$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json) Hash identifier: zH8Y2dlKwI2zqyJ6ptAkj4mOsSb+9UemPIr8gw0QyLQ= Subject key identifier: 74:0A:E8:70:6D:FE:E5:77:BB:E1:2D:BF:9F:B5:19:71:71:31:56:E2 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584A2D858BC483FD919CBF32E000 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 13849 IP address blocks: 173.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:8b:c4:83:fd:91:9c:bf:32:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=3247a87d-fc49-4d84-a4dd-fcb90a6cfd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7c:96:3c:89:e5:8a:4a:51:78:d4:46:8e:0a: 63:33:82:d8:6c:3b:87:f5:1f:87:56:5c:ea:d9:28: 16:5c:8e:a7:7e:2d:70:3d:a1:b7:ef:ae:b3:5d:d6: ed:da:c8:dd:2d:68:c4:aa:22:e1:1f:33:5c:71:75: 57:f6:cf:69:5e:97:9d:d3:c6:e1:b8:9c:74:05:a1: d7:dd:5a:d4:f1:0a:cb:1a:e7:57:6c:84:8b:b8:e3: ec:ef:74:17:61:b3:bb:74:42:ee:d7:15:8d:79:77: 37:da:fc:ba:aa:52:f0:ec:45:87:2a:8e:73:30:b1: da:a8:f6:68:69:45:21:32:5c:04:ca:28:2f:06:8c: 2e:0d:a7:e7:53:cb:54:5e:80:31:89:13:6e:fd:0a: a4:db:00:01:12:45:30:d0:62:ab:37:c9:ad:5a:1d: 2b:98:6e:95:19:6b:bc:f9:76:30:b7:78:07:bb:72: 56:15:b6:84:b9:cd:96:61:f3:a2:fe:b1:b7:e8:90: 72:a7:63:71:76:80:fa:14:86:50:68:26:2d:c3:6d: b1:a1:26:eb:a5:4d:5c:2e:51:45:4b:bf:8a:81:4d: b8:96:49:d7:bb:fc:dc:af:d4:3f:df:59:70:74:1c: ea:3c:49:9e:8f:37:85:34:1e:62:95:dd:5d:0e:24: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0A:E8:70:6D:FE:E5:77:BB:E1:2D:BF:9F:B5:19:71:71:31:56:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 173.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:3a:4f:73:3b:7a:8d:9f:fb:72:90:e2:ed:ec:b0:fa:eb:18: bb:9f:f2:9b:c3:c0:69:bf:e3:8b:e1:74:c8:2d:c3:ed:08:76: 9a:25:96:0d:f2:0f:74:06:47:dc:40:10:5b:fb:5a:ea:88:2f: 85:53:a5:30:b4:e0:2f:95:d2:0f:18:c7:1a:c6:a6:4b:c3:a6: 6c:59:36:b5:57:b5:0e:d8:27:d7:2c:4d:be:65:bd:2c:12:aa: 87:6e:d9:56:5c:1c:2b:b4:82:27:e1:fb:56:a1:b1:e4:08:0c: 9b:65:ca:6f:7a:13:ee:b8:f8:c5:de:49:84:f8:2e:07:2c:c3: 6f:fc:60:51:37:9a:1f:42:3a:ec:f6:20:2f:48:60:4f:29:67: a2:e1:c2:8e:57:e2:7d:76:d8:15:9e:c0:5c:35:65:ab:5b:60: b8:62:a2:c5:e8:95:3d:c8:7f:e3:0d:2e:93:0b:59:ba:b2:c6: 29:47:85:c6:61:69:52:c1:b1:ea:fa:75:22:99:e8:5f:56:0e: 7d:34:a2:c0:0d:63:a7:47:5a:fa:7b:2c:05:94:f7:ca:9e:6d: d3:28:55:84:5f:b8:2e:c2:07:f1:fa:83:71:81:ea:df:9d:3a: 2f:72:39:7d:cd:10:2b:dc:ae:db:16:1d:c1:9b:34:0f:44:b3: de:5f:49:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothYvEg/2RnL8y4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk MzI0N2E4N2QtZmM0OS00ZDg0LWE0ZGQtZmNiOTBhNmNmZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XyWPInlikpReNRGjgpjM4LYbDuH9R+HVlzq 2SgWXI6nfi1wPaG3766zXdbt2sjdLWjEqiLhHzNccXVX9s9pXped08bhuJx0BaHX 3VrU8QrLGudXbISLuOPs73QXYbO7dELu1xWNeXc32vy6qlLw7EWHKo5zMLHaqPZo aUUhMlwEyigvBowuDafnU8tUXoAxiRNu/Qqk2wABEkUw0GKrN8mtWh0rmG6VGWu8 +XYwt3gHu3JWFbaEuc2WYfOi/rG36JByp2NxdoD6FIZQaCYtw22xoSbrpU1cLlFF S7+KgU24lknXu/zcr9Q/31lwdBzqPEmejzeFNB5ild1dDiRFiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQK6HBt/uV3u+Etv5+1GXFxMVbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZmFlYWEzNWEtM2QwMy0z YzczLTliZWEtYTZlODk5MGFlYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKc6T3M7eo2f+3KQ4u3ssPrrGLuf8pvDwGm/44vhdMgtw+0Idpollg3y D3QGR9xAEFv7WuqIL4VTpTC04C+V0g8YxxrGpkvDpmxZNrVXtQ7YJ9csTb5lvSwS qodu2VZcHCu0gifh+1ahseQIDJtlym96E+64+MXeSYT4Lgcsw2/8YFE3mh9COuz2 IC9IYE8pZ6Lhwo5X4n122BWewFw1ZatbYLhiosXolT3If+MNLpMLWbqyxilHhcZh aVLBser6dSKZ6F9WDn00osANY6dHWvp7LAWU98qebdMoVYRfuC7CB/H6g3GB6t+d Oi9yOX3NECvcrtsWHcGbNA9Es95fSYQ= -----END CERTIFICATE-----Generated at Sun Aug 10 13:45:23 2025 by rpki-client