$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a3944eb-0f42-3c20-8076-e2b62795c657.roa File: 2a3944eb-0f42-3c20-8076-e2b62795c657.roa (raw, json) Hash identifier: qEASOSsGCJAwZgwGNi+OdIawUNIRR9WwcK4+xE1i+Io= Subject key identifier: 24:CF:63:A0:4D:59:61:74:64:FD:6C:FD:66:59:C7:9C:A9:1A:21:75 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A7BB0B3EB78168765D798E540 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a3944eb-0f42-3c20-8076-e2b62795c657.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 174 IP address blocks: 173.213.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b3:eb:78:16:87:65:d7:98:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=cf7dfadf-6a80-4cec-a005-8800899f5868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:34:49:f9:97:fe:36:99:89:77:aa:5e:26: cd:2d:78:72:9f:8b:50:83:54:42:21:4b:5a:f5:8e: 80:6e:7c:89:f0:98:03:ec:07:59:40:80:e0:8f:08: 0e:74:fe:fe:38:8c:b3:ce:db:7f:08:2f:0c:fa:25: ad:13:a7:4a:5a:10:83:0b:31:9c:cb:a0:f4:1a:02: 58:f8:ad:64:66:e2:d9:83:51:46:a7:16:5a:86:07: a5:e4:3c:e3:00:77:a2:ad:4a:81:60:54:88:7b:61: 50:18:f1:02:b4:23:0f:83:37:13:77:4d:11:43:75: e8:50:c0:63:11:75:c1:fc:58:f0:2e:be:29:55:fc: 35:79:47:92:97:41:cc:36:78:ea:6c:2d:bf:f2:60: 5b:16:0a:b0:83:8e:74:b8:a7:e2:93:f2:74:3f:ea: 79:6e:32:4a:c0:ce:73:b4:08:5d:c8:4a:e4:2a:1b: b1:55:e0:7d:a1:b0:33:99:19:5b:24:42:a5:c0:1f: b1:a8:4c:f8:fc:d7:f5:f4:05:ed:31:d2:fa:66:d9: 9a:27:11:5f:4e:63:66:f5:b0:d0:9f:5c:55:ce:62: 15:e4:d4:4f:5c:ce:f0:fb:19:ab:eb:8a:be:34:85: 95:f6:9b:2d:d5:cf:bc:4d:94:2b:2f:b8:be:de:e9: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CF:63:A0:4D:59:61:74:64:FD:6C:FD:66:59:C7:9C:A9:1A:21:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a3944eb-0f42-3c20-8076-e2b62795c657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.213.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e8:15:21:96:03:d6:f0:b6:cb:ac:e2:76:d0:13:a4:a8:6e: 89:32:df:0c:be:1e:4f:ba:55:1d:39:84:0b:09:84:fa:40:fd: 6f:b2:16:26:d7:12:54:f3:76:a3:8e:94:b3:62:46:55:a0:aa: 7d:b7:df:c5:e1:52:f1:8a:13:87:88:21:af:75:26:a0:6f:ea: f1:15:79:b9:e6:61:fe:87:bb:b4:e1:ec:dd:8d:06:5f:0b:b8: d0:25:da:35:27:bd:38:cc:75:ff:cf:0f:98:dd:a4:d7:9d:d6: 84:11:83:cb:1c:50:68:ac:e2:45:d3:a2:3a:ef:4d:7e:e7:94: ba:28:81:ee:03:5a:b9:86:ed:81:a2:6d:79:bf:1d:20:95:94: d2:0c:b0:7c:6c:a5:a2:9a:af:99:9b:8a:a3:3b:18:1a:db:82: 06:c5:06:d1:ba:9b:12:d0:d5:61:ec:ac:18:88:46:72:a0:7b: 33:6a:0f:69:35:8a:d1:4f:71:c9:7d:ee:7a:e0:2b:a7:b3:be: 6c:95:0a:7e:c9:2a:88:52:92:31:0c:d4:53:ef:b6:6c:cb:1d: 01:21:50:8c:17:72:9d:64:4c:43:7f:5d:17:ba:ea:b6:9e:83: 98:4b:71:5e:6c:4a:87:ae:e1:f6:59:c4:67:bb:83:ad:1c:83: c2:47:46:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLPreBaHZdeY5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk Y2Y3ZGZhZGYtNmE4MC00Y2VjLWEwMDUtODgwMDg5OWY1ODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxc0SfmX/jaZiXeqXibNLXhyn4tQg1RCIUta 9Y6AbnyJ8JgD7AdZQIDgjwgOdP7+OIyzztt/CC8M+iWtE6dKWhCDCzGcy6D0GgJY +K1kZuLZg1FGpxZahgel5DzjAHeirUqBYFSIe2FQGPECtCMPgzcTd00RQ3XoUMBj EXXB/FjwLr4pVfw1eUeSl0HMNnjqbC2/8mBbFgqwg450uKfik/J0P+p5bjJKwM5z tAhdyErkKhuxVeB9obAzmRlbJEKlwB+xqEz4/Nf19AXtMdL6ZtmaJxFfTmNm9bDQ n1xVzmIV5NRPXM7w+xmr64q+NIWV9pst1c+8TZQrL7i+3umznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTPY6BNWWF0ZP1s/WZZx5ypGiF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMmEzOTQ0ZWItMGY0Mi0z YzIwLTgwNzYtZTJiNjI3OTVjNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdVfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILoFSGWA9bwtsus4nbQE6Soboky3wy+Hk+6VR05hAsJhPpA/W+yFibX ElTzdqOOlLNiRlWgqn2338XhUvGKE4eIIa91JqBv6vEVebnmYf6Hu7Th7N2NBl8L uNAl2jUnvTjMdf/PD5jdpNed1oQRg8scUGis4kXTojrvTX7nlLooge4DWrmG7YGi bXm/HSCVlNIMsHxspaKar5mbiqM7GBrbggbFBtG6mxLQ1WHsrBiIRnKgezNqD2k1 itFPccl97nrgK6ezvmyVCn7JKohSkjEM1FPvtmzLHQEhUIwXcp1kTEN/XRe66rae g5hLcV5sSoeu4fZZxGe7g60cg8JHRts= -----END CERTIFICATE-----Generated at Wed Aug 6 07:50:59 2025 by rpki-client