$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bb98283-2c3e-3940-9125-b56027801384.roa File: 3bb98283-2c3e-3940-9125-b56027801384.roa (raw, json) Hash identifier: RjSXdtMO903VUismbXOlyTzQiGBPifVHbkpYSVzFY7Y= Subject key identifier: DA:EA:47:97:09:57:83:44:7A:79:6E:79:4A:E7:FA:DB:65:97:83:2B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D9CB72776470661FCEB0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bb98283-2c3e-3940-9125-b56027801384.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 207.34.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d9:cb:72:77:64:70:66:1f:ce:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=875fe120-4664-48d6-bcaf-eb971e511ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:c2:4d:96:28:04:78:d3:6e:e4:6d:bd:6d: 17:41:e2:b5:6b:95:b9:a4:fa:99:7d:40:c3:3b:93: 9a:d5:fc:d5:12:83:dc:b9:53:79:3a:6a:38:16:ae: 79:48:21:5f:0a:8b:34:12:e2:08:2b:de:43:2e:0d: e0:82:95:c0:83:e5:ab:96:3e:93:77:c9:00:23:a5: 9f:5e:0f:e3:8a:0f:92:72:48:bc:17:c1:49:65:fc: b9:ef:a6:1a:d5:18:ef:9e:fb:38:1f:f4:02:42:51: d1:b3:69:f4:9c:79:9d:2b:cb:6e:1b:ed:e2:75:ad: b6:11:e5:20:e7:6d:44:6a:5b:31:4b:00:ba:52:da: 37:f7:c1:e3:a1:ac:06:5e:55:18:4a:4e:68:ee:7c: 5e:aa:de:a4:79:0e:e3:35:d9:3a:0c:4e:6f:bf:c5: 19:ae:99:a6:84:d2:ec:5c:ac:f5:02:5f:5e:3b:cc: 97:8f:69:b0:43:5b:a5:95:ce:6d:db:72:ad:19:1b: 62:8a:87:b3:2e:79:09:ca:cb:f3:87:16:75:4e:c3: ab:ad:1a:db:be:e3:d0:f4:9c:d9:6b:12:9e:77:60: 33:9f:1b:07:0d:ca:9f:51:73:54:24:30:34:2d:1c: 89:00:27:2e:21:a0:01:ec:4b:68:a0:f9:4f:a5:a1: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EA:47:97:09:57:83:44:7A:79:6E:79:4A:E7:FA:DB:65:97:83:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bb98283-2c3e-3940-9125-b56027801384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.34.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ae:ab:d9:36:b8:6d:3b:aa:92:26:10:1d:90:f3:8c:59:cb: e4:60:88:bf:78:37:13:42:59:8e:77:34:fc:7d:93:1c:9d:bd: 9e:be:99:63:07:74:80:1f:e2:01:b2:d8:9a:bc:70:a9:1f:12: a5:6e:90:c0:fd:c4:30:f1:9b:d8:2b:11:89:4e:59:50:d4:b2: d2:e3:b6:58:86:9e:3b:fd:41:57:b3:b1:af:3e:5f:be:9b:9b: 8d:ff:e3:32:34:b1:2c:59:4c:12:e5:a7:74:97:ef:5e:68:09: 06:f7:2b:55:c7:e4:b1:ea:e9:6b:55:2c:2b:15:d1:5c:49:4f: 43:99:c4:53:ff:be:98:3c:58:e9:75:89:50:2b:2f:d1:6a:12: 5e:26:4d:dc:93:b6:a2:44:fa:44:4e:1b:3d:85:55:25:6e:3d: d4:42:8f:7c:2b:d7:83:2e:aa:2d:c0:dc:e8:b0:a7:c5:02:48: 05:a2:7a:6e:ae:7f:a1:09:04:a3:f0:70:49:43:87:92:1a:2c: 97:bc:7f:99:e8:07:ba:41:47:ae:45:37:34:e8:43:95:83:2c: fd:a1:83:ee:a9:4e:a1:9c:17:7d:67:fc:b5:f7:83:ae:8f:1a: a0:72:24:92:d5:a2:74:a2:83:94:18:e5:e4:bd:ec:4d:0a:b6: cd:89:ed:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdnLcndkcGYfzrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk ODc1ZmUxMjAtNDY2NC00OGQ2LWJjYWYtZWI5NzFlNTExZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pLCTZYoBHjTbuRtvW0XQeK1a5W5pPqZfUDD O5Oa1fzVEoPcuVN5Omo4Fq55SCFfCos0EuIIK95DLg3ggpXAg+Wrlj6Td8kAI6Wf Xg/jig+Scki8F8FJZfy576Ya1Rjvnvs4H/QCQlHRs2n0nHmdK8tuG+3ida22EeUg 521EalsxSwC6Uto398HjoawGXlUYSk5o7nxeqt6keQ7jNdk6DE5vv8UZrpmmhNLs XKz1Al9eO8yXj2mwQ1ullc5t23KtGRtiioezLnkJysvzhxZ1TsOrrRrbvuPQ9JzZ axKed2AznxsHDcqfUXNUJDA0LRyJACcuIaAB7EtooPlPpaFVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrqR5cJV4NEenlueUrn+ttll4MrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2JiOTgyODMtMmMzZS0z OTQwLTkxMjUtYjU2MDI3ODAxMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyLZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKuq9k2uG07qpImEB2Q84xZy+RgiL94NxNCWY53NPx9kxydvZ6+mWMH dIAf4gGy2Jq8cKkfEqVukMD9xDDxm9grEYlOWVDUstLjtliGnjv9QVezsa8+X76b m43/4zI0sSxZTBLlp3SX715oCQb3K1XH5LHq6WtVLCsV0VxJT0OZxFP/vpg8WOl1 iVArL9FqEl4mTdyTtqJE+kROGz2FVSVuPdRCj3wr14Muqi3A3Oiwp8UCSAWiem6u f6EJBKPwcElDh5IaLJe8f5noB7pBR65FNzToQ5WDLP2hg+6pTqGcF31n/LX3g66P GqByJJLVonSig5QY5eS97E0Kts2J7WA= -----END CERTIFICATE-----Generated at Fri Jul 25 19:39:25 2025 by rpki-client