$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa File: 4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa (raw, json) Hash identifier: EeDy184UyegV9tpTK7iHBYBM9Kr4P9tPT8n6R2HODyo= Subject key identifier: 43:AD:71:59:32:F8:7F:22:16:91:B6:FF:1D:59:26:92:4B:D9:3D:10 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A896D713F92545355E2D5B300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa Signing time: Wed 16 Jul 2025 11:07:01 +0000 ROA not before: Wed 16 Jul 2025 11:07:01 +0000 ROA not after: Tue 14 Oct 2025 11:07:01 +0000 asID: 30036 IP address blocks: 173.23.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:6d:71:3f:92:54:53:55:e2:d5:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 16 11:07:01 2025 GMT Not After : Oct 14 11:07:01 2025 GMT Subject: CN=4438d012-009d-4020-9dd8-89307aa979ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:64:d7:23:fd:12:85:c0:7b:3a:6c:2c:26:a4: d5:cc:83:3b:17:60:8b:50:92:57:de:09:53:c6:60: 19:32:79:5c:26:36:b1:5a:b8:31:ab:75:1e:fe:5c: 82:08:3d:79:47:1a:15:cf:59:3d:2d:2f:b6:05:ee: 0d:ea:45:5e:54:c7:a3:07:67:ad:7c:73:7e:e1:75: 06:f4:f0:66:2d:39:f9:0b:77:09:5a:f0:25:67:f2: 6a:81:79:3d:a1:37:0c:96:fa:6f:75:72:e4:e4:2e: 5c:02:39:48:49:33:d3:49:c6:b2:35:05:67:a3:bf: 3e:55:7a:2b:e8:16:4c:c6:d2:a1:72:af:7b:bb:0f: 11:db:66:ad:9e:20:29:11:dd:08:2a:31:cd:6f:11: 4f:ac:a1:87:76:9a:8a:6f:41:81:74:fe:eb:d8:5e: 8f:83:8b:83:01:4d:9a:52:54:34:e5:2b:dd:ce:ca: d3:23:a5:ef:96:18:46:09:71:06:25:6e:85:7e:c2: ba:c9:42:ce:89:67:7e:87:c6:1d:f4:e2:df:92:1c: 35:3f:a9:a3:5a:66:14:72:28:c1:63:d6:e9:65:b3: 5a:b8:f2:7c:54:26:bf:6c:4b:2a:e3:c4:de:db:58: c2:6a:53:51:28:0e:3a:26:c5:70:3a:21:9e:61:7f: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AD:71:59:32:F8:7F:22:16:91:B6:FF:1D:59:26:92:4B:D9:3D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:63:2a:c9:25:fc:56:9f:da:12:6a:41:3a:b0:e1:b7:b1:eb: 02:cd:64:e4:56:c5:ff:7b:c4:27:f6:19:10:c0:07:d6:4a:1b: e8:b5:8c:ad:8e:39:44:5c:8c:ad:9a:fd:f6:e3:e4:90:53:2e: 2a:95:6c:4a:c1:d6:30:15:0d:db:81:2f:96:a6:34:d0:7b:b1: c2:ed:80:60:c4:3f:44:3e:08:71:10:65:71:2c:71:d5:54:06: 67:06:7f:7b:97:e4:2d:6e:aa:92:2e:1b:fd:75:7e:8c:11:95: 86:93:d5:fe:ac:5e:95:05:36:b5:d5:f7:77:0e:30:d4:58:f7: ea:e5:1f:c5:c2:36:4c:d8:32:be:75:97:94:7e:6d:49:ca:e3: b1:59:9c:48:e4:75:75:db:51:fd:95:7e:13:2c:1b:da:1a:1e: 9d:04:d9:ad:73:db:e1:63:40:8c:fc:af:41:7c:2a:23:4f:91: 23:94:d6:2f:87:8e:12:91:a7:08:26:7f:0a:11:b5:29:c1:27: 6d:75:ac:47:3a:83:9a:77:6a:79:9d:a6:bd:70:4b:a8:b8:f0: 2d:ce:c8:0a:50:72:d0:c1:84:62:65:2c:1f:7c:0b:f7:72:4c: fa:f5:fa:17:0a:99:bc:77:d9:c0:43:3e:be:37:e1:30:47:41: 52:8f:ce:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJbXE/klRTVeLVswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNjExMDcwMVoXDTI1MTAxNDExMDcwMVowLzEtMCsGA1UEAxMk NDQzOGQwMTItMDA5ZC00MDIwLTlkZDgtODkzMDdhYTk3OWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimTXI/0ShcB7OmwsJqTVzIM7F2CLUJJX3glT xmAZMnlcJjaxWrgxq3Ue/lyCCD15RxoVz1k9LS+2Be4N6kVeVMejB2etfHN+4XUG 9PBmLTn5C3cJWvAlZ/JqgXk9oTcMlvpvdXLk5C5cAjlISTPTScayNQVno78+VXor 6BZMxtKhcq97uw8R22atniApEd0IKjHNbxFPrKGHdpqKb0GBdP7r2F6Pg4uDAU2a UlQ05SvdzsrTI6XvlhhGCXEGJW6FfsK6yULOiWd+h8Yd9OLfkhw1P6mjWmYUcijB Y9bpZbNauPJ8VCa/bEsq48Te21jCalNRKA46JsVwOiGeYX9yEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOtcVky+H8iFpG2/x1ZJpJL2T0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY4NGE2N2QtMDY5Yi0z ZWVhLWE5ZmEtZDJmNTNhNDE3YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrReQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVjKskl/Faf2hJqQTqw4bex6wLNZORWxf97xCf2GRDAB9ZKG+i1jK2O OURcjK2a/fbj5JBTLiqVbErB1jAVDduBL5amNNB7scLtgGDEP0Q+CHEQZXEscdVU BmcGf3uX5C1uqpIuG/11fowRlYaT1f6sXpUFNrXV93cOMNRY9+rlH8XCNkzYMr51 l5R+bUnK47FZnEjkdXXbUf2VfhMsG9oaHp0E2a1z2+FjQIz8r0F8KiNPkSOU1i+H jhKRpwgmfwoRtSnBJ211rEc6g5p3anmdpr1wS6i48C3OyApQctDBhGJlLB98C/dy TPr1+hcKmbx32cBDPr434TBHQVKPzu8= -----END CERTIFICATE-----Generated at Tue Aug 5 22:58:33 2025 by rpki-client