$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cec018e6-5599-32b2-8246-8086dd48cf76.roa File: cec018e6-5599-32b2-8246-8086dd48cf76.roa (raw, json) Hash identifier: xG75gnIUFbRowBi6aM+f9Ssw1oXwdmbZdgNh2Co8qME= Subject key identifier: 8B:4A:EE:A0:D8:E8:E9:9C:E4:D7:CC:EF:E8:93:67:F1:72:EF:69:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81462DA888713D6904057780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cec018e6-5599-32b2-8246-8086dd48cf76.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.29.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:2d:a8:88:71:3d:69:04:05:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=bf46febc-911d-4902-9c58-84f2c7782c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:c2:df:f4:16:78:f5:db:97:60:5c:51:96: 1d:34:0e:b2:2c:2d:b1:66:76:08:3b:ee:e6:b6:c8: 3c:7b:3d:f9:73:e5:d1:05:aa:57:30:9d:29:8e:9e: 32:d3:b7:be:3d:3f:52:9f:ef:36:a3:a6:0b:9b:ac: 22:46:f6:61:c4:4f:83:f4:e0:00:10:f8:fa:21:50: 52:90:eb:30:84:0a:15:9b:41:01:cf:62:01:7e:f4: f9:03:86:10:cf:ff:60:57:82:ba:5c:7d:f0:0e:dd: 2d:eb:e5:1a:b0:c5:04:45:a2:1d:6d:d1:b7:78:95: fd:7e:4a:3c:07:f1:28:58:61:e6:e6:72:13:a6:aa: 7b:91:a8:a0:7d:4d:07:9d:bd:b4:05:be:33:2a:d5: ed:bc:1b:f5:ff:2c:f9:f4:22:cf:67:a5:35:41:5b: 51:ca:b9:45:6b:2a:96:0e:b2:f8:1f:bf:53:c9:29: 86:01:2f:25:46:9a:16:c7:de:b7:6f:b8:91:1e:dc: cf:53:90:cd:8e:5b:49:c0:74:5f:1d:f7:79:06:77: 0d:c6:50:0c:4f:db:6f:67:30:01:4a:b4:b4:5a:27: b0:b8:2e:47:dc:55:ae:aa:33:96:a6:8a:ae:e1:17: 27:8a:aa:8b:21:e7:3b:06:33:3b:3d:09:ec:4b:40: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4A:EE:A0:D8:E8:E9:9C:E4:D7:CC:EF:E8:93:67:F1:72:EF:69:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cec018e6-5599-32b2-8246-8086dd48cf76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:10:8d:6f:cc:bc:6a:90:0d:21:09:0d:6d:75:1e:26:11:2b: 3f:f3:9f:ea:12:d0:9f:07:39:83:c3:30:27:b4:67:18:4b:19: 73:44:a8:ec:fb:d2:4f:19:37:f4:f0:32:bc:8b:9e:a3:41:14: f3:87:d8:ae:ea:63:2d:54:3f:e9:ca:72:77:60:64:77:4e:e8: b0:0e:25:16:80:78:a8:95:61:56:24:36:6b:e0:d2:50:d2:5c: 6b:e3:06:b3:2f:42:f2:48:ba:d5:ed:75:d5:cc:23:d8:55:d9: 65:28:ee:56:3d:c6:4b:7d:ce:52:58:98:9c:a3:e3:ac:75:31: be:3a:e5:3c:25:67:fd:cd:a1:47:cc:ab:6f:1d:0a:25:3d:7f: 4e:39:31:77:da:9a:c6:4d:ab:f6:62:f1:cb:cc:23:0a:1c:b1: cb:c4:e5:b0:7f:9c:c3:e6:21:61:c4:e1:8b:4f:57:f5:2a:49: b3:6f:9f:c1:ac:32:88:ce:14:e0:3d:5a:c3:7c:69:e7:83:01: 45:cf:28:d6:40:4b:a2:4d:59:a9:a1:ee:9d:3b:27:87:4b:71: 72:7a:f8:c4:7c:00:68:68:2a:d6:55:a7:9a:bf:56:bc:a0:d2: 03:35:53:e7:aa:ab:24:b3:13:52:d3:1f:d2:90:2c:05:9b:48: f1:25:3d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRi2oiHE9aQQFd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YmY0NmZlYmMtOTExZC00OTAyLTljNTgtODRmMmM3NzgyYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJbC3/QWePXbl2BcUZYdNA6yLC2xZnYIO+7m tsg8ez35c+XRBapXMJ0pjp4y07e+PT9Sn+82o6YLm6wiRvZhxE+D9OAAEPj6IVBS kOswhAoVm0EBz2IBfvT5A4YQz/9gV4K6XH3wDt0t6+UasMUERaIdbdG3eJX9fko8 B/EoWGHm5nITpqp7kaigfU0Hnb20Bb4zKtXtvBv1/yz59CLPZ6U1QVtRyrlFayqW DrL4H79TySmGAS8lRpoWx963b7iRHtzPU5DNjltJwHRfHfd5BncNxlAMT9tvZzAB SrS0WiewuC5H3FWuqjOWpoqu4RcniqqLIec7BjM7PQnsS0DULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItK7qDY6Omc5NfM7+iTZ/Fy72lkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2VjMDE4ZTYtNTU5OS0z MmIyLTgyNDYtODA4NmRkNDhjZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAQjW/MvGqQDSEJDW11HiYRKz/zn+oS0J8HOYPDMCe0ZxhLGXNEqOz7 0k8ZN/TwMryLnqNBFPOH2K7qYy1UP+nKcndgZHdO6LAOJRaAeKiVYVYkNmvg0lDS XGvjBrMvQvJIutXtddXMI9hV2WUo7lY9xkt9zlJYmJyj46x1Mb465TwlZ/3NoUfM q28dCiU9f045MXfamsZNq/Zi8cvMIwocscvE5bB/nMPmIWHE4YtPV/UqSbNvn8Gs MojOFOA9WsN8aeeDAUXPKNZAS6JNWamh7p07J4dLcXJ6+MR8AGhoKtZVp5q/Vryg 0gM1U+eqqySzE1LTH9KQLAWbSPElPQI= -----END CERTIFICATE-----Generated at Tue Aug 5 17:26:17 2025 by rpki-client