$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/4a317f88-f112-3daa-add1-74c51043df1d.roa File: 4a317f88-f112-3daa-add1-74c51043df1d.roa (raw, json) Hash identifier: Xw9R0Il4Zfz3PpUANTy1GyBVnOmJqaaBEzxwZHlsCug= Subject key identifier: FF:40:53:E3:FE:9A:26:F5:AA:29:A7:69:55:83:BE:44:46:F4:89:05 Certificate issuer: /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Certificate serial: 010D0C9F4328584AB65103DDE868B499A8C45E40 Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/4a317f88-f112-3daa-add1-74c51043df1d.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 25655 IP address blocks: 173.241.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:03:dd:e8:68:b4:99:a8:c4:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=dfcc6ac4-0b5d-42ee-b040-cd49c2c68b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b5:04:04:b6:f7:83:3b:b2:16:ab:4a:d0:c3: 54:9f:7c:34:7d:da:45:c3:75:96:70:89:f8:41:ca: 61:27:4b:61:a8:79:f5:52:2b:1c:5f:1a:aa:7f:a2: fa:12:6e:38:41:c9:99:bc:a8:6f:fc:72:b0:b0:da: 6c:e3:22:9f:59:6c:49:21:90:62:32:e6:b6:5a:c4: 6b:b2:19:fb:f1:c0:fc:e6:28:98:06:82:d0:ea:6d: 2d:17:1d:a2:1f:88:b5:66:68:c8:d7:5e:5d:16:7b: b8:de:69:5b:0f:33:c8:ce:2a:1d:4a:e6:7a:f6:97: fd:c2:14:0d:26:cb:ff:b2:e6:96:40:6b:b0:bf:7a: 5c:68:63:a8:3a:92:27:00:f8:80:99:99:cb:58:0b: cd:c6:eb:72:61:70:0b:6d:5d:a9:bd:48:b1:ea:ab: 1b:10:6a:d8:7e:fd:fa:52:1b:83:41:c8:44:8a:bd: f1:b4:04:c3:17:3c:02:88:a0:a2:ff:66:1e:33:8d: ef:af:61:5f:20:e5:65:d3:a0:f5:52:b5:f5:5f:41: 60:30:de:2e:00:13:36:57:56:cc:94:5a:bc:54:8f: 9a:56:01:fc:80:5a:0e:c9:a5:29:75:9a:5e:5c:a9: fd:52:73:37:9a:6c:48:4e:bd:68:8c:25:f3:15:9a: 4c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:40:53:E3:FE:9A:26:F5:AA:29:A7:69:55:83:BE:44:46:F4:89:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/4a317f88-f112-3daa-add1-74c51043df1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl X509v3 Authority Key Identifier: keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer sbgp-ipAddrBlock: critical IPv4: 173.241.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:3e:4d:cb:39:0e:32:2e:e6:92:b9:80:a5:19:3d:99:50:35: 9a:f3:e0:dd:53:bf:87:cf:d5:19:f5:2f:a5:83:a0:d1:c4:b9: 8d:9a:f6:ce:92:50:fe:5a:6f:85:79:54:b5:0a:2d:60:d8:d3: a4:87:66:f5:17:bd:17:e7:55:c7:6e:b1:27:24:2e:a1:ef:19: 2c:90:31:31:e9:f4:50:39:b3:f3:2f:f6:36:a4:a4:b8:76:4c: 04:0f:54:01:d6:64:7e:70:a2:4e:aa:68:b3:4a:42:7a:13:c8: 4e:7c:af:b0:ec:1e:f6:7a:a7:9c:f5:21:ad:2e:f0:e6:d5:7f: ca:68:b5:ed:ea:45:c6:1d:2b:a7:f0:9e:31:9f:d0:88:17:49: a2:8b:d0:73:65:e5:9d:b9:27:d8:ab:44:a7:78:ae:9c:38:60: d8:4b:f2:84:99:c7:0f:27:3e:34:e9:4b:91:02:76:f8:1c:71: 2c:c4:39:7f:e4:27:37:7d:94:08:9d:a3:15:9c:7b:54:bc:21: e4:ac:63:f6:23:0f:21:30:ab:90:fc:ec:be:8a:09:3a:03:41: 54:bc:ab:0b:17:b9:6b:58:0c:6b:3f:63:bd:95:bf:d2:6b:b6: 15:7c:85:15:0c:d5:0b:26:bd:b3:b2:2e:13:66:45:14:a3:39: 64:0a:0d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQPd6Gi0majEXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx ZDYyMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZGZjYzZhYzQtMGI1ZC00MmVlLWIwNDAtY2Q0OWMyYzY4Yjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7UEBLb3gzuyFqtK0MNUn3w0fdpFw3WWcIn4 QcphJ0thqHn1UiscXxqqf6L6Em44QcmZvKhv/HKwsNps4yKfWWxJIZBiMua2WsRr shn78cD85iiYBoLQ6m0tFx2iH4i1ZmjI115dFnu43mlbDzPIziodSuZ69pf9whQN Jsv/suaWQGuwv3pcaGOoOpInAPiAmZnLWAvNxutyYXALbV2pvUix6qsbEGrYfv36 UhuDQchEir3xtATDFzwCiKCi/2YeM43vr2FfIOVl06D1UrX1X0FgMN4uABM2V1bM lFq8VI+aVgH8gFoOyaUpdZpeXKn9UnM3mmxITr1ojCXzFZpMFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9AU+P+mib1qimnaVWDvkRG9IkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5 NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvNGEzMTdmODgtZjExMi0z ZGFhLWFkZDEtNzRjNTEwNDNkZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfGSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE+Tcs5DjIu5pK5gKUZPZlQNZrz4N1Tv4fP1Rn1L6WDoNHEuY2a9s6S UP5ab4V5VLUKLWDY06SHZvUXvRfnVcdusSckLqHvGSyQMTHp9FA5s/Mv9jakpLh2 TAQPVAHWZH5wok6qaLNKQnoTyE58r7DsHvZ6p5z1Ia0u8ObVf8pote3qRcYdK6fw njGf0IgXSaKL0HNl5Z25J9irRKd4rpw4YNhL8oSZxw8nPjTpS5ECdvgccSzEOX/k Jzd9lAidoxWce1S8IeSsY/YjDyEwq5D87L6KCToDQVS8qwsXuWtYDGs/Y72Vv9Jr thV8hRUM1QsmvbOyLhNmRRSjOWQKDQY= -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:02 2025 by rpki-client