$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa File: c790923e-3c9c-3d96-a8c7-ec566f522967.roa (raw, json) Hash identifier: 3Woq3x26UuimK+vV7wbLiLCKTiqy8mdDPv23tWdtk5w= Subject key identifier: 2E:17:AB:4C:EA:79:D8:79:F2:98:29:46:25:D7:BC:E1:A4:2E:55:CB Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584ACE0BADBBB7BA3AC18C590980 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 3257 IP address blocks: 173.232.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:ad:bb:b7:ba:3a:c1:8c:59:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=b43e97b0-da60-4fa6-b84e-2ce86c65d3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:7b:ac:3f:60:42:dd:c0:5e:d3:45:2d:f7: 10:a0:b2:b0:38:74:24:c8:43:f2:16:0b:be:57:70: da:3c:cf:1d:1a:95:0f:de:2f:73:3b:7b:9f:7a:49: 9b:48:23:40:08:c6:ac:5c:29:8f:17:04:7b:57:42: d6:de:da:0b:70:12:bd:4a:7c:1e:34:ab:72:99:60: f3:98:cd:48:29:71:21:11:72:ee:ec:ad:f4:39:1b: 4e:90:3c:09:3c:03:b9:fd:b2:0e:f5:e3:89:10:5e: ce:22:d7:be:ec:26:cd:4f:14:c8:b3:3b:59:5e:73: 67:2e:26:ae:24:85:0b:06:88:49:b3:46:da:6b:9d: d8:da:9f:e0:6f:08:34:6e:8c:6f:1c:06:46:35:77: 56:e4:9e:82:7f:8f:67:14:39:49:e2:c7:1d:97:d6: 74:4d:51:b5:d9:80:44:56:88:bd:37:93:75:d2:61: 61:78:8c:c6:ba:8c:dd:2a:30:ff:92:7a:e4:a1:99: 2f:c6:02:7b:96:92:ee:98:6f:dc:26:2d:43:84:f6: 25:08:47:35:eb:d6:53:c9:cf:17:58:81:24:65:6a: 4b:4a:0f:15:f0:d5:0f:7d:e7:e8:9a:1e:6a:75:13: a2:80:8b:28:e2:24:b8:1b:65:03:97:51:01:8c:20: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:17:AB:4C:EA:79:D8:79:F2:98:29:46:25:D7:BC:E1:A4:2E:55:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d6:03:70:19:55:bd:28:d8:a8:f6:44:6f:7d:77:cb:05:a5: 8a:df:fd:0f:65:62:0c:99:4f:24:4f:29:dd:5d:80:f5:19:44: f2:7c:91:ad:59:fd:ce:59:94:8e:e5:71:82:a5:57:a2:60:e4: 22:dd:6a:2f:31:fe:1e:75:b8:bf:76:fa:80:c9:ec:67:ec:46: cd:e2:6e:cf:2a:bd:d5:f9:f4:2e:60:1c:a3:98:e8:70:70:b8: 62:e8:db:68:2b:29:10:5b:a9:63:e2:e1:b1:e8:68:1e:bb:7c: aa:bc:f3:19:10:a7:45:4e:eb:09:d7:ce:db:d1:9a:05:e0:de: 82:b7:fd:65:0b:3c:20:13:94:9e:f3:95:52:40:84:2c:8d:a6: 46:0e:1d:27:45:54:76:53:2b:ad:81:30:68:71:87:f5:31:fd: 29:7c:fb:69:ca:99:22:e3:db:c6:43:a4:3b:e6:52:f9:26:7d: 84:c3:ac:cc:a5:c7:40:90:71:7f:c9:e0:d4:47:48:ee:65:8b: 32:a6:a2:38:a8:93:13:75:70:41:2d:5e:c0:b3:55:f4:cc:22: 91:6f:6b:15:ae:18:99:a2:e3:60:6b:a8:16:ab:53:c1:25:03: ae:b4:6d:42:b4:4e:d1:14:8d:fa:1e:3e:b0:53:55:8c:12:02: a7:fe:5f:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC627t7o6wYxZCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YjQzZTk3YjAtZGE2MC00ZmE2LWI4NGUtMmNlODZjNjVkM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIt7rD9gQt3AXtNFLfcQoLKwOHQkyEPyFgu+ V3DaPM8dGpUP3i9zO3ufekmbSCNACMasXCmPFwR7V0LW3toLcBK9SnweNKtymWDz mM1IKXEhEXLu7K30ORtOkDwJPAO5/bIO9eOJEF7OIte+7CbNTxTIsztZXnNnLiau JIULBohJs0baa53Y2p/gbwg0boxvHAZGNXdW5J6Cf49nFDlJ4scdl9Z0TVG12YBE Voi9N5N10mFheIzGuozdKjD/knrkoZkvxgJ7lpLumG/cJi1DhPYlCEc169ZTyc8X WIEkZWpLSg8V8NUPfefomh5qdROigIso4iS4G2UDl1EBjCD++wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4Xq0zqedh58pgpRiXXvOGkLlXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzc5MDkyM2UtM2M5Yy0z ZDk2LWE4YzctZWM1NjZmNTIyOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrWA3AZVb0o2Kj2RG99d8sFpYrf/Q9lYgyZTyRPKd1dgPUZRPJ8ka1Z /c5ZlI7lcYKlV6Jg5CLdai8x/h51uL92+oDJ7GfsRs3ibs8qvdX59C5gHKOY6HBw uGLo22grKRBbqWPi4bHoaB67fKq88xkQp0VO6wnXztvRmgXg3oK3/WULPCATlJ7z lVJAhCyNpkYOHSdFVHZTK62BMGhxh/Ux/Sl8+2nKmSLj28ZDpDvmUvkmfYTDrMyl x0CQcX/J4NRHSO5lizKmojiokxN1cEEtXsCzVfTMIpFvaxWuGJmi42BrqBarU8El A660bUK0TtEUjfoePrBTVYwSAqf+XwI= -----END CERTIFICATE-----Generated at Wed Aug 20 13:13:23 2025 by rpki-client