$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa File: 8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa (raw, json) Hash identifier: G2V2+xnAkRixj8n7JakKZEym6JtdQ134rhNH7ln3gSg= Subject key identifier: FF:6E:A8:47:D3:25:94:7D:BF:9C:D3:05:10:8B:1F:12:E7:E8:B3:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410F09BB03553B60054DE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:f0:9b:b0:35:53:b6:00:54:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=26ffd350-11e2-4bac-b595-d49b3a8a92fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:08:2f:0a:da:6a:0f:77:39:59:3a:fb:9c: cf:2c:2e:86:67:68:8a:2b:58:7f:ec:44:27:1d:b2: 85:5d:2e:d8:36:9f:4a:4f:18:dd:c3:4d:26:87:bd: ac:fe:0c:d6:cf:32:29:9a:f3:42:a3:9c:fb:49:b6: 25:e6:db:76:f8:3f:1d:4f:cb:7b:ed:9b:0c:e1:fd: 49:82:e8:05:61:7b:20:fb:0a:34:ee:e1:8d:d8:bf: 8d:12:7c:c8:94:81:a4:96:e8:5e:29:21:e4:26:78: 74:60:a1:36:a3:a5:ae:37:b4:fe:f6:a8:8c:b0:50: 95:ea:c4:1a:0a:2f:5d:c4:ff:5b:e4:48:b9:11:ea: 0f:be:d0:67:99:d3:07:8d:3d:5a:9a:dc:59:af:76: e3:fd:ea:0b:78:ae:63:05:71:e4:c4:42:50:53:bc: 94:1d:33:ef:a5:47:40:b1:de:33:9d:55:5c:1e:8e: e4:91:8a:f5:aa:4b:79:61:38:8c:dc:8a:7e:b3:8b: cb:4e:9b:25:7d:f1:e1:7d:e5:98:da:89:ee:30:92: 6d:8f:ed:d3:25:66:b2:b7:ce:71:7f:e9:8d:36:ad: 9c:48:aa:b5:a8:06:20:68:80:67:d0:e2:30:03:e8: 2d:d0:73:6b:a6:3c:13:a7:47:8f:17:cc:10:49:97: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6E:A8:47:D3:25:94:7D:BF:9C:D3:05:10:8B:1F:12:E7:E8:B3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:12:5f:e0:d6:15:0d:ce:8a:05:ac:e5:64:c5:6b:2d:ed:0c: 92:e7:81:dc:43:b9:b0:8d:a1:a6:ea:e1:e8:ea:6d:f8:4b:12: 65:92:b6:27:1b:2a:b8:e3:2a:5e:58:34:67:4f:39:c8:a2:4d: 3a:c2:d5:7e:d5:f6:da:4e:9c:ef:a7:d5:11:37:fe:7e:21:34: 56:82:34:75:3e:ef:23:e9:f2:ab:2a:59:2b:79:44:04:ce:d2: 07:af:4b:98:ac:34:1a:f2:07:03:3e:75:67:fa:94:9c:b7:24: 40:64:72:b7:a9:b2:99:f6:4f:22:b5:88:9d:c9:0a:cf:e4:82: 3a:dc:05:14:22:8f:7a:59:a9:a3:5f:43:52:52:58:97:7b:db: 8d:13:7d:9b:0b:26:8b:b1:18:96:47:b0:5c:78:9d:0b:bc:63: 31:56:6c:63:57:d0:98:ff:25:ec:d9:08:7e:58:61:11:6c:04: ad:f1:35:90:77:8c:77:e3:8f:10:1d:d9:11:65:e6:00:56:ff: c2:0f:ae:74:d8:5c:72:09:79:5e:39:4f:0d:38:68:d1:9d:7d: 43:56:a8:ab:30:44:9c:8c:7d:04:8d:29:78:f1:12:ee:b3:8c: d2:6c:91:f9:35:a5:02:64:2f:0b:d5:a4:03:1a:70:9e:f2:aa: de:cc:9c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPCbsDVTtgBU3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjZmZmQzNTAtMTFlMi00YmFjLWI1OTUtZDQ5YjNhOGE5MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRkILwraag93OVk6+5zPLC6GZ2iKK1h/7EQn HbKFXS7YNp9KTxjdw00mh72s/gzWzzIpmvNCo5z7SbYl5tt2+D8dT8t77ZsM4f1J gugFYXsg+wo07uGN2L+NEnzIlIGkluheKSHkJnh0YKE2o6WuN7T+9qiMsFCV6sQa Ci9dxP9b5Ei5EeoPvtBnmdMHjT1amtxZr3bj/eoLeK5jBXHkxEJQU7yUHTPvpUdA sd4znVVcHo7kkYr1qkt5YTiM3Ip+s4vLTpslffHhfeWY2onuMJJtj+3TJWayt85x f+mNNq2cSKq1qAYgaIBn0OIwA+gt0HNrpjwTp0ePF8wQSZelbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9uqEfTJZR9v5zTBRCLHxLn6LNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGNjM2E0MTAtZWJmMS0z NTk2LWE5NjMtOGViNWFmMWM3YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACASX+DWFQ3OigWs5WTFay3tDJLngdxDubCNoabq4ejqbfhLEmWSticb KrjjKl5YNGdPOciiTTrC1X7V9tpOnO+n1RE3/n4hNFaCNHU+7yPp8qsqWSt5RATO 0gevS5isNBryBwM+dWf6lJy3JEBkcrepspn2TyK1iJ3JCs/kgjrcBRQij3pZqaNf Q1JSWJd7240TfZsLJouxGJZHsFx4nQu8YzFWbGNX0Jj/JezZCH5YYRFsBK3xNZB3 jHfjjxAd2RFl5gBW/8IPrnTYXHIJeV45Tw04aNGdfUNWqKswRJyMfQSNKXjxEu6z jNJskfk1pQJkLwvVpAMacJ7yqt7MnLE= -----END CERTIFICATE-----Generated at Wed Aug 6 04:00:08 2025 by rpki-client