$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b487b38-0b47-3e50-a879-b2b2de5c8789.roa File: 1b487b38-0b47-3e50-a879-b2b2de5c8789.roa (raw, json) Hash identifier: MwFyAYrHERLZ+F6Y1vd1YzbOvTWJtUgHrL+M3GX/QvM= Subject key identifier: D4:C3:2B:DA:99:03:A1:36:66:B4:E1:62:BF:C1:71:16:78:E4:05:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B5074C227844C95CDB860 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b487b38-0b47-3e50-a879-b2b2de5c8789.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.19.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:50:74:c2:27:84:4c:95:cd:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=343a250c-beef-42cc-9ce6-a29d333c5853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:19:18:06:7f:33:b7:40:e3:48:4d:69:84: 8b:eb:95:e8:3e:d6:6d:c6:84:b6:06:05:15:dc:b8: bc:d0:79:29:58:96:03:fd:da:08:41:75:11:a1:3e: 63:d5:d8:0a:40:b8:5f:b8:45:46:75:c9:56:e2:63: 6a:fe:55:06:d5:f0:48:90:66:37:d0:75:31:05:aa: 5b:48:86:b9:fd:e5:09:8f:ce:e1:07:45:cd:4f:d0: d6:56:8d:d4:34:8a:70:5b:b8:a1:12:15:d7:87:bd: 34:d1:b3:08:34:78:0c:dd:04:ff:93:9d:12:9d:ef: 00:98:2c:e3:86:bf:d7:27:95:af:2a:d9:bd:b1:b6: 69:bb:93:5a:f1:74:a8:3f:cf:9e:89:30:ea:65:97: 3e:ef:16:d6:74:09:17:0a:0c:b3:e7:55:6e:9b:7e: d5:dc:06:db:a0:25:84:57:08:49:22:eb:85:46:56: 47:80:f1:73:38:69:1c:e4:97:24:be:f8:5b:f8:6e: 34:36:20:13:2d:87:11:46:e6:41:66:d3:4e:00:27: da:c7:35:76:69:08:9d:ce:27:7d:4b:2f:2e:3d:bb: ae:a3:9b:3f:65:a1:4e:0c:ba:1a:21:e5:2f:74:73: f3:a0:ad:20:86:24:a7:65:4d:fb:52:2d:b7:11:59: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:2B:DA:99:03:A1:36:66:B4:E1:62:BF:C1:71:16:78:E4:05:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b487b38-0b47-3e50-a879-b2b2de5c8789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e0:11:1c:c4:a4:e9:ea:99:1c:f3:58:cd:95:c9:7a:d7:c8: 93:31:2d:7f:9a:2c:91:53:d3:1e:8d:57:0f:7e:2b:25:e3:d8: 3a:2f:79:6b:8e:c5:d9:91:d3:a1:04:4a:89:7e:c6:c4:fc:5d: 9a:a9:a7:f8:0b:72:ee:3d:db:78:fd:37:08:99:2a:1e:b2:d8: d3:f2:b3:32:c0:e9:a9:36:aa:dc:4c:0c:bf:ac:b6:04:07:bb: 05:12:1f:6b:7d:c5:09:47:64:27:f3:ea:20:ad:66:e1:1c:48: 16:75:38:18:4d:6d:93:cf:3e:b5:d7:4d:aa:cf:a3:18:92:28: 66:a1:1f:ed:e3:a4:46:ea:d9:8a:68:b6:eb:62:c2:8b:b7:91: 31:95:f4:2d:fb:eb:78:36:a4:b5:25:0c:1d:98:b4:39:c3:55: bc:ff:4d:91:b8:5c:86:82:2d:db:8a:0a:a3:b1:d5:a3:43:0b: df:69:ed:72:35:53:25:dd:30:00:75:cd:4f:db:5b:99:b5:57: be:01:14:d7:0d:f6:e0:02:ee:52:a7:ad:49:fc:f1:07:16:18: 13:61:70:1c:65:a6:b4:e3:58:73:38:f7:eb:45:b3:80:94:30: 0e:a3:9a:05:83:b2:13:1e:50:08:48:41:85:bf:02:e2:e3:59: 2d:bd:b6:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G1B0wieETJXNuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk MzQzYTI1MGMtYmVlZi00MmNjLTljZTYtYTI5ZDMzM2M1ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb8ZGAZ/M7dA40hNaYSL65XoPtZtxoS2BgUV 3Li80HkpWJYD/doIQXURoT5j1dgKQLhfuEVGdclW4mNq/lUG1fBIkGY30HUxBapb SIa5/eUJj87hB0XNT9DWVo3UNIpwW7ihEhXXh7000bMINHgM3QT/k50Sne8AmCzj hr/XJ5WvKtm9sbZpu5Na8XSoP8+eiTDqZZc+7xbWdAkXCgyz51Vum37V3AbboCWE VwhJIuuFRlZHgPFzOGkc5Jckvvhb+G40NiATLYcRRuZBZtNOACfaxzV2aQidzid9 Sy8uPbuuo5s/ZaFODLoaIeUvdHPzoK0ghiSnZU37Ui23EVnXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTDK9qZA6E2ZrThYr/BcRZ45AUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWI0ODdiMzgtMGI0Ny0z ZTUwLWE4NzktYjJiMmRlNWM4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRO6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLgERzEpOnqmRzzWM2VyXrXyJMxLX+aLJFT0x6NVw9+KyXj2DoveWuO xdmR06EESol+xsT8XZqpp/gLcu4923j9NwiZKh6y2NPyszLA6ak2qtxMDL+stgQH uwUSH2t9xQlHZCfz6iCtZuEcSBZ1OBhNbZPPPrXXTarPoxiSKGahH+3jpEbq2Ypo tutiwou3kTGV9C3763g2pLUlDB2YtDnDVbz/TZG4XIaCLduKCqOx1aNDC99p7XI1 UyXdMAB1zU/bW5m1V74BFNcN9uAC7lKnrUn88QcWGBNhcBxlprTjWHM49+tFs4CU MA6jmgWDshMeUAhIQYW/AuLjWS29tmM= -----END CERTIFICATE-----Generated at Thu Jul 10 02:13:03 2025 by rpki-client