$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/3de0faf3-c8d7-348c-9239-04d622a870e9.roa File: 3de0faf3-c8d7-348c-9239-04d622a870e9.roa (raw, json) Hash identifier: DDxz3lE03qRcMpnlJ71BuQH4JDNBaJcygHE1wlv6NSs= Subject key identifier: 58:74:B0:C9:A8:96:88:2A:CB:14:3B:13:0C:54:EF:2E:E0:06:AD:D1 Certificate issuer: /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64 Certificate serial: 010D0C9F4328584AADF11596992016060798A780 Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/3de0faf3-c8d7-348c-9239-04d622a870e9.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 63290 IP address blocks: 66.245.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:15:96:99:20:16:06:07:98:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=ed3a0cd4-1d7d-46ee-9fea-8ff919e52a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:1d:ae:35:a6:f8:ef:cf:ad:63:cd:eb:6c: 94:ff:c2:17:33:03:1c:e8:33:9c:6f:78:36:d5:35: ba:1b:20:c8:3f:1d:ac:93:ac:a2:85:84:e3:13:86: 64:39:86:ce:2e:07:53:64:c7:70:d3:7a:84:87:e8: 86:4b:69:a5:75:76:da:f1:86:4f:3d:fd:4e:87:4c: 77:04:c0:15:8e:df:96:35:74:3c:a3:27:03:53:19: 74:3a:95:82:08:dc:05:95:4d:5e:7d:c6:a9:fc:de: c9:e9:17:cd:fb:c8:a4:01:9d:ea:4d:4d:ff:3e:dc: 08:9f:35:ac:5e:b3:7f:8f:74:dd:29:53:ce:53:83: e0:e6:f8:a5:c8:4c:00:79:59:08:83:42:b2:34:1a: b6:2b:60:34:33:af:89:e2:6b:3b:85:72:6f:ba:64: 1a:cb:84:b7:49:97:3e:39:02:19:fa:63:f0:df:9f: 89:de:15:1c:d0:e9:7c:e9:b7:41:ed:ad:ad:6b:48: 33:f7:08:c4:53:79:94:02:1f:d8:3b:96:bb:8e:45: ab:ce:ff:a4:6a:5b:5e:a9:a4:7a:a0:c3:f0:16:09: 3e:35:ba:a4:51:f2:8a:76:9b:31:03:0f:03:3e:19: 74:ee:57:3f:1f:3b:13:bb:52:c2:49:b3:04:ec:cf: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:B0:C9:A8:96:88:2A:CB:14:3B:13:0C:54:EF:2E:E0:06:AD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/3de0faf3-c8d7-348c-9239-04d622a870e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl X509v3 Authority Key Identifier: keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer sbgp-ipAddrBlock: critical IPv4: 66.245.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:32:5e:7a:2c:63:b4:34:96:26:96:b1:81:2e:68:1c:8b:02: 5d:6b:96:cc:4f:de:a6:25:23:67:c3:bf:ae:0e:5a:ab:93:02: cb:f1:cc:dd:b2:5e:59:e5:bc:15:ae:48:22:97:16:8e:32:61: c7:27:42:42:19:d9:af:68:b7:3f:9b:39:b2:9f:bb:fb:73:1b: 1c:27:6d:51:c2:18:fa:55:33:c7:27:0a:ad:a8:0f:7f:4d:b6: 51:ae:bd:9c:a7:9f:38:a6:f2:62:8c:78:81:18:ca:6b:d1:25: 58:54:6f:2a:e3:ff:1e:97:49:60:7f:ff:28:06:e8:be:3e:6e: 2a:45:87:a6:3f:91:e3:46:59:80:d8:bd:5b:be:dc:13:a9:ae: 4a:49:89:dc:d4:7d:36:08:06:06:2c:35:4b:a7:69:96:46:62: 6b:46:5d:89:55:88:9f:1e:4a:e7:94:2e:80:50:f7:d6:e8:b5: fd:f3:eb:29:2f:f9:a0:35:36:8b:70:e3:78:0f:3a:3d:0a:56: 91:6a:f0:47:de:5f:35:8d:73:e8:b0:88:c9:b9:d6:15:b2:57: 30:57:cd:78:f9:b4:4e:96:46:8b:df:70:bc:0a:55:ba:1a:64: 08:b7:cb:e6:cb:0b:0c:eb:cc:fd:e2:ba:cd:eb:04:8d:7b:4d: 7c:e8:af:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RWWmSAWBgeYp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkOWU0NGUtOWEyZi00YWUzLWI4MGItNTUwZjkwZjE1 ZjY0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZWQzYTBjZDQtMWQ3ZC00NmVlLTlmZWEtOGZmOTE5ZTUyYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimEdrjWm+O/PrWPN62yU/8IXMwMc6DOcb3g2 1TW6GyDIPx2sk6yihYTjE4ZkOYbOLgdTZMdw03qEh+iGS2mldXba8YZPPf1Oh0x3 BMAVjt+WNXQ8oycDUxl0OpWCCNwFlU1efcap/N7J6RfN+8ikAZ3qTU3/PtwInzWs XrN/j3TdKVPOU4Pg5vilyEwAeVkIg0KyNBq2K2A0M6+J4ms7hXJvumQay4S3SZc+ OQIZ+mPw35+J3hUc0Ol86bdB7a2ta0gz9wjEU3mUAh/YO5a7jkWrzv+kalteqaR6 oMPwFgk+NbqkUfKKdpsxAw8DPhl07lc/HzsTu1LCSbME7M9/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh0sMmologqyxQ7EwxU7y7gBq3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5 ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBmOTBmMTVmNjQvM2RlMGZhZjMtYzhkNy0z NDhjLTkyMzktMDRkNjIyYTg3MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzBkOWU0NGUtOWEyZi00YWUzLWI4 MGItNTUwZjkwZjE1ZjY0LzMwZDllNDRlLTlhMmYtNGFlMy1iODBiLTU1MGY5MGYx NWY2NC5jcmwwHwYDVR0jBBgwFoAUK0zB0+E17IWkg8WIud8sdPkUMb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBm OTBmMTVmNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvWxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIyXnosY7Q0liaWsYEuaByLAl1rlsxP3qYlI2fDv64OWquTAsvxzN2y XlnlvBWuSCKXFo4yYccnQkIZ2a9otz+bObKfu/tzGxwnbVHCGPpVM8cnCq2oD39N tlGuvZynnzim8mKMeIEYymvRJVhUbyrj/x6XSWB//ygG6L4+bipFh6Y/keNGWYDY vVu+3BOprkpJidzUfTYIBgYsNUunaZZGYmtGXYlViJ8eSueULoBQ99botf3z6ykv +aA1Notw43gPOj0KVpFq8EfeXzWNc+iwiMm51hWyVzBXzXj5tE6WRovfcLwKVboa ZAi3y+bLCwzrzP3ius3rBI17TXzor4k= -----END CERTIFICATE-----Generated at Mon Aug 4 14:16:29 2025 by rpki-client