$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa File: 1af58f65-539a-35e4-8e11-237912be598c.roa (raw, json) Hash identifier: te0jdgzdGXOrc5SRxr5S3VevVrKNYIx0mhHGAvGBxEo= Subject key identifier: DD:7C:00:BA:9C:3B:F4:2F:A3:2A:39:49:D2:31:F9:AC:A4:52:F1:7B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E749575468803D417DC8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.18.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e7:49:57:54:68:80:3d:41:7d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7643342d-852e-470d-99ed-e2440307e350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:d4:db:9b:8d:20:28:0b:16:4d:80:a4:98: 46:31:ba:6d:50:ef:39:5e:66:b7:e8:c1:06:46:cf: a1:40:5d:8a:9a:98:4f:a0:63:89:04:68:98:b2:45: de:09:69:02:4f:fa:89:12:78:83:f5:e0:6f:ef:25: 76:e8:df:c3:be:85:9f:d6:7d:f6:c5:0a:03:a1:7e: e5:35:7c:ed:ac:d9:2e:82:67:e8:6e:20:08:9e:0b: 43:b0:74:21:a9:68:cc:9b:6f:f4:e8:13:cb:79:51: 6f:89:31:b3:23:dc:95:93:f0:06:da:65:0f:c2:c0: 89:f9:d0:d4:41:6c:22:e0:e9:39:9b:eb:f6:e2:15: f7:8b:83:22:7d:38:30:8d:af:85:67:e3:9e:cd:fb: 56:84:dc:16:d1:7e:06:61:73:eb:20:6a:29:21:ef: 4b:52:a7:e1:45:00:26:1d:fc:44:cc:f4:12:91:76: 5c:b0:20:6f:1b:6b:e7:d3:fa:95:9c:5c:74:a8:46: 78:4c:ef:3c:8f:2d:48:58:a6:3e:64:62:01:0a:d3: 46:dd:ef:6e:12:8f:91:bc:7f:1e:12:75:04:63:3a: 9f:f5:18:b9:69:e3:fd:bc:5b:69:70:a4:ad:58:95: e5:90:f1:e5:68:7c:04:80:f1:63:b0:42:e8:9f:d5: a9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7C:00:BA:9C:3B:F4:2F:A3:2A:39:49:D2:31:F9:AC:A4:52:F1:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f0:04:88:15:db:9e:e3:6c:f2:17:34:ea:39:9c:57:1e:2b: be:02:cf:b7:45:d8:9d:f3:5e:75:54:48:5e:a6:a5:c7:f9:51: 03:98:cd:70:78:84:6c:72:af:ee:dd:47:6f:7d:f5:ed:fc:6e: 6a:28:1d:b0:0f:f7:9f:53:c2:0b:ad:05:15:bc:a2:3a:36:f4: 1e:0a:c6:6c:07:4a:a6:36:97:07:06:4f:d2:13:ed:e8:63:3d: aa:70:7e:2e:41:90:6e:7b:52:03:14:8b:30:5d:a2:9d:ce:51: 7f:c8:02:23:a9:a4:da:aa:9f:fd:bf:33:ac:b0:5c:1a:02:25: d2:0b:0a:93:7e:8e:ee:e7:a3:a1:12:2e:77:f4:b6:8a:f0:38: a4:8c:c0:31:cd:2c:55:d7:61:71:6a:d6:44:01:2d:7c:b7:83: 75:ba:28:fe:47:ef:82:fd:4e:2e:e3:75:f2:a4:4c:dd:3d:5f: ec:c1:e1:2f:e4:9b:1d:27:60:70:01:58:87:c4:03:c5:0e:e0: 0e:fc:1e:10:8b:d8:85:28:93:fc:d4:39:72:6f:c5:77:c4:c7: 66:46:50:67:72:df:2d:e3:b7:94:36:f5:54:62:96:cb:c5:11: 82:4a:b7:10:91:2a:0f:1e:e6:09:9c:2c:1e:d5:eb:e4:1b:e5: 83:2e:71:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOdJV1RogD1BfcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzY0MzM0MmQtODUyZS00NzBkLTk5ZWQtZTI0NDAzMDdlMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcjU25uNICgLFk2ApJhGMbptUO85Xma36MEG Rs+hQF2KmphPoGOJBGiYskXeCWkCT/qJEniD9eBv7yV26N/DvoWf1n32xQoDoX7l NXztrNkugmfobiAIngtDsHQhqWjMm2/06BPLeVFviTGzI9yVk/AG2mUPwsCJ+dDU QWwi4Ok5m+v24hX3i4MifTgwja+FZ+OezftWhNwW0X4GYXPrIGopIe9LUqfhRQAm HfxEzPQSkXZcsCBvG2vn0/qVnFx0qEZ4TO88jy1IWKY+ZGIBCtNG3e9uEo+RvH8e EnUEYzqf9Ri5aeP9vFtpcKStWJXlkPHlaHwEgPFjsELon9WpiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN18ALqcO/Qvoyo5SdIx+aykUvF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWFmNThmNjUtNTM5YS0z NWU0LThlMTEtMjM3OTEyYmU1OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETwBIgV257jbPIXNOo5nFceK74Cz7dF2J3zXnVUSF6mpcf5UQOYzXB4 hGxyr+7dR2999e38bmooHbAP959TwgutBRW8ojo29B4KxmwHSqY2lwcGT9IT7ehj Papwfi5BkG57UgMUizBdop3OUX/IAiOppNqqn/2/M6ywXBoCJdILCpN+ju7no6ES Lnf0torwOKSMwDHNLFXXYXFq1kQBLXy3g3W6KP5H74L9Ti7jdfKkTN09X+zB4S/k mx0nYHABWIfEA8UO4A78HhCL2IUok/zUOXJvxXfEx2ZGUGdy3y3jt5Q29VRilsvF EYJKtxCRKg8e5gmcLB7V6+Qb5YMucZ0= -----END CERTIFICATE-----Generated at Wed Aug 6 04:01:29 2025 by rpki-client