$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e028f08e-8540-312c-827e-7bbb61381277.roa File: e028f08e-8540-312c-827e-7bbb61381277.roa (raw, json) Hash identifier: ajOTiwpfg7Sb25XMj+PjQ/WctPIfdezlbzXJg/zov/I= Subject key identifier: 56:F9:16:F4:88:E8:9F:A3:D3:85:6F:00:CB:4B:DA:96:BE:9F:26:DE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841246B4ACE863C54E6DC680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e028f08e-8540-312c-827e-7bbb61381277.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.18.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:46:b4:ac:e8:63:c5:4e:6d:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0a31748f-5760-425b-b4dc-535eed0053a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:c2:46:a5:ba:fa:16:4d:5c:f1:78:a4:de: d8:b0:78:58:42:7b:29:0c:90:63:78:52:65:92:83: f8:e2:34:0a:7a:35:90:14:0f:b2:2a:fb:c8:d1:a6: af:17:37:2e:60:b4:8e:21:fe:2c:de:dc:b1:d6:a8: c3:58:93:ac:9d:11:e6:d8:01:28:94:7b:93:a4:ee: 70:9e:b2:a5:14:6d:01:f6:a2:0b:93:fe:56:ec:c5: db:01:cf:fd:4f:42:78:24:45:b7:29:ee:ce:16:8c: 5e:37:f3:88:fe:7a:90:33:af:6f:25:86:02:fb:02: 62:d7:4c:75:45:da:34:89:4f:3e:a5:42:f6:3a:25: 1c:60:8b:b6:6e:dd:b8:a3:a5:59:0d:0d:dd:c7:f7: a8:eb:7d:66:d5:e9:2d:18:01:20:5c:85:54:a5:52: 75:eb:b4:2f:65:bc:12:ec:1b:e7:44:9e:a6:ec:65: b6:a1:03:36:05:ae:04:9c:2a:2a:60:5b:b0:26:a4: 6d:d8:f7:44:40:8a:ab:47:e2:0e:12:94:be:8f:08: 84:30:19:01:01:b0:67:bb:27:e0:7e:e4:d6:de:6e: ca:68:7a:8f:a9:e2:ed:de:d5:e6:bb:94:ad:d5:a7: ff:96:af:b1:bc:a5:da:7d:65:7c:b7:1c:ba:76:c0: a6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F9:16:F4:88:E8:9F:A3:D3:85:6F:00:CB:4B:DA:96:BE:9F:26:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e028f08e-8540-312c-827e-7bbb61381277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8f:55:87:13:52:25:8e:b5:92:54:99:3e:56:65:ce:c9:f1: 02:9d:1c:19:e2:4f:b6:37:5f:18:57:9c:fd:11:e1:d0:d3:69: d6:4d:c7:e7:6c:69:85:01:31:a0:c9:d6:53:5e:31:ab:6a:28: a6:9a:20:cf:a1:fe:38:37:9e:09:f9:9b:40:99:92:82:fc:50: c1:68:da:97:7c:fd:3c:18:ec:05:4f:ae:6c:1d:49:c8:5b:f9: 0e:b7:00:68:12:35:f9:83:8a:74:c0:89:7d:96:87:4b:ab:ba: 72:ff:ca:3d:34:3e:a5:23:ce:2a:44:20:f6:ff:53:e6:e9:35: b2:bc:47:6e:38:b7:11:e3:6a:d0:44:56:67:7c:03:83:bf:70: 44:fb:af:68:18:eb:cd:2a:36:f7:b3:de:ed:6d:e4:fd:47:35: d3:72:1b:11:8c:9b:f0:01:be:46:6d:78:82:30:1b:6d:61:db: 69:ae:39:35:bc:6e:ec:d0:27:3c:05:a2:71:9a:dc:5a:19:fb: d1:94:3f:67:a5:29:91:6b:c4:f7:dc:d5:de:9e:05:eb:ea:21: 04:12:1c:fb:ea:86:67:87:50:12:be:84:ad:79:64:9e:2c:bb: ef:55:1c:94:a0:57:8b:4e:4b:4c:73:d4:e3:82:42:e4:ee:19: 49:11:2e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEka0rOhjxU5txoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGEzMTc0OGYtNTc2MC00MjViLWI0ZGMtNTM1ZWVkMDA1M2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdjCRqW6+hZNXPF4pN7YsHhYQnspDJBjeFJl koP44jQKejWQFA+yKvvI0aavFzcuYLSOIf4s3tyx1qjDWJOsnRHm2AEolHuTpO5w nrKlFG0B9qILk/5W7MXbAc/9T0J4JEW3Ke7OFoxeN/OI/nqQM69vJYYC+wJi10x1 Rdo0iU8+pUL2OiUcYIu2bt24o6VZDQ3dx/eo631m1ektGAEgXIVUpVJ167QvZbwS 7BvnRJ6m7GW2oQM2Ba4EnCoqYFuwJqRt2PdEQIqrR+IOEpS+jwiEMBkBAbBnuyfg fuTW3m7KaHqPqeLt3tXmu5St1af/lq+xvKXafWV8txy6dsCm1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb5FvSI6J+j04VvAMtL2pa+nybeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTAyOGYwOGUtODU0MC0z MTJjLTgyN2UtN2JiYjYxMzgxMjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWPVYcTUiWOtZJUmT5WZc7J8QKdHBniT7Y3XxhXnP0R4dDTadZNx+ds aYUBMaDJ1lNeMatqKKaaIM+h/jg3ngn5m0CZkoL8UMFo2pd8/TwY7AVPrmwdSchb +Q63AGgSNfmDinTAiX2Wh0urunL/yj00PqUjzipEIPb/U+bpNbK8R244txHjatBE Vmd8A4O/cET7r2gY680qNvez3u1t5P1HNdNyGxGMm/ABvkZteIIwG21h22muOTW8 buzQJzwFonGa3FoZ+9GUP2elKZFrxPfc1d6eBevqIQQSHPvqhmeHUBK+hK15ZJ4s u+9VHJSgV4tOS0xz1OOCQuTuGUkRLrg= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:51 2025 by rpki-client