a:90:dd:b0:76:c5:db:a4:a9:33:7e:d1:9c:28:ce: 17:ae:de:cb:57:f2:f5:5c:7b:1c:fb:ec:bb:2c:10:31:ed:8c: fa:ab:48:d6:72:22:7b:bc:50:91:95:72:c0:ea:2d:5a:20:c8: af:f6:4d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGT0V9vFNfnRg7GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYyMjEwMDcwNFoXDTI1MDkyMDEwMDcwNFowLzEtMCsGA1UEAxMk YWZhM2NhNTUtNjZjYy00ZjY1LWEyZGYtZGUzNDI0NDg1YWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlINf0a4l0OrR/35tZ9tj7gWH32UZqx4JaToq l5PMsV8KNeDZ5WCbPSI7d65e8k92x4zzlcNKFDFCo7MfIg7KOJ56/Ls4b3jJF4d8 8TfDeoS2R89AIOCEqTn2NP2uc6yvkGEEATuHx6VFQh/SOEv2l3weZu/sMuSiwOGy LaOTqcBgo+KHaIBCyEbNHpHK9FEPy2LaZoqu7RNAuW+9booJXA64JiecCN9VoC4p 57D6NLbWCGAekBN6T0QBQP6jVjV7bfZsXQP3rWqsCMTXD5w+A2uudJmjPUNen3y4 tsz2cykiBC0XMOBjPEiNFNpIqe3DMZ5TGMmAxTRBLqLELzOdswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOFDh41zcb6fYSUpimZhu/wbN2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODk1NGNkYjAtNGZhMi0z Y2UzLTg4MTctNTZmMDliNjdlZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd9yXe+NRQksAlH4OKnIbjq+RNG7rFkta8NkFoQCoG74lP3OCFSfCuH TBAm9wJNPMrYEXOkTM90BNw1jPoamkWCYchbnCutM1JuyLkexbFRtPyu9C8JsLFX 9M/LQ9sgwJohegqdsva0hXBJVBIkTsd7BDWW8BQ2uGt89ABFplumaUXra8C3NUG4 vqNS3dzivJbpiREgRhAmTXhVyqOsyp38B0pTshoEoubV2C8JVEbe9gwn4/DPeHiU oMPauX1hr57TKzJpMGRmdQqQ3bB2xdukqTN+0Zwozheu3stX8vVcexz77LssEDHt jPqrSNZyInu8UJGVcsDqLVogyK/2TRE= -----END CERTIFICATE-----Generated at Sun Jun 29 16:33:38 2025 by rpki-client