$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa File: 2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa (raw, json) Hash identifier: JS2OlS7GoSuT/BOiprptJAV6z8kJ8YxCaoU+whUZY8A= Subject key identifier: 65:21:86:17:C8:DB:FB:2D:49:C6:60:0B:F1:E9:80:74:D4:7F:DC:6F Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584A7D15F095B1413F6609A30530 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 8011 IP address blocks: 167.17.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f0:95:b1:41:3f:66:09:a3:05:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=1d8384fc-8b57-4871-8c65-4b462ca9eb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ff:10:58:f4:0c:bd:32:b5:81:e9:93:86:66: ba:78:ca:bf:a9:fa:a6:49:7f:34:06:db:0c:71:33: 20:05:e4:bd:35:a0:8c:56:5f:67:3a:65:68:bd:2f: db:b9:12:fa:db:cb:6c:f2:3a:95:f9:db:cf:be:29: 85:7e:84:87:d2:98:4f:3f:d1:9c:d7:d0:77:78:fb: 57:18:bd:71:30:dd:72:df:ec:bd:11:2c:60:2d:77: 3e:e6:00:60:ff:de:4a:a6:dd:ad:10:f7:26:88:56: 52:0c:29:f6:41:fd:f2:e3:a4:32:83:4a:74:36:4e: bc:01:31:61:03:ae:6a:aa:0d:5f:7d:f9:de:be:06: 1b:30:3f:7f:00:ca:cb:32:3b:c2:ed:b2:d0:e7:ed: d7:ad:d9:33:a2:5c:bb:f8:fb:a2:bb:cd:47:aa:c7: 32:ec:a5:cc:0c:fe:6d:52:51:4f:0e:f3:26:17:65: 61:a9:47:01:15:17:b6:df:fd:11:f6:a3:f8:9d:2e: 0c:aa:29:f4:54:58:77:37:b4:bd:5e:6d:bf:e3:47: 10:ab:2b:b0:11:45:e2:01:21:a1:01:0b:59:c4:fb: a9:f0:54:27:b8:38:2c:8f:2f:96:43:31:f7:3a:8e: f2:7f:be:06:22:b1:4e:c4:0b:6e:a2:48:36:e9:09: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:86:17:C8:DB:FB:2D:49:C6:60:0B:F1:E9:80:74:D4:7F:DC:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 167.17.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d1:93:4d:a4:6e:50:dd:51:73:c8:dc:7f:a2:df:04:76:fb: 95:5b:29:66:20:f1:5c:d2:f3:2c:16:b4:2b:80:9e:08:90:8e: dd:cd:c8:99:4b:23:23:3e:b3:ac:da:df:d0:3d:77:9a:e8:a2: f0:33:78:f4:3d:74:51:45:ac:48:9b:34:4a:c1:8e:45:41:88: 87:80:57:61:36:96:78:1c:5e:fe:4f:5d:35:53:bc:b4:cb:9b: 48:af:89:77:eb:87:38:6e:a6:9a:fe:5a:12:6e:08:8a:aa:27: cd:c6:de:d8:4d:68:48:04:f7:aa:cb:c5:dc:60:51:ae:8b:75: d2:62:e0:e1:e6:74:99:b1:95:b8:aa:8b:44:fe:ac:0f:87:45: 7e:b1:97:01:c2:43:3d:ee:1c:b3:50:9e:39:60:b1:8c:53:c0: 62:5e:81:15:5a:47:f2:af:f0:5e:b3:78:cc:d2:56:37:38:fe: 97:21:06:66:d2:b6:79:93:0b:a2:cb:40:ab:21:e3:0d:10:03: 1b:93:f0:b0:48:66:9c:e0:88:fb:0a:a1:36:a8:90:86:92:77: 49:81:31:4c:71:0c:bd:16:8a:a6:67:ae:3c:70:c3:a4:3f:fb: e8:cb:41:4f:36:e8:6d:09:bb:04:67:71:89:e9:d2:92:2f:62: c7:58:77:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfCVsUE/ZgmjBTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MWQ4Mzg0ZmMtOGI1Ny00ODcxLThjNjUtNGI0NjJjYTllYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP8QWPQMvTK1gemThma6eMq/qfqmSX80BtsM cTMgBeS9NaCMVl9nOmVovS/buRL628ts8jqV+dvPvimFfoSH0phPP9Gc19B3ePtX GL1xMN1y3+y9ESxgLXc+5gBg/95Kpt2tEPcmiFZSDCn2Qf3y46Qyg0p0Nk68ATFh A65qqg1fffnevgYbMD9/AMrLMjvC7bLQ5+3Xrdkzoly7+Puiu81Hqscy7KXMDP5t UlFPDvMmF2VhqUcBFRe23/0R9qP4nS4Mqin0VFh3N7S9Xm2/40cQqyuwEUXiASGh AQtZxPup8FQnuDgsjy+WQzH3Oo7yf74GIrFOxAtuokg26QmlnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUhhhfI2/stScZgC/HpgHTUf9xvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMmZmYjM1ZDQtMGMwZC0z MzY0LTg4MWMtNGMxZTU4NDIyZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpxHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTRk02kblDdUXPI3H+i3wR2+5VbKWYg8VzS8ywWtCuAngiQjt3NyJlL IyM+s6za39A9d5roovAzePQ9dFFFrEibNErBjkVBiIeAV2E2lngcXv5PXTVTvLTL m0iviXfrhzhuppr+WhJuCIqqJ83G3thNaEgE96rLxdxgUa6LddJi4OHmdJmxlbiq i0T+rA+HRX6xlwHCQz3uHLNQnjlgsYxTwGJegRVaR/Kv8F6zeMzSVjc4/pchBmbS tnmTC6LLQKsh4w0QAxuT8LBIZpzgiPsKoTaokIaSd0mBMUxxDL0WiqZnrjxww6Q/ ++jLQU826G0JuwRncYnp0pIvYsdYd9k= -----END CERTIFICATE-----Generated at Mon Aug 4 21:55:01 2025 by rpki-client