$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa File: 70b0e265-b1b3-3960-957a-0b222bb6a80d.roa (raw, json) Hash identifier: NJYcPpo1g+h5UE40PQMg90dEAFbmanpZ1hRQt+NOrjE= Subject key identifier: 49:18:01:14:71:99:7C:F9:18:A4:B6:C4:63:80:42:6C:E7:65:8E:8B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B5B72D98C0D9EAEA0EE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.21.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:5b:72:d9:8c:0d:9e:ae:a0:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=0f1b664a-5487-4b49-bfb8-a0336c21e57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:bf:d1:bd:54:8b:98:b8:22:b2:a1:05:a1: c2:f3:b6:c1:42:12:1c:7f:77:5d:6c:3a:17:fd:e4: 6f:f3:8f:6b:e8:ce:5b:ef:65:e1:a8:74:1e:aa:5b: 46:35:e9:d1:d0:27:cb:9f:46:11:7e:bd:23:80:b4: 3b:c9:a2:15:cd:b3:bf:91:0c:af:dc:96:e9:68:ed: 9b:ea:83:df:f2:db:11:f0:a6:9a:83:0f:76:53:6a: 9d:71:10:71:60:d3:5d:ed:e1:9b:c6:be:ed:c8:fa: b2:d4:a4:77:ea:c1:3b:9c:7e:29:d5:5d:27:28:e5: 8a:ad:ce:8f:a0:18:c7:96:48:f2:f0:b6:65:5b:7f: 0e:44:ff:f9:45:0d:df:3a:92:fc:f1:e5:fd:04:72: 73:e2:04:70:e4:e7:7d:28:5a:59:f7:4d:53:77:7a: 8c:c4:b1:40:af:d1:61:3a:69:5e:82:65:aa:6a:c4: 3f:0c:b9:c6:33:59:a2:9e:47:11:91:88:dc:63:56: a8:36:ac:56:ff:6f:44:ec:29:44:3f:0a:43:b1:3d: f4:b2:68:49:34:a2:2f:18:9f:a3:e5:14:93:63:50: 6d:58:9f:94:46:f0:a3:47:94:9e:d2:f9:15:35:c8: 2e:f6:e9:e7:01:cb:e8:2b:81:8d:b4:e3:54:19:5b: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:01:14:71:99:7C:F9:18:A4:B6:C4:63:80:42:6C:E7:65:8E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b8:a0:55:fc:2d:0f:1a:ef:31:42:e5:6b:86:37:8f:07:9c: 62:56:74:65:d7:2d:e7:91:93:c5:8b:e9:bf:1e:c4:50:70:94: f8:81:e9:83:4b:34:8a:2c:54:8b:5c:77:d8:90:d1:19:b4:01: 00:67:44:ed:2b:a1:f7:11:df:72:05:59:7f:8a:74:e0:a4:b5: be:06:d0:00:89:6a:81:ea:64:36:14:e9:4b:2e:bc:30:2b:13: 24:28:6f:37:08:05:74:3b:d0:97:ef:9e:e6:62:b5:81:61:95: 5c:4e:22:a1:95:15:8b:d2:c8:44:52:e5:13:ef:0c:2d:f6:9d: f2:85:7f:2c:9d:31:03:1d:06:01:8a:6c:a9:f6:28:5d:34:8f: 61:eb:e4:41:bc:02:10:3c:ed:88:69:b3:e1:0a:a0:ad:8e:e6: a8:2a:5e:40:9d:15:61:a2:20:e2:39:df:2b:a7:21:78:d3:a1: 76:93:a5:98:97:4c:9b:5d:11:05:71:e3:5f:dd:5c:b9:e6:fb: 38:da:44:cc:e4:c5:85:5e:6e:9c:2c:82:71:09:1e:d5:b5:bf: 68:2d:d4:9a:07:6a:d7:6e:31:38:e0:93:08:b8:15:38:4d:01: 7a:b0:9c:71:56:ed:e8:04:3e:81:bd:1d:ee:6d:2a:5b:30:9c: 57:cc:43:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G1ty2YwNnq6g7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk MGYxYjY2NGEtNTQ4Ny00YjQ5LWJmYjgtYTAzMzZjMjFlNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS6/0b1Ui5i4IrKhBaHC87bBQhIcf3ddbDoX /eRv849r6M5b72XhqHQeqltGNenR0CfLn0YRfr0jgLQ7yaIVzbO/kQyv3JbpaO2b 6oPf8tsR8Kaagw92U2qdcRBxYNNd7eGbxr7tyPqy1KR36sE7nH4p1V0nKOWKrc6P oBjHlkjy8LZlW38ORP/5RQ3fOpL88eX9BHJz4gRw5Od9KFpZ901Td3qMxLFAr9Fh OmlegmWqasQ/DLnGM1minkcRkYjcY1aoNqxW/29E7ClEPwpDsT30smhJNKIvGJ+j 5RSTY1BtWJ+URvCjR5Se0vkVNcgu9unnAcvoK4GNtONUGVsdRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkYARRxmXz5GKS2xGOAQmznZY6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzBiMGUyNjUtYjFiMy0z OTYwLTk1N2EtMGIyMjJiYjZhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC4oFX8LQ8a7zFC5WuGN48HnGJWdGXXLeeRk8WL6b8exFBwlPiB6YNL NIosVItcd9iQ0Rm0AQBnRO0rofcR33IFWX+KdOCktb4G0ACJaoHqZDYU6UsuvDAr EyQobzcIBXQ70JfvnuZitYFhlVxOIqGVFYvSyERS5RPvDC32nfKFfyydMQMdBgGK bKn2KF00j2Hr5EG8AhA87Yhps+EKoK2O5qgqXkCdFWGiIOI53yunIXjToXaTpZiX TJtdEQVx41/dXLnm+zjaRMzkxYVebpwsgnEJHtW1v2gt1JoHatduMTjgkwi4FThN AXqwnHFW7egEPoG9He5tKlswnFfMQzM= -----END CERTIFICATE-----Generated at Thu Jul 10 02:52:51 2025 by rpki-client