$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa File: fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa (raw, json) Hash identifier: vAOsLT2rW5G9MCVMSLc5UGOZ3Mh8kbQKdeCQyCPib0A= Subject key identifier: 12:3D:39:D3:4D:B9:63:99:B5:72:DF:16:BF:A7:0C:24:59:DA:01:6F Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584A89A62C35DDBE3D350CC5C180 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 14618 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:2c:35:dd:be:3d:35:0c:c5:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=14c1f2f3-d0e6-45b9-96e6-623d1a1204af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fe:15:0b:5d:24:32:95:4e:7b:a5:d6:15:dc: aa:77:f6:1f:54:50:86:2a:b3:24:e1:85:e8:c2:b8: f0:25:d7:cf:9c:e8:22:6b:28:55:f8:ed:33:12:af: fb:8d:00:87:24:3f:a2:34:7b:76:15:3d:6c:ca:4e: a8:0a:d5:09:e6:26:7a:45:82:02:51:05:c2:d8:10: 4a:ba:32:5a:9f:c7:24:ed:7d:73:17:02:50:89:3f: 59:ad:a0:da:10:6f:07:9e:f5:6a:b0:82:2b:9b:11: b9:eb:be:32:33:43:05:35:32:b3:10:dd:1b:ee:b2: 70:dd:de:3a:b7:ef:aa:39:51:c4:ab:af:75:0d:3c: 34:b5:a9:e8:65:62:12:60:d6:05:b0:84:e9:82:84: 10:5b:e2:1b:fc:04:5c:8d:f4:d8:89:f6:3a:fc:73: bc:41:42:20:fb:60:fc:1a:cc:cc:92:32:6d:c6:03: 57:b0:a9:e3:d8:97:86:4a:6a:03:6a:98:64:93:cf: 3f:bc:af:ea:a4:ed:f7:43:09:2f:46:46:c9:53:d8: b6:3f:7e:8a:d0:89:5c:df:b5:40:31:6c:5d:e9:fe: 17:1c:ab:e0:da:4e:c6:1d:5c:ca:ea:6a:de:97:d6: 50:7b:cf:f0:3e:7f:f1:44:fd:85:bf:37:dd:20:d9: a3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:39:D3:4D:B9:63:99:B5:72:DF:16:BF:A7:0C:24:59:DA:01:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f2:01:19:27:1f:99:2d:14:87:07:72:8d:25:6b:65:41:07: bb:94:cd:33:f9:a2:e5:92:bf:65:5e:5a:57:94:53:f9:58:75: 62:5d:49:61:49:12:1d:a5:30:61:d8:bf:a0:68:ea:cb:52:a2: 0c:8a:59:80:b1:dd:e4:dd:77:10:0b:89:0b:0e:5a:db:68:d3: c0:db:79:97:23:5c:31:14:8f:9c:06:7e:ac:09:58:7a:42:82: 72:8c:e5:93:72:19:fb:62:cb:0f:0c:6d:78:29:6a:1f:21:19: ea:54:2c:64:09:ba:94:de:ce:91:ab:87:71:64:13:30:69:e3: e1:fe:b6:e4:3c:97:35:a0:c5:4a:d2:67:6c:57:65:5f:cf:8f: df:87:61:03:4b:61:08:41:49:83:cc:ed:6d:aa:e4:a7:b1:6f: c0:bc:51:ce:f7:30:c0:69:e7:0e:12:c8:0d:24:06:ef:b0:8d: 6e:32:02:f4:4d:ee:d6:d4:ef:35:6e:0f:4f:55:d6:b6:f4:21: a8:eb:74:78:fc:66:1c:66:2b:18:38:64:c2:42:f5:28:18:85: 8c:40:34:bb:14:98:a6:30:68:69:0e:29:39:92:b2:40:33:90: a7:03:8c:48:20:7c:3e:23:f2:41:c1:e9:d2:79:f0:a0:3d:80: 56:7c:21:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpiw13b49NQzFwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk MTRjMWYyZjMtZDBlNi00NWI5LTk2ZTYtNjIzZDFhMTIwNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/4VC10kMpVOe6XWFdyqd/YfVFCGKrMk4YXo wrjwJdfPnOgiayhV+O0zEq/7jQCHJD+iNHt2FT1syk6oCtUJ5iZ6RYICUQXC2BBK ujJan8ck7X1zFwJQiT9ZraDaEG8HnvVqsIIrmxG5674yM0MFNTKzEN0b7rJw3d46 t++qOVHEq691DTw0tanoZWISYNYFsITpgoQQW+Ib/ARcjfTYifY6/HO8QUIg+2D8 GszMkjJtxgNXsKnj2JeGSmoDaphkk88/vK/qpO33QwkvRkbJU9i2P36K0Ilc37VA MWxd6f4XHKvg2k7GHVzK6mrel9ZQe8/wPn/xRP2FvzfdINmjVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI9OdNNuWOZtXLfFr+nDCRZ2gFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZmIyMTkxZDgtNzRhMi0z MGNiLWJmZmYtYzc5NGE2ZGNhYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjyARknH5ktFIcHco0la2VBB7uUzTP5ouWSv2VeWleUU/lYdWJdSWFJ Eh2lMGHYv6Bo6stSogyKWYCx3eTddxALiQsOWtto08DbeZcjXDEUj5wGfqwJWHpC gnKM5ZNyGftiyw8MbXgpah8hGepULGQJupTezpGrh3FkEzBp4+H+tuQ8lzWgxUrS Z2xXZV/Pj9+HYQNLYQhBSYPM7W2q5Kexb8C8Uc73MMBp5w4SyA0kBu+wjW4yAvRN 7tbU7zVuD09V1rb0IajrdHj8ZhxmKxg4ZMJC9SgYhYxANLsUmKYwaGkOKTmSskAz kKcDjEggfD4j8kHB6dJ58KA9gFZ8IQE= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:13 2025 by rpki-client