$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa File: 7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa (raw, json) Hash identifier: dxnQknYbIRX/KQIKg28iCWnsMd2dHoKveCWFiRSkfJc= Subject key identifier: 4B:31:DB:44:D1:53:BA:98:46:54:53:17:79:15:33:F1:8F:EB:D5:3C Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584AA85BA6FEA31228DB9501A080 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 139267 IP address blocks: 173.243.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a6:fe:a3:12:28:db:95:01:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=dace420e-fc6c-40e3-b6e8-602bc18c07d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:3e:24:98:d1:e7:72:71:45:de:8e:7b:cf: 20:10:b3:92:3a:3b:77:18:e4:f9:df:a3:fc:f2:66: e1:74:be:e6:e7:38:be:a2:a8:c1:06:7a:ba:59:a3: 9b:05:76:e5:60:ae:49:b4:25:f0:0a:7a:8c:9c:e5: d1:c5:02:d9:df:8a:31:ea:5d:93:38:78:e4:9d:76: 56:0e:7e:95:39:a2:43:57:fd:6c:f0:60:e8:75:43: 7e:61:18:cc:83:52:81:84:29:ef:e2:3a:9a:5f:96: 43:e6:db:e1:14:65:e6:0e:04:df:a4:80:5e:17:06: 88:7f:aa:91:9d:79:54:ba:ef:96:1e:99:01:64:3f: 00:05:e9:c0:7a:c9:94:e3:0f:54:3d:93:fd:80:3a: 59:a9:00:f6:1f:81:4e:fe:e5:27:c6:4f:f3:31:99: 2a:06:a5:7f:aa:74:e6:73:be:9f:c8:4a:0e:b5:af: ba:a0:be:b9:98:07:3b:b3:2d:50:dd:4e:76:9a:57: 18:c5:9e:3d:58:6c:34:db:bc:25:c6:8c:7f:13:db: 14:6d:8d:ff:b5:b0:a0:6e:40:af:5b:6c:88:7d:77: f3:b3:6a:77:d9:89:84:e6:97:cd:f7:58:3f:ce:23: e6:6d:27:de:3b:7a:cc:b8:12:b8:96:f8:06:b7:26: 73:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:31:DB:44:D1:53:BA:98:46:54:53:17:79:15:33:F1:8F:EB:D5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 173.243.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:ac:d6:72:bc:dc:52:f1:07:be:19:75:94:82:2e:de:62:c0: 44:17:32:b2:c4:9d:c9:98:e0:02:30:d7:97:c7:80:f1:95:b8: 1c:c8:2b:65:d2:e1:28:2d:f0:7a:23:a8:aa:89:4e:35:95:94: f3:1d:70:ba:fa:ff:4f:02:32:76:80:42:1c:36:e5:f8:56:76: 68:98:98:99:62:f1:d1:43:b4:4f:5c:4d:f8:3d:93:3a:34:ee: 90:04:0b:5e:d9:6c:45:6c:64:9b:0e:0d:0d:45:95:1c:1f:dd: 1c:29:aa:0b:67:37:24:29:2f:cf:bf:79:0c:21:d3:c2:ac:8a: 1e:30:b4:e9:d7:f6:98:d9:ce:14:17:f4:08:46:2e:da:56:5d: 03:29:e4:f2:5a:70:bb:2a:3b:ee:42:d3:73:49:a2:b1:71:76: b5:b6:8d:23:31:ad:f5:64:2b:02:e3:e6:61:45:57:58:bb:f0: 4b:fd:4b:53:0b:07:c7:32:53:79:c3:eb:2a:35:4f:da:cf:0e: 6b:a0:ff:1c:cc:9a:a4:89:4d:d2:31:77:78:2e:be:cf:f7:a2: e2:c1:66:09:64:3f:1f:ff:c7:96:3b:b4:76:0f:be:da:21:2a: bb:c2:2e:f6:8d:a0:49:b1:7b:29:6b:04:8d:a3:8f:44:39:39: 43:08:18:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6b+oxIo25UBoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ZGFjZTQyMGUtZmM2Yy00MGUzLWI2ZTgtNjAyYmMxOGMwN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOY+JJjR53JxRd6Oe88gELOSOjt3GOT536P8 8mbhdL7m5zi+oqjBBnq6WaObBXblYK5JtCXwCnqMnOXRxQLZ34ox6l2TOHjknXZW Dn6VOaJDV/1s8GDodUN+YRjMg1KBhCnv4jqaX5ZD5tvhFGXmDgTfpIBeFwaIf6qR nXlUuu+WHpkBZD8ABenAesmU4w9UPZP9gDpZqQD2H4FO/uUnxk/zMZkqBqV/qnTm c76fyEoOta+6oL65mAc7sy1Q3U52mlcYxZ49WGw027wlxox/E9sUbY3/tbCgbkCv W2yIfXfzs2p32YmE5pfN91g/ziPmbSfeO3rMuBK4lvgGtyZzLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsx20TRU7qYRlRTF3kVM/GP69U8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvN2E1MDA3MDYtOTFhMS0z N2IwLWExNmUtYTAyYWM5YWEzOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSs1nK83FLxB74ZdZSCLt5iwEQXMrLEncmY4AIw15fHgPGVuBzIK2XS 4Sgt8HojqKqJTjWVlPMdcLr6/08CMnaAQhw25fhWdmiYmJli8dFDtE9cTfg9kzo0 7pAEC17ZbEVsZJsODQ1FlRwf3RwpqgtnNyQpL8+/eQwh08Ksih4wtOnX9pjZzhQX 9AhGLtpWXQMp5PJacLsqO+5C03NJorFxdrW2jSMxrfVkKwLj5mFFV1i78Ev9S1ML B8cyU3nD6yo1T9rPDmug/xzMmqSJTdIxd3guvs/3ouLBZglkPx//x5Y7tHYPvtoh KrvCLvaNoEmxeylrBI2jj0Q5OUMIGJE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:16:31 2025 by rpki-client