$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3b531fc-d998-35a0-abb0-042465ab0c66.roa File: c3b531fc-d998-35a0-abb0-042465ab0c66.roa (raw, json) Hash identifier: d2UvRRgP8L0SImKnFfqAKhaFO5ps5gZ8GldzpGcoWA0= Subject key identifier: A2:0C:89:42:15:D8:DA:96:9D:61:F1:04:A7:C4:37:1F:07:AE:0E:3D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A796708A7A348D82B60A71598 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3b531fc-d998-35a0-abb0-042465ab0c66.roa Signing time: Thu 10 Jul 2025 17:21:10 +0000 ROA not before: Thu 10 Jul 2025 17:21:10 +0000 ROA not after: Wed 08 Oct 2025 17:21:10 +0000 asID: 25198 IP address blocks: 173.232.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:67:08:a7:a3:48:d8:2b:60:a7:15:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 10 17:21:10 2025 GMT Not After : Oct 8 17:21:10 2025 GMT Subject: CN=e4e028b9-01ea-4851-91c8-a7bcfaf7ec18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:54:7e:7e:1b:81:3c:22:25:4f:74:45:06: d5:6c:92:8f:96:d2:b4:dc:2f:19:27:d1:01:5f:b3: 78:4e:f2:3e:a0:9f:f5:9e:be:b6:da:22:f9:ff:d7: d8:30:09:14:30:bf:94:4f:9f:f2:78:d7:bd:b5:a9: ce:b4:43:3e:f0:94:b6:03:08:c1:2f:99:61:90:0c: 74:8f:ce:2c:bc:91:ac:31:c6:83:ff:ea:69:c4:62: 2e:94:6b:98:3c:e0:58:de:24:fb:c2:5e:3e:07:0d: 6a:d0:4f:9f:82:b3:4d:9f:fc:36:d0:1e:14:b5:3b: 5c:3a:a4:b7:71:e8:a2:26:2a:a8:f6:fd:ec:e0:b5: d2:db:83:25:6f:bb:1a:a0:d5:8e:22:3f:1b:81:a8: 87:be:0a:47:01:b4:37:39:09:23:f1:97:05:2d:46: 48:3c:50:84:30:f2:d9:f0:fb:78:cc:e6:93:31:d5: 51:e9:db:0d:ee:37:a1:5d:7a:52:39:b3:89:fa:f1: 57:48:ea:7d:0a:75:93:e5:df:3a:f2:d3:5d:9a:b9: 8f:1c:4d:43:1f:01:07:8f:e8:3b:c4:bf:a3:44:5e: 3e:ca:74:6d:27:a4:6f:70:86:11:fc:c3:79:b7:39: 3d:a6:59:b9:74:4b:5b:be:e0:e6:3d:81:d2:2a:74: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0C:89:42:15:D8:DA:96:9D:61:F1:04:A7:C4:37:1F:07:AE:0E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3b531fc-d998-35a0-abb0-042465ab0c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0d:6e:9b:cb:3c:a4:e6:0b:65:ad:aa:60:f7:b8:27:07:24: b1:0c:2b:34:44:f3:e6:2d:65:0d:18:a1:6a:05:12:93:81:e3: ac:a8:2e:c5:63:a5:45:a7:32:98:c4:5f:df:86:b3:3e:f6:5e: 56:b3:14:93:de:26:1d:a2:c8:64:88:6f:3d:71:fa:ee:50:3b: 18:2d:60:f0:3a:08:ce:90:ef:ba:a8:d0:f7:9e:57:86:81:53: 60:89:1b:7c:70:11:d3:a3:e6:ce:97:55:73:6f:66:67:72:c3: c3:9b:2b:0b:e4:22:2f:ed:b1:3d:e4:b5:95:92:0a:0f:4b:f4: 46:29:49:0a:d6:c3:dd:c5:17:f9:63:23:4f:d6:5a:3e:0a:08: dc:a4:ba:e3:b4:50:c3:22:5b:51:92:14:40:d5:72:ed:12:ba: 9d:cc:21:f7:da:f3:3a:29:8d:f6:bf:44:50:fa:17:88:48:f3: e2:51:23:a8:1a:cb:41:2a:52:31:b7:37:0d:0b:40:af:36:79: b1:45:01:d7:5e:16:33:65:0e:12:cf:85:55:fb:a5:57:b5:48: 62:f6:2d:88:e1:61:62:d0:b2:82:e3:0c:4a:43:32:26:c3:73: 8c:84:6e:d9:d9:24:6f:b5:28:ad:5b:60:eb:fb:0b:4b:00:a5: 54:59:fe:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp5Zwino0jYK2CnFZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDcxMDE3MjExMFoXDTI1MTAwODE3MjExMFowLzEtMCsGA1UEAxMk ZTRlMDI4YjktMDFlYS00ODUxLTkxYzgtYTdiY2ZhZjdlYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTRUfn4bgTwiJU90RQbVbJKPltK03C8ZJ9EB X7N4TvI+oJ/1nr622iL5/9fYMAkUML+UT5/yeNe9tanOtEM+8JS2AwjBL5lhkAx0 j84svJGsMcaD/+ppxGIulGuYPOBY3iT7wl4+Bw1q0E+fgrNNn/w20B4UtTtcOqS3 ceiiJiqo9v3s4LXS24Mlb7saoNWOIj8bgaiHvgpHAbQ3OQkj8ZcFLUZIPFCEMPLZ 8Pt4zOaTMdVR6dsN7jehXXpSObOJ+vFXSOp9CnWT5d868tNdmrmPHE1DHwEHj+g7 xL+jRF4+ynRtJ6RvcIYR/MN5tzk9plm5dEtbvuDmPYHSKnTAbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIMiUIV2NqWnWHxBKfENx8Hrg49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzNiNTMxZmMtZDk5OC0z NWEwLWFiYjAtMDQyNDY1YWIwYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArehHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8NbpvLPKTmC2WtqmD3uCcHJLEMKzRE8+YtZQ0YoWoFEpOB46yoLsVj pUWnMpjEX9+Gsz72XlazFJPeJh2iyGSIbz1x+u5QOxgtYPA6CM6Q77qo0PeeV4aB U2CJG3xwEdOj5s6XVXNvZmdyw8ObKwvkIi/tsT3ktZWSCg9L9EYpSQrWw93FF/lj I0/WWj4KCNykuuO0UMMiW1GSFEDVcu0Sup3MIffa8zopjfa/RFD6F4hI8+JRI6ga y0EqUjG3Nw0LQK82ebFFAddeFjNlDhLPhVX7pVe1SGL2LYjhYWLQsoLjDEpDMibD c4yEbtnZJG+1KK1bYOv7C0sApVRZ/oI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:18 2025 by rpki-client