$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa File: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (raw, json) Hash identifier: gLt4osCJH11a3iX1ztxRrPjr5/wPuj56ZoNq2aKEmQE= Subject key identifier: 7C:24:DE:09:2A:3E:91:E7:D3:82:B2:BE:57:2F:F7:D2:CF:4F:B5:BB Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F4328584A857602DA959C8CFB09BEE400 Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 13566 IP address blocks: 204.76.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:02:da:95:9c:8c:fb:09:be:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=6512d37e-45ec-4c9e-8183-24a821009005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:f1:94:96:cd:65:f7:2f:3f:44:1a:3a:68: b8:6b:07:5c:d7:1d:ab:09:83:dc:4a:3f:9c:5c:b1: 7b:75:e8:b4:8b:8a:8d:ee:2e:62:6d:cd:7c:b8:23: 3c:19:e2:99:e0:4f:e9:dc:e6:10:a4:e2:9d:29:f1: eb:dd:3b:f3:23:a3:08:d8:21:91:93:3b:4b:23:bd: 62:da:bb:cb:eb:04:37:c2:0a:9e:5f:96:fb:47:d5: 5d:75:cf:75:6b:18:0d:e2:40:e8:fd:05:9f:5a:f9: 65:ca:bb:f2:92:2c:78:82:33:01:a0:6e:64:e6:6b: 6e:25:db:bc:80:8a:62:d7:f2:7d:1a:a7:2f:c6:f2: 67:d1:a6:81:ea:ff:42:77:fc:50:9a:c0:07:57:31: 7e:af:d1:34:9e:d4:30:b5:d3:65:da:76:a1:a1:72: 86:73:af:d1:b1:31:00:35:77:e8:ab:6d:bf:68:30: c2:e1:f9:94:6f:81:49:67:9f:09:e6:ba:b8:fa:15: 5b:d7:4f:8f:48:f1:1f:84:97:10:48:26:5c:65:08: 72:34:4b:e5:33:8a:69:64:29:88:3f:bf:76:0f:4f: e6:6b:8c:d3:f3:e0:e3:83:d1:0f:21:f7:99:c6:3e: f1:7a:63:90:08:dc:47:3d:ae:be:43:f9:18:3c:6d: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:DE:09:2A:3E:91:E7:D3:82:B2:BE:57:2F:F7:D2:CF:4F:B5:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: 204.76.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ee:52:7a:81:98:35:55:21:10:09:a7:5a:92:99:61:ab:f7: 75:29:7f:06:45:c7:bb:3f:d4:f8:2a:c2:e7:cb:4b:bb:2c:da: fa:64:99:42:42:f9:76:18:37:74:97:03:65:13:3f:35:91:ab: 7d:b1:29:b3:d2:be:e9:b5:19:98:8c:4c:b5:fd:04:15:70:90: 62:83:d6:fc:9e:b6:78:95:18:20:68:2c:68:7b:f9:e0:e9:37: 8d:65:64:6f:a9:29:90:2f:50:10:c1:43:83:14:e6:3e:8e:b6: 7c:7b:29:f8:b7:a3:5f:ba:8f:20:5d:49:5b:f4:72:c5:fe:e1: f7:28:ef:19:04:37:db:88:13:90:aa:40:13:44:85:1b:0a:10: 47:54:97:3d:1a:21:23:8b:d2:fa:5f:c4:97:c3:8b:32:96:b3: 43:3a:98:60:90:4b:27:28:eb:9c:15:a4:71:58:11:c0:81:df: cc:5f:8d:be:46:e2:74:9d:df:53:de:c0:0f:92:e6:72:d0:39: 0a:9b:1f:36:c6:26:f2:5b:38:64:07:e7:28:7a:45:8f:87:a9: b4:b2:fc:16:7e:c3:ab:c4:db:6c:ec:71:42:53:92:68:33:c2: 78:b9:f7:6d:a2:6b:6a:02:ca:a9:5c:63:2a:c9:7a:c2:7a:bc: 49:51:2e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgLalZyM+wm+5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NjUxMmQzN2UtNDVlYy00YzllLTgxODMtMjRhODIxMDA5MDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0/xlJbNZfcvP0QaOmi4awdc1x2rCYPcSj+c XLF7dei0i4qN7i5ibc18uCM8GeKZ4E/p3OYQpOKdKfHr3TvzI6MI2CGRkztLI71i 2rvL6wQ3wgqeX5b7R9Vddc91axgN4kDo/QWfWvllyrvykix4gjMBoG5k5mtuJdu8 gIpi1/J9GqcvxvJn0aaB6v9Cd/xQmsAHVzF+r9E0ntQwtdNl2nahoXKGc6/RsTEA NXfoq22/aDDC4fmUb4FJZ58J5rq4+hVb10+PSPEfhJcQSCZcZQhyNEvlM4ppZCmI P792D0/ma4zT8+Djg9EPIfeZxj7xemOQCNxHPa6+Q/kYPG1YSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwk3gkqPpHn04Kyvlcv99LPT7W7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvM2EzZmY3MmMtYjczMi0z NjY3LWFkZTEtOWQ2M2MxNTA3NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzuUnqBmDVVIRAJp1qSmWGr93UpfwZFx7s/1PgqwufLS7ss2vpkmUJC +XYYN3SXA2UTPzWRq32xKbPSvum1GZiMTLX9BBVwkGKD1vyetniVGCBoLGh7+eDp N41lZG+pKZAvUBDBQ4MU5j6Otnx7Kfi3o1+6jyBdSVv0csX+4fco7xkEN9uIE5Cq QBNEhRsKEEdUlz0aISOL0vpfxJfDizKWs0M6mGCQSyco65wVpHFYEcCB38xfjb5G 4nSd31PewA+S5nLQOQqbHzbGJvJbOGQH5yh6RY+HqbSy/BZ+w6vE22zscUJTkmgz wni5922ia2oCyqlcYyrJesJ6vElRLvA= -----END CERTIFICATE-----Generated at Fri Aug 8 00:07:11 2025 by rpki-client