$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa File: 1dfa53ed-25a5-382b-854b-25b9e457911a.roa (raw, json) Hash identifier: yYUin4URlDkuhFk1vt4WxJRuJ9kgU30uD60m4BKq3fg= Subject key identifier: DF:95:21:F1:D5:E3:33:B1:BE:36:79:8A:F4:E8:D0:A2:36:DF:67:D8 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285849B579B2E78901C6C2CC496800 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa Signing time: Thu 01 May 2025 13:00:21 +0000 ROA not before: Thu 01 May 2025 13:00:21 +0000 ROA not after: Wed 30 Jul 2025 13:00:21 +0000 asID: 62651 IP address blocks: 173.245.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:79:b2:e7:89:01:c6:c2:cc:49:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: May 1 13:00:21 2025 GMT Not After : Jul 30 13:00:21 2025 GMT Subject: CN=673935c8-0093-459f-a1a2-253afcc9aee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:07:bf:74:42:c1:e4:38:3d:86:1b:de:05:04: 28:5f:b9:80:00:66:f7:a6:53:a3:2e:a3:d1:d6:6c: d5:ed:ef:40:ed:b2:df:a4:72:d1:9f:ed:85:87:1d: d7:71:c9:65:1f:df:e2:a0:ee:82:24:cc:47:2e:f2: b6:04:90:40:ae:00:d5:e5:bc:71:3e:7b:5a:52:89: cc:e7:6b:0f:cb:15:e2:71:39:7c:a6:c5:8a:e9:e0: 50:3d:17:0f:45:00:9e:60:82:55:11:f2:bb:54:13: c6:94:ae:8e:44:37:8b:a7:b2:29:7b:b8:08:4c:02: 69:58:53:6a:7d:54:a4:14:f9:fb:31:73:04:ed:8a: b9:29:61:bf:0b:19:2b:37:cd:b8:5e:72:ec:92:f8: 84:5f:da:5a:9a:37:72:d5:0b:f7:f8:fd:86:e1:8b: 0d:16:13:8a:46:c3:d4:0c:bf:79:fa:fc:38:cc:4b: 9e:f9:c6:04:06:9a:0b:06:d8:82:50:3e:b4:34:c5: bf:70:c8:f7:b0:d2:54:0a:ed:6f:c2:b3:5c:68:f9: 8d:44:92:75:b5:e4:ca:51:9d:fe:fc:82:27:58:d4: d9:d2:0b:98:e6:d9:66:6b:86:dd:95:dc:b9:6e:e9: 81:96:57:a5:61:54:3b:f9:a2:26:ca:17:22:cb:85: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:95:21:F1:D5:E3:33:B1:BE:36:79:8A:F4:E8:D0:A2:36:DF:67:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5a:f0:83:81:de:2e:ac:94:54:55:39:e5:f5:e5:e4:80:14: 73:9f:05:9f:55:02:0d:d2:c6:c1:ce:b8:f5:4a:e0:98:14:07: f6:5b:89:2a:4f:dc:71:f4:5c:b7:86:ee:29:52:f9:e2:e8:b2: 32:b9:45:d9:ba:01:b2:db:ab:fb:05:9c:c5:a5:65:cd:95:3b: 94:80:64:c6:03:38:5e:96:7c:99:90:ef:63:51:68:a3:a4:16: c3:23:7c:ce:e0:2e:4b:e7:88:26:92:72:6b:3f:97:9f:7d:9c: d9:65:97:93:71:ac:f2:9f:fd:65:6f:4c:d7:73:1d:5e:a9:5a: 5a:0a:79:0d:e4:6d:43:87:db:c3:1b:14:42:0a:6a:08:25:32: f5:94:e0:19:14:09:32:bb:ed:1f:f7:a6:57:69:1b:44:04:0d: 58:96:e1:6c:20:8b:93:4b:de:c9:8a:e0:73:6b:a3:67:51:1b: 19:26:c7:32:12:2f:d7:38:8d:1d:59:fc:f5:9d:24:ea:d0:1d: 5c:a4:12:f1:e6:f3:e6:07:88:31:e8:8b:2e:d8:16:16:00:31: 2e:1e:bc:f1:c2:0c:23:1c:cd:63:da:e8:fd:6e:cb:14:ad:ab: ff:50:0f:47:79:c1:fd:47:e5:13:e8:41:6e:82:d5:85:02:54: 64:96:8d:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ebLniQHGwsxJaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDUwMTEzMDAyMVoXDTI1MDczMDEzMDAyMVowLzEtMCsGA1UEAxMk NjczOTM1YzgtMDA5My00NTlmLWExYTItMjUzYWZjYzlhZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQe/dELB5Dg9hhveBQQoX7mAAGb3plOjLqPR 1mzV7e9A7bLfpHLRn+2Fhx3XccllH9/ioO6CJMxHLvK2BJBArgDV5bxxPntaUonM 52sPyxXicTl8psWK6eBQPRcPRQCeYIJVEfK7VBPGlK6ORDeLp7Ipe7gITAJpWFNq fVSkFPn7MXME7Yq5KWG/CxkrN824XnLskviEX9pamjdy1Qv3+P2G4YsNFhOKRsPU DL95+vw4zEue+cYEBpoLBtiCUD60NMW/cMj3sNJUCu1vwrNcaPmNRJJ1teTKUZ3+ /IInWNTZ0guY5tlma4bdldy5bumBllelYVQ7+aImyhciy4WYoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+VIfHV4zOxvjZ5ivTo0KI232fYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMWRmYTUzZWQtMjVhNS0z ODJiLTg1NGItMjViOWU0NTc5MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExa8IOB3i6slFRVOeX15eSAFHOfBZ9VAg3SxsHOuPVK4JgUB/ZbiSpP 3HH0XLeG7ilS+eLosjK5Rdm6AbLbq/sFnMWlZc2VO5SAZMYDOF6WfJmQ72NRaKOk FsMjfM7gLkvniCaScms/l599nNlll5NxrPKf/WVvTNdzHV6pWloKeQ3kbUOH28Mb FEIKagglMvWU4BkUCTK77R/3pldpG0QEDViW4Wwgi5NL3smK4HNro2dRGxkmxzIS L9c4jR1Z/PWdJOrQHVykEvHm8+YHiDHoiy7YFhYAMS4evPHCDCMczWPa6P1uyxSt q/9QD0d5wf1H5RPoQW6C1YUCVGSWjU4= -----END CERTIFICATE-----Generated at Sun Jun 15 16:07:31 2025 by rpki-client