$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33cabc23-93b6-354e-8df2-ea780efc8b75.roa File: 33cabc23-93b6-354e-8df2-ea780efc8b75.roa (raw, json) Hash identifier: oB7Flt7m/OMD5jQ2WGMKY6eq5gYX+/7dFj6a5UAW+w8= Subject key identifier: D8:4F:8E:CA:C0:09:9F:2B:D3:B6:C3:4C:6C:7C:21:3F:13:5D:76:3E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841221F8DA5B9700B21A1A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33cabc23-93b6-354e-8df2-ea780efc8b75.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 173.255.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:21:f8:da:5b:97:00:b2:1a:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2cfd9e0f-b0a9-4bb4-98e9-7b94d471ff41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f3:af:03:e0:3f:31:46:bf:6b:45:61:00:8c: 5a:29:b3:b5:10:1d:d5:a3:8a:f7:15:71:ba:c4:68: dc:21:90:d7:56:d7:62:6c:b8:fc:a0:14:a8:8f:2f: be:64:ad:89:80:96:f5:d5:4c:e3:2d:82:82:2d:25: ee:1c:b3:e0:97:39:fb:ac:48:a2:ba:42:7a:3b:22: 03:19:b6:86:04:6c:9b:e1:dc:bc:22:df:d9:df:e9: 7f:86:ce:b3:d7:11:94:19:19:8e:72:4a:d2:38:9e: 21:d5:70:ef:08:2b:e6:c9:4d:b2:90:ca:de:c8:89: 98:9b:c8:c0:76:08:49:25:ee:f3:81:7f:61:ee:26: 55:b1:19:62:2a:ea:8f:9c:03:6f:fc:31:56:38:15: be:fd:4a:39:56:bc:98:2e:f0:49:20:0b:2a:af:0e: 10:44:09:20:f5:0a:ea:7d:2a:b7:d5:a8:d9:3b:64: d8:e1:f6:e3:94:5f:09:9e:ef:49:48:a6:6d:da:19: 82:bf:89:9e:b7:80:d2:d6:b1:ba:42:b8:9e:49:7f: 46:cb:78:be:f6:4b:ec:b8:9e:b0:51:df:ee:b0:4a: 4e:12:5f:1f:fa:1e:c8:8d:d8:a8:1d:ed:3f:c0:99: 74:03:71:49:e8:4e:1c:7e:7f:7b:db:9f:b7:75:76: 0f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:8E:CA:C0:09:9F:2B:D3:B6:C3:4C:6C:7C:21:3F:13:5D:76:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33cabc23-93b6-354e-8df2-ea780efc8b75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 173.255.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:73:69:ab:64:51:cc:51:01:f0:e8:82:da:4d:8c:62:f5:32: ca:c3:53:c9:c5:90:2b:9d:b3:6c:37:9e:d2:e6:0f:7a:eb:9a: c9:db:4c:b0:08:20:c5:60:bd:67:e5:71:84:03:e0:31:83:2d: 4b:ed:1a:d9:2b:f9:ca:bc:4f:74:d5:87:be:0e:de:69:11:a2: 1d:48:55:b9:97:48:06:b8:e3:41:80:e3:46:74:b2:9c:96:da: 90:a8:4d:02:81:00:3e:b9:dc:70:85:55:77:09:fa:fa:64:74: 7f:0d:bf:29:f6:bd:4e:80:79:e8:f1:95:f7:c4:c5:4e:66:12: c3:f6:8f:d2:54:7a:03:a7:87:38:19:6e:d0:5d:5c:8d:37:e5: 1d:98:63:d4:3e:78:b6:bc:f6:a9:b2:e9:31:a4:3a:e3:09:ba: ba:ac:76:a2:37:4e:7e:35:6f:aa:29:a0:21:14:20:0a:45:bd: f6:bf:cc:64:b3:ca:1b:f0:de:64:c6:33:70:e7:2a:eb:d7:fa: 89:3b:21:e8:1d:bb:b8:db:7f:dc:94:30:52:b7:ce:ca:5a:30: 6c:20:21:3f:39:e8:5d:4d:d4:c2:be:13:6a:cf:ec:f0:e6:17: 7b:a2:f8:b9:9c:f0:f9:b2:0b:56:e2:4f:24:22:2a:9b:87:72: 9f:00:0b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiH42luXALIaGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmNmZDllMGYtYjBhOS00YmI0LTk4ZTktN2I5NGQ0NzFmZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vOvA+A/MUa/a0VhAIxaKbO1EB3Vo4r3FXG6 xGjcIZDXVtdibLj8oBSojy++ZK2JgJb11UzjLYKCLSXuHLPglzn7rEiiukJ6OyID GbaGBGyb4dy8It/Z3+l/hs6z1xGUGRmOckrSOJ4h1XDvCCvmyU2ykMreyImYm8jA dghJJe7zgX9h7iZVsRliKuqPnANv/DFWOBW+/Uo5VryYLvBJIAsqrw4QRAkg9Qrq fSq31ajZO2TY4fbjlF8Jnu9JSKZt2hmCv4met4DS1rG6QrieSX9Gy3i+9kvsuJ6w Ud/usEpOEl8f+h7IjdioHe0/wJl0A3FJ6E4cfn9725+3dXYP+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhPjsrACZ8r07bDTGx8IT8TXXY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNjYWJjMjMtOTNiNi0z NTRlLThkZjItZWE3ODBlZmM4Yjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf95MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJzaatkUcxRAfDogtpNjGL1MsrDU8nFkCuds2w3ntLmD3rrmsnbTLAI IMVgvWflcYQD4DGDLUvtGtkr+cq8T3TVh74O3mkRoh1IVbmXSAa440GA40Z0spyW 2pCoTQKBAD653HCFVXcJ+vpkdH8Nvyn2vU6AeejxlffExU5mEsP2j9JUegOnhzgZ btBdXI035R2YY9Q+eLa89qmy6TGkOuMJurqsdqI3Tn41b6opoCEUIApFvfa/zGSz yhvw3mTGM3DnKuvX+ok7Iegdu7jbf9yUMFK3zspaMGwgIT856F1N1MK+E2rP7PDm F3ui+Lmc8PmyC1biTyQiKpuHcp8AC9w= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:45 2025 by rpki-client