$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4e47f408-0f3b-3a6f-afe7-5130de9890c8.roa File: 4e47f408-0f3b-3a6f-afe7-5130de9890c8.roa (raw, json) Hash identifier: lQWM8aLHB6af+3uD5IkCm/RmMCUyLYLe7Xygbl9hisk= Subject key identifier: 6E:1C:53:4C:ED:97:2D:64:C0:52:F5:50:74:EF:C9:77:29:B1:F9:A4 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584A7BB0B659428AAABA74D5D600 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4e47f408-0f3b-3a6f-afe7-5130de9890c8.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 40934 IP address blocks: 66.35.19.0/24 maxlen: 24 173.243.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b6:59:42:8a:aa:ba:74:d5:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=8dd30497-6199-490c-b537-da109ee0d9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:f2:6b:39:5b:6e:e3:c8:81:c3:ef:98:4b: a6:4b:86:04:76:7e:af:80:09:85:e4:00:cd:cb:7f: e1:08:8e:1f:41:9e:2a:3c:9e:39:8e:e3:8f:6a:1c: c8:3e:53:02:df:80:d8:e0:af:83:77:88:a4:36:4f: eb:8d:8d:92:3d:dd:f1:cc:43:1b:1d:e0:87:e2:b8: af:38:57:be:dc:dd:73:3d:95:e7:83:d8:47:f5:09: 16:af:16:ea:b8:64:3c:ce:8d:ce:a3:59:a0:d9:dc: 99:a7:db:ce:c8:ea:92:a1:ae:81:fa:88:f5:21:5d: 98:65:c4:0e:40:7a:13:6b:e2:88:cd:7b:0f:d3:d9: ef:a4:24:f8:cd:c1:bf:13:6f:61:df:3b:61:fa:74: ff:14:35:08:b4:21:a7:2b:80:aa:1c:d4:5a:eb:df: be:bd:91:53:d9:58:e1:8d:4b:b9:bc:b4:61:73:f6: 51:26:92:fa:ad:d3:5e:92:3c:37:22:cf:4d:7a:64: c5:77:47:a8:46:53:45:d9:fa:cb:bd:62:9e:d4:69: 15:12:e2:c4:11:81:42:ee:e7:30:ab:d7:c2:a5:0a: c4:66:df:ff:19:20:b2:ad:a0:a0:dd:0d:19:29:00: fa:fc:ad:e0:33:2d:4a:b3:ef:92:a6:bc:03:69:6d: 3e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1C:53:4C:ED:97:2D:64:C0:52:F5:50:74:EF:C9:77:29:B1:F9:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4e47f408-0f3b-3a6f-afe7-5130de9890c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 66.35.19.0/24 173.243.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a6:10:82:ce:3d:1a:6a:60:11:86:33:46:a0:58:b6:29:d1: 33:a8:7d:93:fc:85:45:bc:08:8e:5f:f9:bc:c0:83:a0:eb:1e: 11:3f:a1:70:3e:d1:19:3f:a8:12:bc:ce:8d:40:5e:86:33:2d: 08:17:5c:8e:fc:05:cc:81:70:6b:52:68:6c:b3:28:7f:94:41: c4:db:12:c9:5b:06:d0:d0:c5:fa:e4:d1:6d:dd:01:63:08:29: 99:8a:1e:1d:3f:cf:98:22:ab:5d:43:a6:56:8f:df:b5:ce:55: 51:40:db:a9:8c:45:66:29:b0:6c:52:77:db:6f:11:b0:c4:c2: 07:30:86:f2:6f:54:d2:09:85:8f:d0:12:78:76:b7:61:fd:a7: 76:58:0e:86:b4:df:c6:4a:35:e7:85:e4:df:c6:2a:76:c0:35: e6:97:5d:9e:09:cb:1b:87:fe:63:86:3b:da:08:7d:ec:40:bd: ea:ec:a6:85:31:4e:36:b1:e1:b3:79:ed:88:c1:b4:2f:fe:d6: 1c:02:32:c6:85:12:de:d3:90:2b:4e:94:40:e4:4e:1b:2f:8c: 78:47:61:84:48:7e:fb:83:3c:f7:11:93:30:cb:5a:34:08:1b: cf:e0:78:d0:84:dc:ff:d0:95:c6:7f:1a:c2:09:2e:40:42:57: 9c:5b:52:25 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEp7sLZZQoqqunTV1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OGRkMzA0OTctNjE5OS00OTBjLWI1MzctZGExMDllZTBkOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpjyazlbbuPIgcPvmEumS4YEdn6vgAmF5ADN y3/hCI4fQZ4qPJ45juOPahzIPlMC34DY4K+Dd4ikNk/rjY2SPd3xzEMbHeCH4riv OFe+3N1zPZXng9hH9QkWrxbquGQ8zo3Oo1mg2dyZp9vOyOqSoa6B+oj1IV2YZcQO QHoTa+KIzXsP09nvpCT4zcG/E29h3zth+nT/FDUItCGnK4CqHNRa69++vZFT2Vjh jUu5vLRhc/ZRJpL6rdNekjw3Is9NemTFd0eoRlNF2frLvWKe1GkVEuLEEYFC7ucw q9fCpQrEZt//GSCyraCg3Q0ZKQD6/K3gMy1Ks++SprwDaW0+IQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG4cU0ztly1kwFL1UHTvyXcpsfmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvNGU0N2Y0MDgtMGYzYi0z YTZmLWFmZTctNTEzMGRlOTg5MGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQiMTAwQA rfOCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIqmEILOPRpqYBGGM0agWLYp0TOofZP8hUW8CI5f+bzAg6Dr HhE/oXA+0Rk/qBK8zo1AXoYzLQgXXI78BcyBcGtSaGyzKH+UQcTbEslbBtDQxfrk 0W3dAWMIKZmKHh0/z5giq11DplaP37XOVVFA26mMRWYpsGxSd9tvEbDEwgcwhvJv VNIJhY/QEnh2t2H9p3ZYDoa038ZKNeeF5N/GKnbANeaXXZ4JyxuH/mOGO9oIfexA verspoUxTjax4bN57YjBtC/+1hwCMsaFEt7TkCtOlEDkThsvjHhHYYRIfvuDPPcR kzDLWjQIG8/geNCE3P/QlcZ/GsIJLkBCV5xbUiU= -----END CERTIFICATE-----Generated at Wed Aug 6 07:57:27 2025 by rpki-client