$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/530351b0-4162-3880-8391-135d2b6cc284.roa File: 530351b0-4162-3880-8391-135d2b6cc284.roa (raw, json) Hash identifier: Wtbhm9B3dgipPqjdtNY47fs73ckn2Cv1VqhWNKDQUOA= Subject key identifier: 4E:6E:3A:EB:1A:8C:FD:52:09:35:33:27:42:7D:B4:A1:D7:2B:BB:5B Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584A88409D42A83B6373F833C760 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/530351b0-4162-3880-8391-135d2b6cc284.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 140952 IP address blocks: 173.245.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9d:42:a8:3b:63:73:f8:33:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=d25ccd80-f56f-4e58-b9bb-369fb3b2f866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:07:cb:ef:69:bd:8b:9d:13:20:42:91:28: 80:64:8b:98:91:6f:78:86:1c:74:37:0d:be:2e:b4: 11:df:75:af:bf:89:08:06:a6:c0:42:45:85:86:b2: b9:63:65:66:a7:a5:c5:24:bc:6c:db:5b:1f:78:c1: 9a:73:24:02:d7:f3:6c:25:28:11:de:27:98:fa:08: cd:41:27:3a:a4:e6:b4:bd:94:c3:7e:dd:7b:da:5e: 8c:e8:56:65:b3:70:ad:c3:6f:29:58:ec:4c:44:01: 2c:b6:f5:31:3e:24:b0:75:e4:ab:2f:f8:cc:3d:35: 33:aa:d3:e1:d9:ab:0c:b6:2b:08:87:07:9d:4d:4a: f6:93:b3:24:a4:0a:19:f3:0f:2c:ca:66:d0:f3:3d: c3:a0:d6:db:ae:7c:9e:56:34:f4:3c:37:c0:81:74: 95:03:ec:e9:cc:0c:1e:b5:f2:d5:46:f3:9b:4e:c6: 5b:b6:c0:c1:f7:ea:22:7a:ed:9e:96:bd:08:10:2e: 39:32:c5:94:2e:94:c8:68:20:fa:5e:1c:be:9a:5d: f9:58:06:40:74:75:4e:78:f4:49:10:12:a0:23:6a: 45:50:75:58:25:9c:5c:98:a4:79:c2:67:a0:6f:f1: 9e:72:ca:70:34:83:3c:1c:18:ec:7c:9e:81:d9:3f: 3e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6E:3A:EB:1A:8C:FD:52:09:35:33:27:42:7D:B4:A1:D7:2B:BB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/530351b0-4162-3880-8391-135d2b6cc284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:28:4e:3c:53:79:72:08:af:b1:d3:c5:65:03:40:81:ec:9e: f7:5f:b7:7b:92:85:f8:39:a3:01:31:f3:8b:89:b3:33:eb:48: 5e:d4:85:77:32:8e:3d:35:6d:26:c3:9a:42:9b:75:53:45:ec: 4c:33:46:b0:d5:95:13:da:10:d8:3d:3d:03:55:3e:b6:cd:41: b7:de:04:37:9b:68:3f:a7:e7:fe:0e:f8:25:83:25:d9:4c:89: 5a:f9:c3:c5:d1:8b:f5:7a:62:86:5e:67:cb:84:69:92:fa:a3: d2:64:5b:fd:10:96:ef:33:d7:4f:97:48:24:cc:d3:a6:2d:fd: ea:8d:12:87:a7:1c:ba:b5:06:e1:f4:5b:b7:10:09:0a:ba:7d: ab:39:d4:34:82:29:81:a5:1b:02:b6:21:a7:1c:11:6c:e0:12: 4d:a1:4e:35:9c:29:3f:1c:a7:64:67:01:fc:36:6c:b2:01:b5: 30:41:e3:0d:06:31:6b:9b:1a:b8:93:80:65:9a:9d:7d:ac:a6: 27:64:16:a9:b6:4e:f2:b0:cd:63:34:ea:f8:66:9a:b1:bd:3a: b2:a9:16:a5:14:31:27:05:36:b5:70:a5:17:6f:44:1b:03:00: 1e:f7:a7:28:e8:7b:8a:b4:45:1d:a4:a7:28:c5:01:c2:81:b1: df:ab:a9:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJ1CqDtjc/gzx2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDI1Y2NkODAtZjU2Zi00ZTU4LWI5YmItMzY5ZmIzYjJmODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApykHy+9pvYudEyBCkSiAZIuYkW94hhx0Nw2+ LrQR33Wvv4kIBqbAQkWFhrK5Y2Vmp6XFJLxs21sfeMGacyQC1/NsJSgR3ieY+gjN QSc6pOa0vZTDft172l6M6FZls3Ctw28pWOxMRAEstvUxPiSwdeSrL/jMPTUzqtPh 2asMtisIhwedTUr2k7MkpAoZ8w8symbQ8z3DoNbbrnyeVjT0PDfAgXSVA+zpzAwe tfLVRvObTsZbtsDB9+oieu2elr0IEC45MsWULpTIaCD6Xhy+ml35WAZAdHVOePRJ EBKgI2pFUHVYJZxcmKR5wmegb/GecspwNIM8HBjsfJ6B2T8+DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5uOusajP1SCTUzJ0J9tKHXK7tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvNTMwMzUxYjAtNDE2Mi0z ODgwLTgzOTEtMTM1ZDJiNmNjMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIoTjxTeXIIr7HTxWUDQIHsnvdft3uShfg5owEx84uJszPrSF7UhXcy jj01bSbDmkKbdVNF7EwzRrDVlRPaENg9PQNVPrbNQbfeBDebaD+n5/4O+CWDJdlM iVr5w8XRi/V6YoZeZ8uEaZL6o9JkW/0Qlu8z10+XSCTM06Yt/eqNEoenHLq1BuH0 W7cQCQq6fas51DSCKYGlGwK2IaccEWzgEk2hTjWcKT8cp2RnAfw2bLIBtTBB4w0G MWubGriTgGWanX2spidkFqm2TvKwzWM06vhmmrG9OrKpFqUUMScFNrVwpRdvRBsD AB73pyjoe4q0RR2kpyjFAcKBsd+rqdk= -----END CERTIFICATE-----Generated at Sun Jul 20 18:45:44 2025 by rpki-client