$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3e18b4fe-be51-30f7-a08c-6f93a63c4707.roa File: 3e18b4fe-be51-30f7-a08c-6f93a63c4707.roa (raw, json) Hash identifier: s7XMM9yeEv4c62CXxMt7NzjaLe4klaBLDLnnXKEK1lk= Subject key identifier: 33:2D:5B:F7:6D:5C:6A:70:B3:F7:A3:16:AC:82:B5:C7:BB:1E:66:3C Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584A5FC60059211A893802DF9740 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3e18b4fe-be51-30f7-a08c-6f93a63c4707.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 19165 IP address blocks: 208.72.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c6:00:59:21:1a:89:38:02:df:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=95dd7788-b670-4257-b6b5-2457be610b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:83:8b:c0:ab:d4:cc:4e:aa:71:26:0b:5e: 0d:95:6a:35:17:fb:fb:13:eb:58:be:57:b4:2b:f0: 7e:91:68:18:71:2e:29:d4:c2:72:be:b8:04:b4:71: 8f:93:0c:05:bd:b4:4b:f5:bb:dd:0f:17:81:40:2a: b0:f8:5c:a7:ca:ce:ad:9c:f5:c9:c5:a0:2d:ba:bf: 65:b4:b9:0b:2e:f5:b9:7c:96:c1:b5:c0:6d:85:74: 44:73:b4:df:ee:cc:32:fd:cb:9d:2f:26:b8:c2:15: 08:83:3b:73:89:9c:94:71:43:36:9b:e5:56:79:a5: 7d:e3:7a:ca:ea:78:85:cd:cc:4e:58:66:b2:f6:ad: 78:2f:0c:7a:a9:f8:a1:7a:41:af:01:34:4b:7b:e7: d9:47:b7:66:5d:d0:24:7a:03:d6:d7:c3:f8:a8:a3: 9e:0d:cf:c8:06:ce:a8:82:a1:59:c3:24:0e:d6:24: b3:25:41:94:87:1c:16:7e:93:13:10:de:c9:24:78: a5:50:73:ba:18:9c:80:17:87:d3:a4:7a:46:05:48: de:9d:eb:85:a4:ea:b4:89:8c:97:94:1d:ca:2b:ea: 78:d7:51:ab:bc:60:44:12:27:c7:88:f1:cb:07:3c: ab:ca:5f:37:e5:6a:2f:e1:73:0c:31:ab:32:d4:01: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:5B:F7:6D:5C:6A:70:B3:F7:A3:16:AC:82:B5:C7:BB:1E:66:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3e18b4fe-be51-30f7-a08c-6f93a63c4707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.72.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:be:b7:55:04:39:86:a5:7b:89:4b:2c:4f:46:63:8c:87:1a: f7:7f:85:e2:bb:69:66:d5:04:64:d5:3e:39:a3:05:f0:d8:a8: ac:d6:97:a3:89:6a:75:0e:4b:02:86:aa:82:0a:28:59:f2:52: 58:60:16:aa:6b:dd:a6:5d:20:9a:b6:db:c7:5f:4b:81:6e:7d: 78:86:c2:5f:43:c4:e4:bb:54:10:bd:1f:9f:f3:0d:c3:8e:eb: 5d:53:43:b2:1c:80:9a:3b:0e:e5:ef:94:2c:ce:ad:f4:0f:57: b0:6b:2c:a7:c5:87:ad:c8:4c:71:b1:3c:d4:43:e4:c3:e3:3f: 18:56:32:10:51:18:60:da:7c:61:a7:12:9b:3d:26:18:b4:21: b9:19:fb:eb:c0:79:a3:6e:e6:3c:3e:0b:32:91:b7:0c:ae:55: 6c:f0:a5:fa:43:27:78:18:84:51:a2:51:ef:f7:bb:ab:1b:e6: 03:3e:6f:b2:c8:e6:5c:f7:f2:23:6b:c5:55:70:13:85:0f:fc: 1a:fd:3a:4a:e8:d6:df:79:cc:75:8b:bd:4f:27:19:ed:05:1b: 87:91:f8:5f:66:ac:bd:fb:5b:ee:c6:fb:02:95:61:9b:45:57: e6:81:c0:66:f8:5e:7e:bb:94:bc:e9:b0:41:98:3b:c1:cc:b1: ec:a3:b5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxgBZIRqJOALfl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk OTVkZDc3ODgtYjY3MC00MjU3LWI2YjUtMjQ1N2JlNjEwYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNCDi8Cr1MxOqnEmC14NlWo1F/v7E+tYvle0 K/B+kWgYcS4p1MJyvrgEtHGPkwwFvbRL9bvdDxeBQCqw+Fynys6tnPXJxaAtur9l tLkLLvW5fJbBtcBthXREc7Tf7swy/cudLya4whUIgztziZyUcUM2m+VWeaV943rK 6niFzcxOWGay9q14Lwx6qfihekGvATRLe+fZR7dmXdAkegPW18P4qKOeDc/IBs6o gqFZwyQO1iSzJUGUhxwWfpMTEN7JJHilUHO6GJyAF4fTpHpGBUjeneuFpOq0iYyX lB3KK+p411GrvGBEEifHiPHLBzyryl835Wov4XMMMasy1AEy5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMtW/dtXGpws/ejFqyCtce7HmY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvM2UxOGI0ZmUtYmU1MS0z MGY3LWEwOGMtNmY5M2E2M2M0NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq+t1UEOYale4lLLE9GY4yHGvd/heK7aWbVBGTVPjmjBfDYqKzWl6OJ anUOSwKGqoIKKFnyUlhgFqpr3aZdIJq228dfS4FufXiGwl9DxOS7VBC9H5/zDcOO 611TQ7IcgJo7DuXvlCzOrfQPV7BrLKfFh63ITHGxPNRD5MPjPxhWMhBRGGDafGGn Eps9Jhi0IbkZ++vAeaNu5jw+CzKRtwyuVWzwpfpDJ3gYhFGiUe/3u6sb5gM+b7LI 5lz38iNrxVVwE4UP/Br9Okro1t95zHWLvU8nGe0FG4eR+F9mrL37W+7G+wKVYZtF V+aBwGb4Xn67lLzpsEGYO8HMseyjtYs= -----END CERTIFICATE-----Generated at Mon Aug 4 14:04:21 2025 by rpki-client