$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa File: a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa (raw, json) Hash identifier: k0Qc8b2vmO4zB+M0nXY4b7uLY6F9ZTZQDzfZpgUkpdg= Subject key identifier: A9:3D:7A:88:29:F8:44:F2:0B:70:8E:5A:60:CE:82:AF:D3:E7:D9:2B Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584A17300DEC003C0043799FC780 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 62651 IP address blocks: 173.245.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:0d:ec:00:3c:00:43:79:9f:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=0466063c-5299-401f-ab6b-7bf548c79006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:c5:51:6f:64:9b:ab:18:0c:db:9b:c9:e4: 8c:61:e4:34:b2:70:5d:aa:09:62:04:17:d4:84:a2: 53:13:9d:d6:8f:e3:f5:10:73:7e:d9:dc:92:ca:d2: d7:aa:cb:c8:7a:60:2c:1a:ec:a8:93:9b:0a:a5:41: e6:1e:22:d0:45:c0:ea:02:1a:2c:90:0e:59:eb:1c: f6:2a:7f:5a:33:eb:99:a2:74:40:26:3b:53:1d:23: fa:27:ea:49:6d:0e:1d:63:03:b6:23:7e:5b:59:74: 56:31:fa:83:23:37:54:dd:5d:cc:10:cf:bc:b6:5c: 9f:31:e4:e3:7f:3e:0f:fc:0c:fe:c0:48:50:8c:81: 53:11:31:bf:4f:19:77:14:89:c4:59:28:f0:0c:c3: 0e:62:4a:b8:ab:b5:b9:28:82:5e:f3:59:70:29:c6: f0:b4:13:0f:17:54:d2:f6:44:88:dd:e7:c9:c1:3a: db:d8:9c:e7:10:ba:cd:06:bd:6e:29:c4:cd:63:ac: 7d:c1:77:90:fd:c1:a3:75:a1:12:a7:2b:3d:78:50: 05:5e:97:20:94:67:fb:2a:8c:ce:da:f9:70:61:a8: e7:52:10:69:73:3b:00:a6:f5:17:f7:6a:e1:03:74: 2f:f0:52:9d:3d:39:cf:a5:ed:26:86:7e:5a:6b:c8: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3D:7A:88:29:F8:44:F2:0B:70:8E:5A:60:CE:82:AF:D3:E7:D9:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:86:c0:34:41:e4:83:b1:3e:06:42:48:1b:01:41:8e:16:a5: c0:4c:aa:95:c3:39:34:94:fc:b9:d8:dd:80:35:2b:f9:ab:fc: ce:91:2c:19:8f:7a:d6:59:66:59:77:c5:b2:77:3c:64:c5:9b: 0f:30:a8:45:47:bd:d7:a5:97:cc:26:e9:c2:63:e1:b9:ee:c6: f3:3f:78:ce:d0:21:b2:84:4c:ca:e2:f7:16:7d:b7:92:88:f4: f6:dc:0c:6d:86:f5:23:0a:41:91:13:f5:78:b2:39:93:51:5a: 9a:a3:4a:a9:98:e3:7c:c7:87:91:04:ad:a7:94:b4:e2:38:8e: 35:00:66:fa:56:d4:0a:33:9a:8b:67:be:b1:97:cd:03:bb:9f: 1c:f7:bc:e5:8e:42:21:2b:11:2b:fb:1a:bd:8c:6d:36:89:a1: 03:7e:7b:07:7c:d8:3d:e3:d3:3d:0d:6e:76:c0:df:15:cd:8f: e1:eb:c8:8f:8c:21:31:dd:06:07:86:ef:2b:12:cf:75:ae:d7: 3a:af:e0:de:e3:0f:23:63:08:9e:32:e6:1d:d8:fb:0e:b6:97: c3:fc:a0:4e:7b:f9:ae:92:db:e0:56:1c:e3:6f:6e:21:23:18: ca:9a:b5:f7:0a:5d:d6:5d:6d:5b:f1:80:26:11:99:e9:30:4c: ec:69:32:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMA3sADwAQ3mfx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk MDQ2NjA2M2MtNTI5OS00MDFmLWFiNmItN2JmNTQ4Yzc5MDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyvFUW9km6sYDNubyeSMYeQ0snBdqgliBBfU hKJTE53Wj+P1EHN+2dySytLXqsvIemAsGuyok5sKpUHmHiLQRcDqAhoskA5Z6xz2 Kn9aM+uZonRAJjtTHSP6J+pJbQ4dYwO2I35bWXRWMfqDIzdU3V3MEM+8tlyfMeTj fz4P/Az+wEhQjIFTETG/Txl3FInEWSjwDMMOYkq4q7W5KIJe81lwKcbwtBMPF1TS 9kSI3efJwTrb2JznELrNBr1uKcTNY6x9wXeQ/cGjdaESpys9eFAFXpcglGf7KozO 2vlwYajnUhBpczsApvUX92rhA3Qv8FKdPTnPpe0mhn5aa8i/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk9eogp+ETyC3COWmDOgq/T59krMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYTMzN2JmMzItMGRkNS0z OTlhLWIzMGMtYjg2Y2JkYzgxOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6GwDRB5IOxPgZCSBsBQY4WpcBMqpXDOTSU/LnY3YA1K/mr/M6RLBmP etZZZll3xbJ3PGTFmw8wqEVHvdell8wm6cJj4bnuxvM/eM7QIbKETMri9xZ9t5KI 9PbcDG2G9SMKQZET9XiyOZNRWpqjSqmY43zHh5EEraeUtOI4jjUAZvpW1Aozmotn vrGXzQO7nxz3vOWOQiErESv7Gr2MbTaJoQN+ewd82D3j0z0NbnbA3xXNj+HryI+M ITHdBgeG7ysSz3Wu1zqv4N7jDyNjCJ4y5h3Y+w62l8P8oE57+a6S2+BWHONvbiEj GMqatfcKXdZdbVvxgCYRmekwTOxpMtE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:34:51 2025 by rpki-client