$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d74edce3-b124-3472-8aa4-7487a1587b1a.roa File: d74edce3-b124-3472-8aa4-7487a1587b1a.roa (raw, json) Hash identifier: xTdHEKda7eXyeLdJ/rfyObmdfU935GaSG6/oTD1Ta88= Subject key identifier: 94:C0:30:7C:54:9C:C5:D3:EE:94:77:79:4B:04:74:B5:CC:BA:7F:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841247B48CE1D82BFF11AA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d74edce3-b124-3472-8aa4-7487a1587b1a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.18.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:47:b4:8c:e1:d8:2b:ff:11:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e7c31b84-8f1d-4d96-b8e9-a08553324245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:9c:9a:96:4b:08:60:46:0d:f7:45:2a:7d: 1c:55:7d:6f:17:28:e9:44:d9:8e:79:4e:0e:0d:ee: 3a:f3:6e:40:c5:2f:35:fc:fe:63:4c:e4:a1:85:91: 9d:62:19:4b:e5:7d:fa:b6:5f:ba:88:80:9c:9a:f5: 86:04:f9:62:97:80:7a:d8:31:4e:6c:f8:6a:f2:e9: 06:b3:a6:50:33:90:3f:bb:ab:bf:c9:21:14:61:80: 4d:f4:0a:c8:1e:ec:4d:14:5c:36:d5:cc:e0:45:d9: a1:a5:01:5a:db:b2:7b:f2:17:fe:01:14:56:e8:bb: f5:90:34:a4:3f:f9:5b:46:61:29:9e:e4:f9:0c:3b: d2:ee:65:3e:0f:b3:ca:5b:19:26:7f:9d:19:8d:2e: 23:e0:11:f6:02:1c:f1:f1:90:26:29:73:ed:b8:20: 37:59:12:22:6f:71:d2:41:57:4f:6c:1f:52:59:4c: 61:65:6c:f5:15:b9:10:b3:d0:98:3e:bb:b4:cc:10: 98:2d:40:ce:66:e9:fb:ae:3f:af:45:b4:02:ec:18: 12:be:0e:13:2c:3c:f7:90:f9:dc:d3:e5:b7:1e:6b: 01:02:45:c4:3f:f4:56:e7:20:91:37:c9:4f:44:8f: 87:df:68:72:2b:74:f6:6b:67:63:91:c6:82:62:cb: 9c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C0:30:7C:54:9C:C5:D3:EE:94:77:79:4B:04:74:B5:CC:BA:7F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d74edce3-b124-3472-8aa4-7487a1587b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:78:2f:83:db:eb:82:de:19:d6:8a:c8:ee:e6:50:82:7f:8c: 8c:ba:ac:a0:7a:b9:75:63:3f:06:34:40:b1:34:45:b7:34:e2: 25:60:1c:76:7b:9e:af:52:6f:30:65:a1:31:b0:a7:26:f2:d0: 52:12:90:8a:ba:e4:cf:f3:b4:2e:7b:32:f6:e2:d9:e8:ff:48: b8:04:8c:2a:86:30:ec:a2:5b:c8:f1:b9:2a:9b:fb:ee:ab:91: c0:27:b8:56:c8:44:18:1a:8e:63:30:5b:dd:18:5b:5b:3c:7e: 0c:09:9d:58:43:a6:03:c7:e4:71:66:3b:86:a9:17:f7:a9:a2: b0:03:e3:6a:e7:46:e0:f6:72:e9:b2:68:06:c6:a0:7f:d1:eb: ff:e7:7c:03:bd:5c:da:9f:9e:33:47:26:96:5e:bc:b1:6d:14: 9a:36:71:c5:1e:f2:a7:c1:7a:d6:e8:0d:0f:82:6e:32:25:3a: 63:d9:0f:8f:18:9d:2d:c7:0f:92:b3:e7:6e:ae:64:24:40:87: 20:0a:ab:65:3c:5e:c9:6c:4a:58:29:29:0a:39:43:fd:42:e8: 10:42:ba:2a:69:27:b9:39:7b:dd:e5:97:1a:3a:cd:e4:d0:a6: f0:2f:11:f2:39:b1:39:ca:c0:0b:7d:b3:9a:99:f8:e6:be:40: 08:fc:62:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEke0jOHYK/8RqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTdjMzFiODQtOGYxZC00ZDk2LWI4ZTktYTA4NTUzMzI0MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjqcmpZLCGBGDfdFKn0cVX1vFyjpRNmOeU4O De46825AxS81/P5jTOShhZGdYhlL5X36tl+6iICcmvWGBPlil4B62DFObPhq8ukG s6ZQM5A/u6u/ySEUYYBN9ArIHuxNFFw21czgRdmhpQFa27J78hf+ARRW6Lv1kDSk P/lbRmEpnuT5DDvS7mU+D7PKWxkmf50ZjS4j4BH2Ahzx8ZAmKXPtuCA3WRIib3HS QVdPbB9SWUxhZWz1FbkQs9CYPru0zBCYLUDOZun7rj+vRbQC7BgSvg4TLDz3kPnc 0+W3HmsBAkXEP/RW5yCRN8lPRI+H32hyK3T2a2djkcaCYsucjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTAMHxUnMXT7pR3eUsEdLXMun81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDc0ZWRjZTMtYjEyNC0z NDcyLThhYTQtNzQ4N2ExNTg3YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF4L4Pb64LeGdaKyO7mUIJ/jIy6rKB6uXVjPwY0QLE0Rbc04iVgHHZ7 nq9SbzBloTGwpyby0FISkIq65M/ztC57Mvbi2ej/SLgEjCqGMOyiW8jxuSqb++6r kcAnuFbIRBgajmMwW90YW1s8fgwJnVhDpgPH5HFmO4apF/eporAD42rnRuD2cumy aAbGoH/R6//nfAO9XNqfnjNHJpZevLFtFJo2ccUe8qfBetboDQ+CbjIlOmPZD48Y nS3HD5Kz526uZCRAhyAKq2U8XslsSlgpKQo5Q/1C6BBCuippJ7k5e93llxo6zeTQ pvAvEfI5sTnKwAt9s5qZ+Oa+QAj8Yvw= -----END CERTIFICATE-----Generated at Wed Aug 6 04:14:35 2025 by rpki-client