$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa File: 3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa (raw, json) Hash identifier: Av/4p+GM5ikPdQ0g2Her+kOSPWcYuwv9p2G5mLVXBOY= Subject key identifier: BB:8E:A4:B6:E9:39:0B:B5:C5:31:61:7B:91:7A:B5:C4:FD:65:3B:17 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC977454560D495615C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 11910 IP address blocks: 184.104.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c9:77:45:45:60:d4:95:61:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=965f801f-6107-4224-a111-2bfceb2d1ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:fd:3e:e0:3c:aa:50:17:9b:2b:6a:6b:cc: af:45:94:3a:0b:38:ce:b4:27:47:78:6e:fd:bc:54: 9d:15:41:ad:93:14:30:72:63:b8:e6:74:d9:2e:41: b2:12:f5:2b:e6:42:9f:83:b3:c6:da:71:40:a0:81: 11:ae:84:d7:c4:27:5c:68:97:c2:17:1d:54:a5:7d: dd:79:b1:06:48:b4:97:13:c0:4a:f1:6c:4e:03:70: 56:9c:9a:b5:23:ef:6c:44:49:93:0e:86:5f:70:7b: 7c:c4:f2:cf:4c:b1:bf:35:b2:24:3c:11:1e:93:1e: d6:bb:26:6d:6c:70:01:c1:66:58:3f:44:e3:20:cd: 79:a7:20:83:94:17:6d:d1:82:3d:06:8f:e8:ec:93: 72:69:e5:60:ae:51:13:61:e5:08:04:9b:88:0b:b0: e1:b6:b6:4c:c2:15:b0:15:6d:55:4f:86:1d:28:f3: f2:b2:b1:5a:cf:4e:53:0a:50:bb:c1:4c:b3:42:72: 6a:51:03:fd:96:da:a3:35:77:c2:b0:45:e8:46:e6: 75:1d:36:a6:ba:9d:35:89:cd:f4:b7:89:3e:5d:49: 6b:c8:88:4a:24:d7:f9:fd:80:96:10:76:89:9c:ca: 05:70:46:af:41:50:cc:d1:29:d0:52:4a:93:ce:28: 2e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8E:A4:B6:E9:39:0B:B5:C5:31:61:7B:91:7A:B5:C4:FD:65:3B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e007cba-2153-37a1-87a6-0c4ed94ae85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 184.104.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2f:8d:f5:80:24:65:a3:db:19:c3:20:70:f7:8a:db:9f:88: 8e:0f:73:35:ff:84:33:f9:6c:34:b9:72:51:7d:43:01:f8:f7: d3:f3:29:30:69:62:e2:66:0f:bc:23:b7:31:b9:46:7a:6c:aa: cc:ca:1b:7f:69:71:ea:fc:56:03:0e:16:3f:a9:e7:bb:80:74: 56:fb:ac:9f:bb:63:4d:5f:e6:8e:da:31:ee:97:bf:03:45:f4: bb:10:09:97:20:10:06:b4:48:22:d9:f3:73:83:14:7c:f0:83: 67:cc:ed:3c:18:12:01:be:78:46:64:c8:fa:b9:8e:8b:7c:3f: 3c:5b:35:ab:ed:45:79:90:f8:22:61:f5:42:97:c1:1d:7b:f1: 15:e5:ab:c0:fc:4a:72:2c:2e:9f:bf:7c:7b:02:db:91:3e:30: 9f:e5:a4:79:87:e8:7c:a1:53:da:d7:2b:dd:f9:4b:ec:ee:45: 37:9e:8a:62:df:d4:ea:5e:3c:7c:c8:92:ad:bc:5c:87:00:bb: cf:ab:bd:b7:14:42:70:23:7f:53:b6:aa:f0:38:e9:c9:11:07: 4c:89:ea:b6:a2:99:7e:8f:65:88:41:8a:14:d3:e5:64:a7:ed: 6d:ec:00:83:c5:91:38:3b:3e:f9:1b:e0:e5:b7:2d:1b:40:b7: 7f:38:b0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G8l3RUVg1JVhXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OTY1ZjgwMWYtNjEwNy00MjI0LWExMTEtMmJmY2ViMmQxYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5v9PuA8qlAXmytqa8yvRZQ6CzjOtCdHeG79 vFSdFUGtkxQwcmO45nTZLkGyEvUr5kKfg7PG2nFAoIERroTXxCdcaJfCFx1UpX3d ebEGSLSXE8BK8WxOA3BWnJq1I+9sREmTDoZfcHt8xPLPTLG/NbIkPBEekx7WuyZt bHABwWZYP0TjIM15pyCDlBdt0YI9Bo/o7JNyaeVgrlETYeUIBJuIC7DhtrZMwhWw FW1VT4YdKPPysrFaz05TClC7wUyzQnJqUQP9ltqjNXfCsEXoRuZ1HTamup01ic30 t4k+XUlryIhKJNf5/YCWEHaJnMoFcEavQVDM0SnQUkqTzigufwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuOpLbpOQu1xTFhe5F6tcT9ZTsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2UwMDdjYmEtMjE1My0z N2ExLTg3YTYtMGM0ZWQ5NGFlODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4vjfWAJGWj2xnDIHD3itufiI4PczX/hDP5bDS5clF9QwH499PzKTBp YuJmD7wjtzG5RnpsqszKG39pcer8VgMOFj+p57uAdFb7rJ+7Y01f5o7aMe6XvwNF 9LsQCZcgEAa0SCLZ83ODFHzwg2fM7TwYEgG+eEZkyPq5jot8PzxbNavtRXmQ+CJh 9UKXwR178RXlq8D8SnIsLp+/fHsC25E+MJ/lpHmH6HyhU9rXK935S+zuRTeeimLf 1OpePHzIkq28XIcAu8+rvbcUQnAjf1O2qvA46ckRB0yJ6raimX6PZYhBihTT5WSn 7W3sAIPFkTg7Pvkb4OW3LRtAt384sDI= -----END CERTIFICATE-----Generated at Mon Aug 4 07:50:51 2025 by rpki-client