$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3893e306-005b-303b-a684-2d86471f9576.roa File: 3893e306-005b-303b-a684-2d86471f9576.roa (raw, json) Hash identifier: cbktCYIBOhFyr2eU5tlHFWVB+ntx644P5YKNJq7zN6A= Subject key identifier: 09:46:58:1F:02:6A:44:56:B0:0B:0D:10:7A:E1:80:C7:F5:76:E9:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84122C23FBC351B4DE2EB748 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3893e306-005b-303b-a684-2d86471f9576.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 173.255.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2c:23:fb:c3:51:b4:de:2e:b7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3f9c04d4-6a92-44ed-b506-bd9eb4586fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:57:27:96:b8:ba:0c:24:29:c6:6e:05:19: 78:39:c0:67:75:22:cb:9b:86:26:70:90:80:f8:78: 62:db:56:e1:58:d4:ee:1c:03:4c:ed:ec:7e:ec:4f: a4:87:d1:22:a4:86:0b:f6:7a:eb:46:60:72:e9:34: b1:8c:2a:ef:e2:d5:1a:72:5c:9d:33:36:41:cf:6e: b4:77:77:b6:03:24:7c:de:39:2d:f6:15:2c:52:d2: 96:08:73:c9:3e:c2:2c:0e:c5:93:21:75:bd:39:34: 69:df:97:c3:12:14:3a:33:c1:55:cf:46:4e:26:ef: 8c:c1:77:da:55:72:cc:82:88:24:9c:d5:5d:f0:41: 63:a7:e6:e6:72:3a:1c:98:1c:d2:03:21:5c:a4:3a: bd:3b:e3:d6:21:8f:ad:d5:cc:ac:1c:45:10:6c:ce: 45:f1:d2:07:81:15:e6:47:6f:22:b4:c5:35:fd:18: 7a:57:1b:f0:47:f9:01:42:d7:c5:b7:d2:c8:bf:ce: 93:95:7a:e2:18:36:75:03:1d:5f:c3:06:a0:bc:e2: 14:bf:c8:ac:0a:3b:3f:63:b2:c6:92:5c:86:35:ae: 8f:f3:98:21:be:aa:49:56:b9:c2:71:b7:cb:66:e4: 31:b7:c6:77:e8:2e:cc:04:03:c0:15:9a:8b:1a:07: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:58:1F:02:6A:44:56:B0:0B:0D:10:7A:E1:80:C7:F5:76:E9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3893e306-005b-303b-a684-2d86471f9576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 173.255.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:53:0c:1e:37:4c:71:ba:a0:7b:6d:81:b5:f1:88:83:c3:59: b6:84:6f:65:84:db:6e:6d:1d:cb:b1:7f:b3:3a:4c:6d:96:b1: 99:aa:4e:5c:2d:f8:f0:89:c3:d8:d8:64:2d:82:75:7d:c0:8c: b4:39:3f:41:3d:5b:96:50:77:6a:6b:09:76:f9:1c:88:64:f4: f0:e1:9b:c9:1f:a1:4d:a7:1b:71:68:3c:62:51:cc:a0:cd:3a: 65:84:af:ba:07:12:c5:66:97:57:d8:e2:58:fc:47:29:c6:3e: 7a:21:b8:38:67:60:6f:0b:ea:58:0d:ed:99:0e:7b:c2:7d:ef: 0c:28:fe:a3:61:e5:bc:21:03:23:5f:9e:19:a0:00:fd:17:bd: dd:38:2b:14:1d:ed:97:b0:76:26:c3:44:94:2c:49:fa:ef:2e: 97:38:26:65:a5:79:a5:28:f3:f9:bb:dd:28:45:68:37:7a:4b: e9:2b:fb:52:f2:38:e8:8e:a5:f4:57:ea:e9:c4:47:e7:1c:ae: 16:aa:f8:e1:60:95:06:0a:9b:4f:dc:b7:f8:67:1e:42:22:d8: 56:3b:f3:72:e9:7d:b2:11:c1:a0:e8:3b:76:f0:41:c2:fc:78: a9:69:f8:a6:62:8e:ce:a9:84:b0:de:c3:6d:48:5a:cf:e7:0c: c7:fb:1a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiwj+8NRtN4ut0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2Y5YzA0ZDQtNmE5Mi00NGVkLWI1MDYtYmQ5ZWI0NTg2ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlFXJ5a4ugwkKcZuBRl4OcBndSLLm4YmcJCA +Hhi21bhWNTuHANM7ex+7E+kh9EipIYL9nrrRmBy6TSxjCrv4tUaclydMzZBz260 d3e2AyR83jkt9hUsUtKWCHPJPsIsDsWTIXW9OTRp35fDEhQ6M8FVz0ZOJu+MwXfa VXLMgogknNVd8EFjp+bmcjocmBzSAyFcpDq9O+PWIY+t1cysHEUQbM5F8dIHgRXm R28itMU1/Rh6VxvwR/kBQtfFt9LIv86TlXriGDZ1Ax1fwwagvOIUv8isCjs/Y7LG klyGNa6P85ghvqpJVrnCcbfLZuQxt8Z36C7MBAPAFZqLGgdQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlGWB8CakRWsAsNEHrhgMf1duniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzg5M2UzMDYtMDA1Yi0z MDNiLWE2ODQtMmQ4NjQ3MWY5NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf93MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtTDB43THG6oHttgbXxiIPDWbaEb2WE225tHcuxf7M6TG2WsZmqTlwt +PCJw9jYZC2CdX3AjLQ5P0E9W5ZQd2prCXb5HIhk9PDhm8kfoU2nG3FoPGJRzKDN OmWEr7oHEsVml1fY4lj8RynGPnohuDhnYG8L6lgN7ZkOe8J97wwo/qNh5bwhAyNf nhmgAP0Xvd04KxQd7ZewdibDRJQsSfrvLpc4JmWleaUo8/m73ShFaDd6S+kr+1Ly OOiOpfRX6unER+ccrhaq+OFglQYKm0/ct/hnHkIi2FY783LpfbIRwaDoO3bwQcL8 eKlp+KZijs6phLDew21IWs/nDMf7Gv0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:03 2025 by rpki-client