$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa File: dafac471-af6f-3a79-bde6-d8bb06803d84.roa (raw, json) Hash identifier: Tw2ajDCzC3nqsLPBLZueOM5H6eXrY1njRNI4MJq6TU0= Subject key identifier: 7F:5A:96:69:63:A8:6B:9A:9E:8D:DF:A8:EB:D1:3F:FF:A5:D3:B7:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B710B31C87C7E999DA880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.25.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:71:0b:31:c8:7c:7e:99:9d:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=71ce44b3-42c5-4a96-b923-7802d5f1df7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f5:00:9c:34:fd:32:48:bd:ba:2e:b5:94:8d: fa:4e:56:1c:64:b0:ce:55:ef:45:2f:b1:16:32:5f: 30:3d:68:8f:9e:c5:e6:3c:04:ac:c9:68:a8:a6:65: 4f:0b:86:52:a4:e0:26:75:af:2e:71:94:73:96:73: 6a:58:91:de:08:9d:95:0c:86:fa:69:23:30:21:36: 62:6b:a2:3a:78:c9:1a:b0:53:3c:50:b9:a5:cc:94: 02:f4:8e:30:33:da:65:68:60:4c:2b:b0:f9:6a:87: 69:12:b0:0b:c4:79:c1:91:e3:73:27:30:63:02:6f: ca:88:58:6b:23:f7:c6:aa:ec:e4:3d:12:a2:7d:d9: 50:c5:45:2d:6a:40:ad:d4:69:22:b6:eb:3d:f9:77: 30:f7:b4:59:d4:f9:a2:8c:cd:d1:d8:f5:0d:6a:6e: 95:65:de:8b:52:64:aa:7c:4a:d9:f5:fd:4c:40:e6: 10:30:5c:b4:c1:83:3e:f8:55:19:5a:2b:37:bc:5e: cc:d5:ef:4d:7c:69:78:c8:6b:16:4b:18:17:fb:00: fe:2a:26:3e:cc:b3:a1:a4:cc:a6:de:7a:9a:75:b6: 91:49:ad:d8:22:c7:20:3b:e1:81:22:ca:06:fc:31: 69:c1:d3:aa:68:67:2a:8a:a1:b8:8a:2b:d3:7a:9f: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:96:69:63:A8:6B:9A:9E:8D:DF:A8:EB:D1:3F:FF:A5:D3:B7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d9:f6:93:39:72:de:5b:1c:07:94:20:b1:ad:65:ab:ee:85: 4f:2b:a4:ff:8e:4a:65:27:8b:a8:ca:58:67:36:73:db:42:7b: 43:df:58:0f:1b:eb:ba:9e:bf:2f:f7:e2:9a:54:cb:f2:cf:7c: dc:cf:91:85:42:ac:c2:74:82:5b:64:03:d2:f2:b0:72:3c:42: 90:85:2d:a9:9b:18:16:22:50:37:9e:a6:83:4f:84:39:3a:99: 02:92:c7:e1:7b:24:23:bb:93:b1:c5:d3:30:f5:36:ae:72:38: dc:18:74:6c:3c:1d:49:5a:4b:f6:48:1f:a9:22:0b:f2:9a:59: 58:bb:e3:33:8b:cd:0c:ff:5d:76:47:a9:1f:ad:5e:37:e5:db: 22:ad:a8:65:c9:03:28:a7:8d:80:a0:ce:26:6b:81:4b:36:41: 61:25:3c:3c:06:4b:3b:9c:ac:de:14:fd:5c:71:27:ee:c6:7b: f9:40:cb:63:c6:93:54:64:c2:47:80:c3:bc:0a:10:72:99:92: 21:a4:08:a6:b9:76:e7:09:67:3c:03:9f:17:fd:13:25:91:01: 66:8d:92:f3:26:ac:2d:b1:17:e0:02:c6:a4:c5:46:34:56:ea: 1d:d7:b9:0c:55:8c:de:40:5d:bd:12:f8:ad:0a:b8:98:03:42: b5:2a:3b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G3ELMch8fpmdqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk NzFjZTQ0YjMtNDJjNS00YTk2LWI5MjMtNzgwMmQ1ZjFkZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fUAnDT9Mki9ui61lI36TlYcZLDOVe9FL7EW Ml8wPWiPnsXmPASsyWiopmVPC4ZSpOAmda8ucZRzlnNqWJHeCJ2VDIb6aSMwITZi a6I6eMkasFM8ULmlzJQC9I4wM9plaGBMK7D5aodpErALxHnBkeNzJzBjAm/KiFhr I/fGquzkPRKifdlQxUUtakCt1Gkitus9+Xcw97RZ1PmijM3R2PUNam6VZd6LUmSq fErZ9f1MQOYQMFy0wYM++FUZWis3vF7M1e9NfGl4yGsWSxgX+wD+KiY+zLOhpMym 3nqadbaRSa3YIscgO+GBIsoG/DFpwdOqaGcqiqG4iivTep+tDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9almljqGuano3fqOvRP/+l07cmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFmYWM0NzEtYWY2Zi0z YTc5LWJkZTYtZDhiYjA2ODAzZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrZ9pM5ct5bHAeUILGtZavuhU8rpP+OSmUni6jKWGc2c9tCe0PfWA8b 67qevy/34ppUy/LPfNzPkYVCrMJ0gltkA9LysHI8QpCFLambGBYiUDeepoNPhDk6 mQKSx+F7JCO7k7HF0zD1Nq5yONwYdGw8HUlaS/ZIH6kiC/KaWVi74zOLzQz/XXZH qR+tXjfl2yKtqGXJAyinjYCgziZrgUs2QWElPDwGSzucrN4U/VxxJ+7Ge/lAy2PG k1RkwkeAw7wKEHKZkiGkCKa5ducJZzwDnxf9EyWRAWaNkvMmrC2xF+ACxqTFRjRW 6h3XuQxVjN5AXb0S+K0KuJgDQrUqO90= -----END CERTIFICATE-----Generated at Thu Jul 10 01:41:13 2025 by rpki-client