$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa File: 31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa (raw, json) Hash identifier: PDmBRq9d914tQkzgbv+Mrn8FrBlMuVOBCntXl6luh+o= Subject key identifier: DF:1B:7B:7E:8D:F1:47:FF:D5:47:E8:3E:EA:2F:3A:46:7C:C2:05:E1 Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Certificate serial: 010D0C9F4328584A606C685766558DE51C9B5280 Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa Signing time: Tue 01 Jul 2025 18:36:47 +0000 ROA not before: Tue 01 Jul 2025 18:36:47 +0000 ROA not after: Mon 29 Sep 2025 18:36:47 +0000 asID: 20477 IP address blocks: 137.118.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:6c:68:57:66:55:8d:e5:1c:9b:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Validity Not Before: Jul 1 18:36:47 2025 GMT Not After : Sep 29 18:36:47 2025 GMT Subject: CN=9eba52a6-c78b-4bae-b0c8-fbaa9efbb824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:64:19:5c:a8:83:7a:71:ac:6c:d6:d7:8c: a8:9c:0a:01:e9:80:17:dc:1d:85:49:2b:82:d0:05: 61:52:8c:24:c1:a1:da:97:99:e9:d6:00:8f:10:87: 8c:ad:6e:68:8e:18:89:22:f6:fd:dc:15:6c:9c:0f: ac:8b:f6:e1:f7:fb:61:32:f1:87:6c:c4:26:98:0b: af:89:87:ff:5b:d1:92:0a:a9:7f:b5:9f:ab:91:81: 43:f0:01:cc:28:c7:26:f3:35:b1:9c:c1:82:4e:18: c1:0c:40:20:9d:b1:0b:dc:3b:0c:52:d6:a0:3c:87: 16:ac:a1:ab:5a:4c:dc:31:67:03:04:e2:8a:a1:c0: 30:d5:49:1a:12:12:5c:2f:92:6f:60:5e:00:3a:8e: cf:cd:5a:0b:a2:64:5e:9c:aa:7e:b0:00:59:88:d6: 4a:42:62:1c:6f:22:b9:7c:b0:df:5b:50:4d:6c:82: d8:d9:3d:fa:78:be:28:dc:ca:e6:2e:9d:a5:88:c9: ab:6b:44:16:5b:a0:73:c3:cc:1d:97:09:c8:b8:7e: e3:dd:96:0e:fd:3f:7d:51:05:07:ec:75:75:86:02: ea:34:e8:f2:1a:a4:2a:46:9b:48:08:5f:b3:ee:db: 8d:d3:c9:69:97:4c:13:67:1a:6c:61:d8:38:da:28: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1B:7B:7E:8D:F1:47:FF:D5:47:E8:3E:EA:2F:3A:46:7C:C2:05:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31c2723c-53b1-306c-ac1a-2b1203a27d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl X509v3 Authority Key Identifier: keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer sbgp-ipAddrBlock: critical IPv4: 137.118.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a8:c0:2d:11:6f:0f:33:15:25:05:d5:5c:0c:d8:3c:f6:43: 36:07:7e:8c:69:20:8b:74:79:75:c8:bd:3a:05:70:91:6f:d4: 2c:31:ba:d8:72:6b:2b:b3:5a:04:7e:eb:de:65:07:79:36:f8: d5:6e:b7:55:37:1c:e2:1c:e2:f4:63:a2:f4:ce:45:9f:c6:a0: 05:a0:3b:16:57:3e:ff:17:02:5b:23:7f:fa:d8:b3:12:92:0f: a3:06:18:9f:1a:a0:a0:7a:5e:ad:06:b2:8f:25:75:4f:a8:96: 75:d0:90:4b:29:b2:e2:a4:97:54:03:ef:15:9d:39:b5:f1:6c: 55:8b:17:6c:98:9e:15:81:3a:fd:65:f2:6c:1d:1d:1b:04:8b: e9:08:b1:4d:e6:01:bd:76:76:65:8c:99:be:17:7e:50:b1:53: 49:2e:8e:46:47:83:47:4d:4a:41:b9:d8:fc:5d:1d:a7:c6:bd: 10:23:3f:8f:cd:4b:40:4e:c2:51:b1:35:5a:fc:79:f1:50:65: b3:88:8b:54:24:08:bd:b8:40:b3:4d:19:81:48:83:ac:c0:8b: 41:aa:d3:fa:39:1f:fb:3e:80:26:37:60:75:fe:1e:a5:db:58: d7:9a:6d:2a:1a:8b:43:d6:05:e3:07:cc:8b:89:b3:b7:9a:ac: 48:17:a1:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpgbGhXZlWN5RybUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi MGY2MB4XDTI1MDcwMTE4MzY0N1oXDTI1MDkyOTE4MzY0N1owLzEtMCsGA1UEAxMk OWViYTUyYTYtYzc4Yi00YmFlLWIwYzgtZmJhYTllZmJiODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigFkGVyog3pxrGzW14yonAoB6YAX3B2FSSuC 0AVhUowkwaHal5np1gCPEIeMrW5ojhiJIvb93BVsnA+si/bh9/thMvGHbMQmmAuv iYf/W9GSCql/tZ+rkYFD8AHMKMcm8zWxnMGCThjBDEAgnbEL3DsMUtagPIcWrKGr WkzcMWcDBOKKocAw1UkaEhJcL5JvYF4AOo7PzVoLomRenKp+sABZiNZKQmIcbyK5 fLDfW1BNbILY2T36eL4o3MrmLp2liMmra0QWW6Bzw8wdlwnIuH7j3ZYO/T99UQUH 7HV1hgLqNOjyGqQqRptICF+z7tuN08lpl0wTZxpsYdg42igaKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8be36N8Uf/1UfoPuovOkZ8wgXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvMzFjMjcyM2MtNTNiMS0z MDZjLWFjMWEtMmIxMjAzYTI3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2 OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3 YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiXbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmowC0Rbw8zFSUF1VwM2Dz2QzYHfoxpIIt0eXXIvToFcJFv1Cwxuthy ayuzWgR+695lB3k2+NVut1U3HOIc4vRjovTORZ/GoAWgOxZXPv8XAlsjf/rYsxKS D6MGGJ8aoKB6Xq0Gso8ldU+olnXQkEspsuKkl1QD7xWdObXxbFWLF2yYnhWBOv1l 8mwdHRsEi+kIsU3mAb12dmWMmb4XflCxU0kujkZHg0dNSkG52PxdHafGvRAjP4/N S0BOwlGxNVr8efFQZbOIi1QkCL24QLNNGYFIg6zAi0Gq0/o5H/s+gCY3YHX+HqXb WNeabSoai0PWBeMHzIuJs7earEgXocY= -----END CERTIFICATE-----Generated at Thu Jul 3 18:30:40 2025 by rpki-client