$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa File: 88c29cb3-d0f8-3556-894d-ea5396a34670.roa (raw, json) Hash identifier: naenZ7m+lJKa96CRE51D7b5jMMlGbnPQTvA+2cMcqI8= Subject key identifier: 60:41:68:96:5E:2D:65:A0:79:C0:54:24:86:B5:C4:A4:E8:02:FC:62 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841245251EAB6ADC870A8C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.22.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:45:25:1e:ab:6a:dc:87:0a:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1df0d789-e649-41d0-b3bb-2add258bf93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e8:74:9b:83:21:eb:31:46:64:f4:bd:aa:c4: ee:02:73:df:88:ee:6d:ae:32:0f:c8:8b:30:73:bc: 98:81:8f:4b:03:c2:6b:ed:69:36:bc:b5:50:1c:8c: 3f:b2:03:f2:e3:63:45:1b:21:4d:d7:91:33:52:4e: 4d:19:6e:fe:76:e2:54:e3:32:e2:ee:40:c4:f1:96: db:d7:5c:ff:9b:04:ad:6b:08:63:db:07:62:eb:ce: 35:3e:df:dd:f6:d3:40:5c:82:8a:51:1a:7d:b7:d6: 61:c3:4a:c6:91:a6:90:cf:26:dd:a6:16:39:8d:b4: ac:eb:5e:ed:42:94:bd:9c:46:e1:08:72:f1:45:80: 9a:5a:b0:65:54:b1:4b:ab:f2:14:50:28:c9:64:ce: 2e:af:d6:46:d7:90:c8:f1:b4:a6:ef:0a:09:45:c8: e6:e8:05:43:48:f2:ed:f0:39:a1:7a:a3:f6:9f:98: b7:62:5f:30:ca:87:73:db:8d:c6:88:21:7d:6d:c8: 6e:6c:66:96:03:04:de:6a:43:66:ea:d0:4b:be:72: 5a:d0:28:d1:6b:b8:cd:b2:90:6c:42:b8:ae:38:e0: d9:69:e9:b4:78:4b:a1:b6:aa:bc:0e:e8:50:e6:47: 86:5b:b2:24:ff:13:e2:b6:c3:39:28:02:56:c7:cf: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:41:68:96:5E:2D:65:A0:79:C0:54:24:86:B5:C4:A4:E8:02:FC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:47:38:64:2e:c6:b8:78:4a:27:97:ba:36:1d:d9:32:57:cf: b0:e7:90:03:e2:88:5e:15:cc:a6:8b:6a:de:b4:10:b3:44:31: 9f:88:44:b7:84:44:30:8a:8c:c4:ec:b8:37:3f:ff:ae:85:f9: fb:eb:80:34:e5:b7:09:6d:c7:8f:f5:d9:2e:6d:a2:36:c8:2e: eb:c8:68:a3:c3:59:50:a0:59:9a:97:1e:3e:c5:fe:ab:9c:89: fd:d3:4c:e8:00:4b:2c:21:a3:5a:83:83:35:fc:de:d2:bf:41: ac:c5:7c:e3:49:e5:71:81:a4:ad:83:2b:12:12:af:da:ac:dd: da:2f:a0:f9:31:93:33:0d:28:42:a9:2e:e7:42:de:01:12:96: b6:c6:bb:78:85:12:dd:dc:75:0c:9a:7c:7e:a2:97:8e:17:7c: d2:d5:e7:44:93:bc:69:f9:18:70:0d:df:0f:5c:07:24:c4:10: 64:a1:06:f6:0e:94:d9:de:ac:2e:c3:90:9b:b5:fd:7c:71:f3: f6:e9:30:a6:97:76:e6:e4:30:8f:8f:52:3d:53:1b:c8:50:00: 55:ab:8f:97:df:8a:21:de:d6:67:52:b0:9f:26:5b:2b:99:51: fd:42:cd:c2:f5:32:b1:4e:a5:e3:ac:bf:f9:ae:59:bc:cd:63: 89:f8:8a:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkUlHqtq3IcKjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWRmMGQ3ODktZTY0OS00MWQwLWIzYmItMmFkZDI1OGJmOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Oh0m4Mh6zFGZPS9qsTuAnPfiO5trjIPyIsw c7yYgY9LA8Jr7Wk2vLVQHIw/sgPy42NFGyFN15EzUk5NGW7+duJU4zLi7kDE8Zbb 11z/mwStawhj2wdi6841Pt/d9tNAXIKKURp9t9Zhw0rGkaaQzybdphY5jbSs617t QpS9nEbhCHLxRYCaWrBlVLFLq/IUUCjJZM4ur9ZG15DI8bSm7woJRcjm6AVDSPLt 8DmheqP2n5i3Yl8wyodz243GiCF9bchubGaWAwTeakNm6tBLvnJa0CjRa7jNspBs QriuOODZaem0eEuhtqq8DuhQ5keGW7Ik/xPitsM5KAJWx89Z+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBBaJZeLWWgecBUJIa1xKToAvxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODhjMjljYjMtZDBmOC0z NTU2LTg5NGQtZWE1Mzk2YTM0NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENHOGQuxrh4SieXujYd2TJXz7DnkAPiiF4VzKaLat60ELNEMZ+IRLeE RDCKjMTsuDc//66F+fvrgDTltwltx4/12S5tojbILuvIaKPDWVCgWZqXHj7F/quc if3TTOgASywho1qDgzX83tK/QazFfONJ5XGBpK2DKxISr9qs3dovoPkxkzMNKEKp LudC3gESlrbGu3iFEt3cdQyafH6il44XfNLV50STvGn5GHAN3w9cByTEEGShBvYO lNnerC7DkJu1/Xxx8/bpMKaXdubkMI+PUj1TG8hQAFWrj5ffiiHe1mdSsJ8mWyuZ Uf1CzcL1MrFOpeOsv/muWbzNY4n4ins= -----END CERTIFICATE-----Generated at Wed Aug 6 09:43:21 2025 by rpki-client