$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa File: ca1af946-2717-3844-93e9-437539eb99b4.roa (raw, json) Hash identifier: S8/UbCY/1e+gLJySkjQoyjILM9KN9FiPk3u9KmyMaKU= Subject key identifier: C2:C9:61:B6:36:3D:B3:6E:7D:D7:F1:D6:63:81:28:62:11:6B:55:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412572845A0174796B84900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.18.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:57:28:45:a0:17:47:96:b8:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ee081260-23f9-44db-ab3b-d4cebdace75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:fb:e8:3f:6d:8e:4b:bb:3d:28:ec:8c:6b: 33:d0:55:54:0e:f4:24:36:79:a1:0b:7e:45:44:aa: 73:97:11:d3:8e:67:65:56:6d:dd:cd:17:34:4e:c5: 2c:0f:28:ff:d9:99:00:d0:cc:8d:ba:d7:06:44:1e: 5d:86:6c:74:12:72:d6:ab:ca:9c:77:4d:71:06:cb: b8:29:93:e2:ea:91:9f:6e:cd:a4:0b:0e:55:4f:de: 86:d8:0e:e4:f3:e5:ea:1c:46:1b:3f:69:dc:dd:ea: 74:9f:88:db:d9:5c:0a:85:41:63:c9:5a:10:34:ed: 50:88:d4:95:88:f4:c8:6f:e4:f2:c9:a0:1f:e0:b5: 2a:4a:e4:18:56:39:8c:bb:ba:42:99:2d:73:59:5b: 2d:a1:b5:72:31:26:84:e0:4e:03:39:15:68:34:59: ce:1a:c2:16:e8:e9:55:ea:fa:96:9f:dd:d9:80:f5: 51:08:cc:38:d8:5c:94:41:56:44:f6:29:ea:bf:ac: c3:83:4e:c9:88:a5:82:7a:56:72:13:b9:b8:ce:57: da:d9:e5:c0:d0:18:c9:ef:e9:3d:23:42:40:e5:9b: 93:d3:39:c7:6e:17:7a:9c:20:84:6a:94:dd:4a:22: a1:f8:b4:8f:75:da:a5:83:ab:5a:b1:cd:63:60:14: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C9:61:B6:36:3D:B3:6E:7D:D7:F1:D6:63:81:28:62:11:6B:55:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca1af946-2717-3844-93e9-437539eb99b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ab:5a:48:81:f0:b5:ca:8c:fc:5a:d5:4d:1d:77:2d:47:0b: 3a:76:93:ae:bf:19:5b:9a:3d:25:e2:cd:1a:4f:d4:c1:9e:e7: 4d:45:c1:6e:76:84:de:75:33:2d:33:cc:af:d1:42:30:06:bd: f8:fc:09:26:b2:87:f1:47:d1:5c:9b:e3:75:3f:1a:6c:e4:ef: 96:00:80:8d:7d:d0:46:0d:24:89:17:b5:4a:ce:71:b4:6b:13: 65:29:9c:0e:f2:43:cb:09:1d:99:ad:d5:c4:70:60:5b:fd:e6: 25:9c:89:a6:bc:db:3c:46:17:5e:77:85:32:30:d9:97:01:23: 5a:ac:51:0b:4e:d3:ad:b8:fd:4f:af:48:a7:11:23:fe:81:e0: c5:a5:10:5e:19:ea:af:f3:51:99:e1:a3:2e:c0:a5:ea:c9:6c: 9b:3a:e2:5d:3d:b5:aa:c1:82:48:51:bb:2e:14:6f:26:f8:38: 45:62:d5:b1:cb:2f:d5:73:78:30:b5:ff:47:0d:ff:7b:c3:d7: 5e:ec:61:96:9a:e9:a7:ee:ed:5c:85:83:16:0c:22:fb:52:c1: ee:49:67:27:f2:b0:ba:16:ce:ec:16:6a:33:3b:1a:7b:c3:23: b6:f3:a5:0e:ca:5f:1c:ce:e3:4d:94:f6:e8:cb:05:1a:1e:62: 4a:53:78:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElcoRaAXR5a4SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWUwODEyNjAtMjNmOS00NGRiLWFiM2ItZDRjZWJkYWNlNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk376D9tjku7PSjsjGsz0FVUDvQkNnmhC35F RKpzlxHTjmdlVm3dzRc0TsUsDyj/2ZkA0MyNutcGRB5dhmx0EnLWq8qcd01xBsu4 KZPi6pGfbs2kCw5VT96G2A7k8+XqHEYbP2nc3ep0n4jb2VwKhUFjyVoQNO1QiNSV iPTIb+TyyaAf4LUqSuQYVjmMu7pCmS1zWVstobVyMSaE4E4DORVoNFnOGsIW6OlV 6vqWn93ZgPVRCMw42FyUQVZE9inqv6zDg07JiKWCelZyE7m4zlfa2eXA0BjJ7+k9 I0JA5ZuT0znHbhd6nCCEapTdSiKh+LSPddqlg6tasc1jYBSnLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLJYbY2PbNufdfx1mOBKGIRa1UOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ExYWY5NDYtMjcxNy0z ODQ0LTkzZTktNDM3NTM5ZWI5OWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHirWkiB8LXKjPxa1U0ddy1HCzp2k66/GVuaPSXizRpP1MGe501FwW52 hN51My0zzK/RQjAGvfj8CSayh/FH0Vyb43U/Gmzk75YAgI190EYNJIkXtUrOcbRr E2UpnA7yQ8sJHZmt1cRwYFv95iWciaa82zxGF153hTIw2ZcBI1qsUQtO0624/U+v SKcRI/6B4MWlEF4Z6q/zUZnhoy7AperJbJs64l09tarBgkhRuy4Ubyb4OEVi1bHL L9VzeDC1/0cN/3vD117sYZaa6afu7VyFgxYMIvtSwe5JZyfysLoWzuwWajM7GnvD I7bzpQ7KXxzO402U9ujLBRoeYkpTeMo= -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:58 2025 by rpki-client