$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa File: 844d9a05-ea0e-3347-8704-50962309673e.roa (raw, json) Hash identifier: Vr3iVmBD8WlMHcH1TZWzS8q1aG4aEog8v7Jo0KAo43s= Subject key identifier: 96:E1:81:A0:B9:7C:24:00:F5:13:63:8E:0F:93:C5:1D:1A:B4:21:4F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB6E6778C43083880C11C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.24.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:6e:67:78:c4:30:83:88:0c:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=bd8ac539-1c98-42c8-9532-c12c1b393f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:0d:c0:8b:86:55:f8:c8:ac:34:03:63:1f: 84:e5:60:c5:ca:08:d6:ab:f9:69:c2:57:e8:fb:aa: 18:63:f1:bd:ea:f1:2b:9f:4d:d3:2f:e2:a7:38:c8: 0f:7d:ac:57:66:03:79:db:ff:e9:e4:bf:cf:8e:fb: a7:71:48:ea:36:7c:62:b3:ce:3d:5c:6d:cc:46:b1: 77:67:4b:ee:c1:bc:86:80:4c:37:21:c6:cf:e6:06: 6a:f2:14:c1:a0:6c:b5:3a:0e:8a:66:63:36:57:c5: ef:75:07:4b:0b:71:96:8b:5e:bb:82:e7:e2:f5:22: a6:7c:5e:9d:6e:7e:2a:1f:5e:33:98:a8:64:04:c5: 34:16:fa:ae:a6:e0:08:54:cc:8a:79:8d:87:19:29: 4c:1f:89:f8:75:81:4f:4f:93:03:64:43:15:ed:e6: ae:e4:58:16:68:fd:6c:90:a7:cd:dd:79:1b:52:0b: 40:90:ef:1e:3c:af:c9:81:a2:f8:87:01:a9:7a:34: 43:d3:24:39:29:1e:ae:b5:53:6e:02:7c:bc:b1:cc: b6:58:f1:99:a6:a0:1e:43:07:98:de:0f:5e:e7:cd: 42:cf:41:d6:d5:11:b0:86:3d:55:5f:1d:f7:3b:4f: 57:97:50:ef:31:48:c9:fb:4e:59:a7:1d:c1:2e:e0: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E1:81:A0:B9:7C:24:00:F5:13:63:8E:0F:93:C5:1D:1A:B4:21:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844d9a05-ea0e-3347-8704-50962309673e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:78:3a:c2:05:c4:76:c8:80:9c:04:40:3f:23:63:5d:3b:10: ea:87:11:d4:a3:23:44:f1:b1:b9:d6:89:ee:c1:b2:86:67:b6: c6:2a:8d:fd:c6:17:aa:4b:0e:2c:e7:09:53:d1:09:8c:59:91: 88:a5:eb:d3:4d:58:c6:c7:e1:68:0a:be:4b:cf:43:05:a1:a4: 77:a6:4f:18:85:50:89:76:9d:ca:5d:a0:4e:75:dc:4a:9f:35: fb:0a:67:15:97:89:47:47:62:44:34:fb:73:6b:7a:f6:99:c2: 37:bf:2e:10:72:8d:4f:d6:07:2c:34:81:9d:f9:9f:78:70:4f: 20:07:58:9c:bd:cc:5f:ec:4a:c0:4a:8b:e2:56:e7:75:0a:3b: 48:ec:b0:01:9f:36:72:75:62:73:86:64:8a:c4:b5:6f:19:85: 2c:b3:49:17:8a:64:95:ed:86:89:cc:aa:f9:56:f3:6c:f2:d1: 21:0a:93:df:c5:b2:d9:97:38:c1:3f:ce:d5:00:aa:90:34:16: ff:34:25:15:b1:bc:c5:e0:9e:d4:95:26:e6:af:18:6a:00:13: 54:d6:c8:f9:85:d0:f0:ff:65:de:7d:ae:73:bb:5a:9c:d9:a5: b2:f7:f6:c9:40:3b:15:d9:21:a6:a0:e4:79:5d:a0:9f:c9:e1: 9d:fa:c6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG225neMQwg4gMEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YmQ4YWM1MzktMWM5OC00MmM4LTk1MzItYzEyYzFiMzkzZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT8NwIuGVfjIrDQDYx+E5WDFygjWq/lpwlfo +6oYY/G96vErn03TL+KnOMgPfaxXZgN52//p5L/PjvuncUjqNnxis849XG3MRrF3 Z0vuwbyGgEw3IcbP5gZq8hTBoGy1Og6KZmM2V8XvdQdLC3GWi167gufi9SKmfF6d bn4qH14zmKhkBMU0FvqupuAIVMyKeY2HGSlMH4n4dYFPT5MDZEMV7eau5FgWaP1s kKfN3XkbUgtAkO8ePK/JgaL4hwGpejRD0yQ5KR6utVNuAny8scy2WPGZpqAeQweY 3g9e581Cz0HW1RGwhj1VXx33O09Xl1DvMUjJ+05Zpx3BLuA35wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbhgaC5fCQA9RNjjg+TxR0atCFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ0ZDlhMDUtZWEwZS0z MzQ3LTg3MDQtNTA5NjIzMDk2NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF4OsIFxHbIgJwEQD8jY107EOqHEdSjI0TxsbnWie7BsoZntsYqjf3G F6pLDiznCVPRCYxZkYil69NNWMbH4WgKvkvPQwWhpHemTxiFUIl2ncpdoE513Eqf NfsKZxWXiUdHYkQ0+3NrevaZwje/LhByjU/WByw0gZ35n3hwTyAHWJy9zF/sSsBK i+JW53UKO0jssAGfNnJ1YnOGZIrEtW8ZhSyzSReKZJXthonMqvlW82zy0SEKk9/F stmXOME/ztUAqpA0Fv80JRWxvMXgntSVJuavGGoAE1TWyPmF0PD/Zd59rnO7WpzZ pbL39slAOxXZIaag5HldoJ/J4Z36xqo= -----END CERTIFICATE-----Generated at Wed Aug 6 07:56:42 2025 by rpki-client