$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa File: 21ed9c33-b646-337e-9363-ff7e1a1cf097.roa (raw, json) Hash identifier: k3xuPKQqGUSs2ca59zW59R78PqFfpy1JS917NXZclN8= Subject key identifier: 02:5E:79:96:42:A8:D7:E8:98:6E:AC:89:3E:F3:71:CC:5D:96:32:3B Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985 Certificate serial: 010D0C9F4328584B0B76B1EACC6B29C296F5E360 Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 15257 IP address blocks: 173.195.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b1:ea:cc:6b:29:c2:96:f5:e3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=48c68909-5076-4693-9b7e-ae0010ea47bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:bd:78:76:82:c0:e4:20:98:01:43:e9:ac: 41:73:d8:45:92:a1:cc:58:5a:86:e9:c6:2f:aa:1d: 58:dd:f1:1a:78:8d:36:53:ff:4f:12:89:c8:95:22: 7e:26:c0:67:4f:e2:7e:3b:03:0d:d7:6d:5d:3a:df: b7:c7:20:91:90:50:65:ca:d3:fe:35:42:17:6a:1e: 8d:df:ea:51:38:2e:54:88:67:62:d2:18:ff:c9:6e: cf:78:54:4c:03:40:17:5d:99:15:da:87:81:ed:11: ee:86:45:61:31:ee:b4:26:9e:fc:62:2b:a5:bf:36: 54:db:96:6c:96:84:94:4f:af:29:c6:16:20:b5:1b: 2a:44:44:fc:28:b7:92:2d:78:be:47:90:c1:b6:ef: f9:62:7e:3d:67:d7:94:24:52:8b:f2:d2:38:5d:d4: 16:9c:b6:ff:0c:12:be:4c:e4:0b:35:7d:ea:d1:e1: 57:65:b1:b2:52:16:c2:96:f7:70:93:01:61:1c:de: af:10:44:08:cb:9a:e2:9a:be:5e:ae:cd:73:ae:3d: 4c:a4:15:db:d5:01:be:45:1a:85:a3:22:41:53:9b: 60:fd:d5:62:4e:3c:9b:66:c3:fa:f7:40:bf:3f:0d: 48:72:59:51:3e:22:52:28:2c:00:87:b9:80:9c:1b: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5E:79:96:42:A8:D7:E8:98:6E:AC:89:3E:F3:71:CC:5D:96:32:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl X509v3 Authority Key Identifier: keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer sbgp-ipAddrBlock: critical IPv4: 173.195.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:db:4e:c8:c9:8b:40:e5:35:33:f2:80:92:2a:76:7d:e6:6a: 04:ba:46:2f:e7:59:01:67:a9:22:92:ab:f9:5a:2f:c6:12:e7: 0d:9b:c4:ea:cf:fe:15:a7:4c:d9:d9:6c:af:6b:f2:e6:b9:e4: c7:ba:90:d0:7c:8e:61:fe:7a:38:c4:73:89:15:79:55:ad:0c: 11:e1:3c:ab:d1:db:f0:30:80:eb:5b:68:44:39:59:e3:bd:67: fc:d9:66:50:07:48:18:7f:f6:cd:41:b4:c1:7e:9f:ef:fc:17: 97:4d:9a:4c:7d:22:ee:65:ad:a6:85:77:b7:d3:81:83:c1:9e: 8a:2f:5c:be:82:f6:cf:27:af:ef:3e:48:59:f3:50:5e:77:83: 69:b4:b2:01:a6:d2:f0:8f:60:cd:db:1f:d1:2e:b6:36:b6:df: fb:c7:6c:2d:05:d2:39:6f:91:b8:d6:f1:48:69:c2:a3:db:fe: 30:ef:df:5d:07:41:a2:0f:52:db:50:c3:ee:7c:7d:df:b7:5f: 5f:4c:df:3a:d3:fa:42:c4:57:49:fe:84:1f:55:3e:93:12:03: 07:43:9d:1b:75:37:55:63:31:86:ce:72:5a:cd:8e:c0:69:95: 5c:e4:95:e0:6f:58:7d:47:6d:17:6e:e3:6d:9f:a6:c8:37:b9: ca:a6:25:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrHqzGspwpb142AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy OTg1MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NDhjNjg5MDktNTA3Ni00NjkzLTliN2UtYWUwMDEwZWE0N2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDy9eHaCwOQgmAFD6axBc9hFkqHMWFqG6cYv qh1Y3fEaeI02U/9PEonIlSJ+JsBnT+J+OwMN121dOt+3xyCRkFBlytP+NUIXah6N 3+pROC5UiGdi0hj/yW7PeFRMA0AXXZkV2oeB7RHuhkVhMe60Jp78YiulvzZU25Zs loSUT68pxhYgtRsqRET8KLeSLXi+R5DBtu/5Yn49Z9eUJFKL8tI4XdQWnLb/DBK+ TOQLNX3q0eFXZbGyUhbClvdwkwFhHN6vEEQIy5rimr5ers1zrj1MpBXb1QG+RRqF oyJBU5tg/dViTjybZsP690C/Pw1IcllRPiJSKCwAh7mAnBsiIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJeeZZCqNfomG6siT7zccxdljI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvMjFlZDljMzMtYjY0Ni0z MzdlLTkzNjMtZmY3ZTFhMWNmMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz OGE3MDI5ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXbTsjJi0DlNTPygJIqdn3magS6Ri/nWQFnqSKSq/laL8YS5w2bxOrP /hWnTNnZbK9r8ua55Me6kNB8jmH+ejjEc4kVeVWtDBHhPKvR2/AwgOtbaEQ5WeO9 Z/zZZlAHSBh/9s1BtMF+n+/8F5dNmkx9Iu5lraaFd7fTgYPBnoovXL6C9s8nr+8+ SFnzUF53g2m0sgGm0vCPYM3bH9Eutja23/vHbC0F0jlvkbjW8UhpwqPb/jDv310H QaIPUttQw+58fd+3X19M3zrT+kLEV0n+hB9VPpMSAwdDnRt1N1VjMYbOclrNjsBp lVzkleBvWH1HbRdu422fpsg3ucqmJWE= -----END CERTIFICATE-----Generated at Mon Sep 8 01:53:38 2025 by rpki-client