$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cff48c16-5a55-3f3d-b053-d15fe3ad335d.roa File: cff48c16-5a55-3f3d-b053-d15fe3ad335d.roa (raw, json) Hash identifier: xGmHhgKjqWQh2zVLJk+/KtljnQCrn1TwSbXJXDBUbQs= Subject key identifier: 65:8A:27:C6:0E:57:DA:B0:23:21:BE:75:10:78:AF:DE:6C:99:76:06 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A5B95AB051AA45674E9DB0800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cff48c16-5a55-3f3d-b053-d15fe3ad335d.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 19905 IP address blocks: 173.24.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:ab:05:1a:a4:56:74:e9:db:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=6a81cde7-6a4b-46ca-99d6-1ea377c8cbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cc:02:ff:ee:d4:0d:ef:72:3d:0f:c7:03:d4: 55:61:36:fa:c8:b6:36:3f:42:ee:8d:1a:0f:81:2a: 28:59:31:1c:be:1f:07:5e:31:e8:d7:3d:bc:11:d5: f8:01:97:ba:fe:70:64:4d:80:fa:6b:4c:93:59:49: 65:d9:b8:2e:8e:a1:29:9d:ea:a4:f3:5c:65:cc:80: 7d:89:e9:0b:50:f2:f4:e5:a9:c7:fb:92:c2:0e:7a: b4:00:2b:2d:02:b2:bf:20:ae:06:55:ca:e2:e0:59: f0:9b:66:48:28:ae:a8:aa:af:43:0a:c1:ce:45:10: 68:c0:93:71:79:62:73:d2:84:7f:a0:8f:83:5d:31: 72:ad:88:ea:70:da:fe:d4:3d:cf:a1:0c:84:f0:d2: 59:15:26:75:7d:35:94:d6:43:b5:57:37:f8:be:b2: 6a:2d:9f:2a:a3:5e:e0:ec:7f:af:00:be:5b:8b:ae: ca:2d:24:a2:f8:89:c1:77:0f:4a:76:cd:a1:ab:98: 96:6a:b0:76:59:32:d6:52:75:79:4d:f9:26:77:70: b9:04:d1:b6:0d:3e:b5:cd:08:78:5d:cb:d0:0f:75: b3:00:11:4a:19:4d:92:61:fb:cd:e0:af:b5:7c:91: a9:af:42:74:b7:43:74:50:4d:8e:a1:00:b6:c2:cb: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8A:27:C6:0E:57:DA:B0:23:21:BE:75:10:78:AF:DE:6C:99:76:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cff48c16-5a55-3f3d-b053-d15fe3ad335d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ed:5c:3f:27:52:50:fc:52:da:bd:1c:71:3e:7f:ef:62:7c: 4f:00:7a:0c:12:6c:3d:87:57:d2:67:cf:1a:24:27:38:98:ee: 69:d0:03:a1:a4:8f:d4:ea:d8:e9:9e:70:49:ed:10:07:ff:c3: 8f:85:e1:8f:23:e9:1f:a3:21:0d:6b:43:c0:97:f7:27:a1:8e: 52:67:34:06:88:fc:37:86:93:a8:af:da:0f:f2:41:54:9f:b2: fb:64:32:eb:da:aa:91:59:cf:70:cc:78:9d:99:14:71:dd:93: 01:ed:0f:5a:fb:a5:b9:09:3f:7e:68:67:25:75:41:90:98:42: 0a:68:05:ac:6a:ea:55:35:bf:f8:31:1f:21:17:65:51:b9:d5: 67:06:2b:27:8b:c9:0c:14:e2:0a:b0:d6:a3:fd:c9:77:bf:cb: 29:a2:3b:8a:5e:ec:da:c4:da:49:42:d5:ca:90:fb:79:14:8e: 77:c9:fe:73:e3:c1:31:51:07:7b:46:44:e0:57:af:0e:4c:c5: 31:6e:8a:af:fd:c5:3e:7a:a8:6d:bf:e7:25:0c:35:9e:bb:3e: f1:46:c4:8b:d8:05:13:cd:79:7d:03:7f:ee:97:cd:4e:70:a0: 2a:66:07:19:b7:ce:0e:0b:c5:16:ef:96:fc:44:65:dd:dc:e5: ca:c3:17:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblasFGqRWdOnbCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk NmE4MWNkZTctNmE0Yi00NmNhLTk5ZDYtMWVhMzc3YzhjYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMwC/+7UDe9yPQ/HA9RVYTb6yLY2P0LujRoP gSooWTEcvh8HXjHo1z28EdX4AZe6/nBkTYD6a0yTWUll2bgujqEpneqk81xlzIB9 iekLUPL05anH+5LCDnq0ACstArK/IK4GVcri4Fnwm2ZIKK6oqq9DCsHORRBowJNx eWJz0oR/oI+DXTFyrYjqcNr+1D3PoQyE8NJZFSZ1fTWU1kO1Vzf4vrJqLZ8qo17g 7H+vAL5bi67KLSSi+InBdw9Kds2hq5iWarB2WTLWUnV5Tfkmd3C5BNG2DT61zQh4 XcvQD3WzABFKGU2SYfvN4K+1fJGpr0J0t0N0UE2OoQC2wsvUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWKJ8YOV9qwIyG+dRB4r95smXYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZmNDhjMTYtNWE1NS0z ZjNkLWIwNTMtZDE1ZmUzYWQzMzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDtXD8nUlD8Utq9HHE+f+9ifE8AegwSbD2HV9JnzxokJziY7mnQA6Gk j9Tq2OmecEntEAf/w4+F4Y8j6R+jIQ1rQ8CX9yehjlJnNAaI/DeGk6iv2g/yQVSf svtkMuvaqpFZz3DMeJ2ZFHHdkwHtD1r7pbkJP35oZyV1QZCYQgpoBaxq6lU1v/gx HyEXZVG51WcGKyeLyQwU4gqw1qP9yXe/yymiO4pe7NrE2klC1cqQ+3kUjnfJ/nPj wTFRB3tGROBXrw5MxTFuiq/9xT56qG2/5yUMNZ67PvFGxIvYBRPNeX0Df+6XzU5w oCpmBxm3zg4LxRbvlvxEZd3c5crDF0c= -----END CERTIFICATE-----Generated at Thu Jul 10 01:35:45 2025 by rpki-client