$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa File: aca8707a-936e-31c6-9bed-9ddd4677f562.roa (raw, json) Hash identifier: /ROgUtEPlf29F1IvvK1CpVRJkWrVWKg56orp7k2W+5w= Subject key identifier: 5B:12:1D:59:11:9D:CE:BF:29:2A:FC:58:E0:97:B3:4D:2F:08:DB:CC Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AE2FBC6F1CB120357209F30E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 3257 IP address blocks: 173.44.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c6:f1:cb:12:03:57:20:9f:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=b1adb497-87f5-43ba-a9f6-37325dca0828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:0f:c5:7f:73:30:c4:e0:28:54:df:43:68: c9:4b:8e:ae:63:36:ac:45:81:69:dc:14:0c:75:6f: 23:cc:72:c1:42:76:8f:84:31:a6:2c:94:b8:eb:75: 4e:64:b2:40:38:47:81:16:7d:5c:58:7d:81:10:11: b2:46:af:75:d0:9e:1c:ff:fa:1d:23:5b:14:51:10: 66:1c:07:4c:73:51:c9:93:10:28:66:a4:7d:05:43: 76:ce:71:91:17:3d:ef:89:41:6e:4a:2f:94:f2:0c: f6:5d:2f:c9:25:4b:1e:29:89:01:cd:ef:6b:35:f7: 09:cd:82:5e:8e:e0:f9:df:91:03:27:82:f2:0d:93: a3:60:80:f8:ab:ba:0a:c8:bc:4d:ab:2d:fe:78:7d: 2a:c6:29:24:15:e9:37:6f:e3:71:36:e0:e8:28:a1: 94:33:5b:f9:b8:b5:42:0a:50:e0:76:98:18:e7:6a: 84:33:cd:57:11:e1:a6:ba:a6:a3:3f:82:95:c6:c1: fa:4a:cd:fe:a3:16:c1:82:fa:4e:57:d7:b0:80:e8: 1d:16:95:6e:32:26:d4:0b:21:b7:80:2c:e7:fa:a4: 36:e4:03:1f:12:49:27:82:8a:65:b9:52:06:99:30: 40:2d:c7:06:2c:24:df:23:9c:a0:53:13:91:9d:38: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:12:1D:59:11:9D:CE:BF:29:2A:FC:58:E0:97:B3:4D:2F:08:DB:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.44.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c6:a0:73:7b:f6:bb:d3:99:11:ec:d7:5b:b1:78:51:b4:2d: c5:fa:76:71:62:4c:f9:eb:05:18:c6:ec:68:0e:cc:4f:f9:40: 3a:d5:e0:a9:69:21:0a:50:2c:da:bc:74:a0:ab:e7:b1:d9:00: f2:38:11:f1:b9:be:97:7f:02:e0:f8:84:a8:ae:e5:df:87:fe: 83:51:69:56:15:58:85:f3:d0:d5:be:5a:3a:91:7a:d4:0e:08: 86:2e:11:8e:0a:d5:cd:34:23:69:e7:5b:d9:15:b2:2f:d4:47: 13:b6:c4:41:7d:6c:59:33:c7:07:b8:b1:37:21:e9:aa:d3:ed: 63:a8:7c:49:d9:60:48:93:04:7f:2c:f5:01:f4:ad:5f:83:de: d6:c0:57:f0:c8:c5:fe:9f:7e:bb:66:95:96:63:e2:dd:7d:9f: f8:ca:c2:95:fa:61:30:90:f0:41:39:8a:eb:5c:72:ad:28:bd: f4:5f:3e:fc:20:c1:52:ac:3a:a9:81:5f:a5:ed:e5:49:67:9e: 23:cc:db:03:bc:6f:8f:fd:1c:bb:99:6f:6d:96:04:cf:70:56: 91:65:2c:64:0c:46:20:e8:a8:63:4b:e5:8a:7d:28:a6:2e:51: de:f3:ea:82:f2:9c:68:2a:70:9f:bb:42:b1:0c:44:26:d6:7d: 61:ad:51:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8bxyxIDVyCfMOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk YjFhZGI0OTctODdmNS00M2JhLWE5ZjYtMzczMjVkY2EwODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoukPxX9zMMTgKFTfQ2jJS46uYzasRYFp3BQM dW8jzHLBQnaPhDGmLJS463VOZLJAOEeBFn1cWH2BEBGyRq910J4c//odI1sUURBm HAdMc1HJkxAoZqR9BUN2znGRFz3viUFuSi+U8gz2XS/JJUseKYkBze9rNfcJzYJe juD535EDJ4LyDZOjYID4q7oKyLxNqy3+eH0qxikkFek3b+NxNuDoKKGUM1v5uLVC ClDgdpgY52qEM81XEeGmuqajP4KVxsH6Ss3+oxbBgvpOV9ewgOgdFpVuMibUCyG3 gCzn+qQ25AMfEkkngopluVIGmTBALccGLCTfI5ygUxORnTgs+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsSHVkRnc6/KSr8WOCXs00vCNvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWNhODcwN2EtOTM2ZS0z MWM2LTliZWQtOWRkZDQ2NzdmNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHGoHN79rvTmRHs11uxeFG0LcX6dnFiTPnrBRjG7GgOzE/5QDrV4Klp IQpQLNq8dKCr57HZAPI4EfG5vpd/AuD4hKiu5d+H/oNRaVYVWIXz0NW+WjqRetQO CIYuEY4K1c00I2nnW9kVsi/URxO2xEF9bFkzxwe4sTch6arT7WOofEnZYEiTBH8s 9QH0rV+D3tbAV/DIxf6ffrtmlZZj4t19n/jKwpX6YTCQ8EE5iutccq0ovfRfPvwg wVKsOqmBX6Xt5UlnniPM2wO8b4/9HLuZb22WBM9wVpFlLGQMRiDoqGNL5Yp9KKYu Ud7z6oLynGgqcJ+7QrEMRCbWfWGtUcU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:48:44 2025 by rpki-client