$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa File: bdaa0aba-b515-360a-8168-d64f29315153.roa (raw, json) Hash identifier: 7xWpi9dfj927Yul3AfvHdjmAhi2BjUikknuIdoMha74= Subject key identifier: 29:C1:DC:E6:F6:74:DA:7F:61:62:98:56:1D:B9:44:A9:0B:4A:5F:C7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AD3A12A4D988289C6C4FFB780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 19905 IP address blocks: 173.29.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:2a:4d:98:82:89:c6:c4:ff:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=b371bb0a-2875-4937-afe6-c11c448dc38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:ba:09:02:19:db:37:d7:b6:d6:40:4d:e8: b4:33:11:29:36:6a:a4:33:10:ff:12:3c:d9:81:eb: 53:e5:fb:63:fb:b3:f5:69:83:04:49:26:95:0e:1c: ac:99:b3:6b:16:35:21:b7:d8:7b:20:a0:57:f9:bb: bc:a2:14:65:48:d9:3b:b6:62:5b:a8:74:5b:55:54: 8d:16:f8:ee:5e:70:3e:ab:a4:b3:7e:85:e6:0e:95: 56:2f:ed:a5:a2:e2:38:79:42:e2:07:99:59:54:bf: 66:92:8b:d8:58:a2:39:93:48:1a:41:3b:11:fb:b7: 88:21:31:5a:8f:c0:7b:35:18:23:b7:c9:ca:d7:9a: 24:38:35:c8:61:6b:34:13:1d:f8:7b:3a:6c:44:d8: 17:69:36:8f:91:e8:cd:58:04:95:1a:f9:42:22:0b: f8:5f:c2:a5:0d:5e:d9:e9:20:3e:2d:b8:ce:55:dd: 4a:5c:8d:09:ac:ec:b2:5d:1c:99:b1:dc:e4:b5:33: a1:ef:61:28:0b:39:59:42:ea:f6:b5:08:2e:bb:35: 1b:c0:b0:6f:14:3a:48:4a:d4:25:f1:ca:7e:29:cd: f5:da:23:11:d9:dc:e6:97:b2:37:38:f1:aa:e3:a4: e0:70:79:7b:dd:b8:51:fc:7a:a0:fa:e6:50:7d:83: da:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C1:DC:E6:F6:74:DA:7F:61:62:98:56:1D:B9:44:A9:0B:4A:5F:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5c:f6:ad:f7:74:48:d6:27:f6:9e:1b:cb:aa:6b:26:c6:f8: c9:06:60:ef:41:c1:9e:ca:00:90:59:c7:86:82:99:d3:41:64: d3:40:f4:dc:95:9d:36:ab:34:e0:d3:d3:b3:33:79:e1:98:7a: 5b:cd:a2:d6:af:46:bd:34:81:72:e0:3d:96:74:7c:b9:50:df: 81:b5:7b:58:6f:7d:81:9b:30:88:3a:f6:87:17:18:f0:5a:6d: 08:de:8e:e9:6a:31:64:09:45:98:0e:de:5c:b2:3d:ef:8d:92: 0a:1e:94:f4:f8:7d:18:8e:4d:99:b0:18:80:39:9a:75:da:1e: 14:a0:00:6a:a4:b1:6a:37:3d:0d:44:b6:0f:0c:44:7d:7f:50: 02:7e:fc:7a:f1:11:68:fd:4e:f8:c5:c3:1e:04:d3:4d:d0:e8: 59:84:a2:8d:64:3a:16:d6:41:84:36:bb:06:59:ef:f4:45:13: 70:9e:ef:f9:17:0e:68:ad:03:d7:79:a3:75:52:3a:e6:be:95: 6f:02:6c:c8:57:22:6c:34:ad:9e:20:ae:6e:a6:1b:4e:c9:9f: 25:7a:0e:1a:cf:3d:b9:2c:d9:d0:7a:be:b2:92:de:8c:cc:6a: 6b:df:05:b0:4f:2e:38:0b:0c:fa:02:a7:53:01:9e:03:a3:60: 4f:c2:b4:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSpNmIKJxsT/t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YjM3MWJiMGEtMjg3NS00OTM3LWFmZTYtYzExYzQ0OGRjMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSO6CQIZ2zfXttZATei0MxEpNmqkMxD/EjzZ getT5ftj+7P1aYMESSaVDhysmbNrFjUht9h7IKBX+bu8ohRlSNk7tmJbqHRbVVSN FvjuXnA+q6SzfoXmDpVWL+2louI4eULiB5lZVL9mkovYWKI5k0gaQTsR+7eIITFa j8B7NRgjt8nK15okODXIYWs0Ex34ezpsRNgXaTaPkejNWASVGvlCIgv4X8KlDV7Z 6SA+LbjOVd1KXI0JrOyyXRyZsdzktTOh72EoCzlZQur2tQguuzUbwLBvFDpIStQl 8cp+Kc312iMR2dzml7I3OPGq46TgcHl73bhR/Hqg+uZQfYPaQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnB3Ob2dNp/YWKYVh25RKkLSl/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRhYTBhYmEtYjUxNS0z NjBhLTgxNjgtZDY0ZjI5MzE1MTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBc9q33dEjWJ/aeG8uqaybG+MkGYO9BwZ7KAJBZx4aCmdNBZNNA9NyV nTarNODT07MzeeGYelvNotavRr00gXLgPZZ0fLlQ34G1e1hvfYGbMIg69ocXGPBa bQjejulqMWQJRZgO3lyyPe+NkgoelPT4fRiOTZmwGIA5mnXaHhSgAGqksWo3PQ1E tg8MRH1/UAJ+/HrxEWj9TvjFwx4E003Q6FmEoo1kOhbWQYQ2uwZZ7/RFE3Ce7/kX DmitA9d5o3VSOua+lW8CbMhXImw0rZ4grm6mG07JnyV6DhrPPbks2dB6vrKS3ozM amvfBbBPLjgLDPoCp1MBngOjYE/CtD0= -----END CERTIFICATE-----Generated at Sat Aug 23 08:23:32 2025 by rpki-client