$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa File: c790923e-3c9c-3d96-a8c7-ec566f522967.roa (raw, json) Hash identifier: afxUVo4T6GRcNJj9LEuSv/5OsOSfuBfwd20ZPtGMtSk= Subject key identifier: 88:F6:B6:5E:89:D3:2B:01:D3:A4:B0:8E:C1:E0:FD:28:19:FF:0D:07 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849ED741B4AA805DF12B82113C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa Signing time: Wed 21 May 2025 14:14:21 +0000 ROA not before: Wed 21 May 2025 14:14:21 +0000 ROA not after: Tue 19 Aug 2025 14:14:21 +0000 asID: 3257 IP address blocks: 173.232.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:74:1b:4a:a8:05:df:12:b8:21:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 21 14:14:21 2025 GMT Not After : Aug 19 14:14:21 2025 GMT Subject: CN=79c84f5a-786a-427a-aa23-8050a4831f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:3f:9a:f8:96:5e:4e:72:cd:5f:8d:34:ce: b1:04:86:1f:98:4b:ba:c0:2a:8b:2d:a2:ea:bd:1f: d0:00:d5:c4:44:c9:b9:33:09:34:f1:21:61:55:ac: d8:db:eb:41:9f:70:b6:9d:ad:52:4e:aa:02:4e:01: e8:6e:f7:28:d6:7e:48:d1:47:7f:f5:17:09:95:4e: 2e:28:da:4c:d8:23:8b:93:a5:75:00:2f:15:5e:b8: 00:fd:ae:d4:49:48:c2:8a:9a:84:b6:a4:9e:45:38: 3f:8d:32:67:35:49:a2:c9:3e:46:b4:b3:2e:7b:af: bc:a1:e0:83:f1:14:58:57:eb:52:72:31:43:e7:c8: ac:75:a5:4a:8e:19:0d:ce:e3:6f:d9:5b:57:1d:0a: 4b:11:a0:f3:1d:24:c5:1f:a6:e6:90:5b:2c:20:86: 9a:03:c1:06:bd:cf:8d:af:15:57:19:d4:4d:cd:eb: a2:aa:33:d9:0b:f5:72:2b:1e:b0:76:d3:f8:ec:97: e3:af:83:71:6d:27:a1:d4:aa:d6:18:c8:a8:d0:24: af:f9:93:9e:09:54:34:aa:62:c9:62:3e:87:92:cb: ca:fe:65:35:ad:d4:80:82:fb:ff:2b:29:78:52:0e: 61:8c:d4:2d:75:dc:4e:bc:1c:e0:48:60:0d:32:b9: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F6:B6:5E:89:D3:2B:01:D3:A4:B0:8E:C1:E0:FD:28:19:FF:0D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c790923e-3c9c-3d96-a8c7-ec566f522967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:04:bf:5e:0f:cc:67:bb:51:3c:c9:c2:48:d6:3f:6c:ed:63: fa:45:36:84:3c:bc:f0:29:2e:75:97:d4:56:70:62:22:a1:85: d4:a2:16:32:9c:0d:5f:a8:7b:0c:7f:4f:d5:ac:72:59:86:85: 9c:5f:a7:10:56:4e:9d:7f:44:7c:4b:6f:85:5d:84:16:40:f0: c0:a4:08:fc:75:69:84:45:09:35:e2:1c:d8:cf:d3:f6:34:f8: d6:f0:77:bb:a4:82:6c:50:d7:09:e7:e3:66:9c:cf:3a:98:e2: 8c:16:a0:55:dc:26:fc:42:61:96:c3:5c:53:32:c4:29:85:09: e3:7e:ce:df:1d:0a:7a:9d:06:75:69:5d:a4:61:72:ae:4b:b6: 76:ef:22:ae:7b:f7:19:13:ca:2d:79:d3:90:b1:48:81:f0:13: 58:99:15:1b:ac:6e:c5:c2:01:66:87:62:fa:5d:3c:6e:e5:de: 17:f8:34:c0:02:05:02:4c:07:ea:05:3a:74:10:99:3c:aa:01: 61:f0:3c:34:d3:7d:eb:4b:b0:22:51:58:fe:af:a7:30:99:76: 1d:61:b4:24:eb:b8:97:0d:2b:06:22:38:ad:53:b3:bc:17:c6: a2:d9:c7:e9:24:00:cd:8a:7a:10:9a:ed:81:93:c2:fc:8e:d5: 5a:39:07:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntdBtKqAXfErghE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDUyMTE0MTQyMVoXDTI1MDgxOTE0MTQyMVowLzEtMCsGA1UEAxMk NzljODRmNWEtNzg2YS00MjdhLWFhMjMtODA1MGE0ODMxZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v0/mviWXk5yzV+NNM6xBIYfmEu6wCqLLaLq vR/QANXERMm5Mwk08SFhVazY2+tBn3C2na1STqoCTgHobvco1n5I0Ud/9RcJlU4u KNpM2COLk6V1AC8VXrgA/a7USUjCipqEtqSeRTg/jTJnNUmiyT5GtLMue6+8oeCD 8RRYV+tScjFD58isdaVKjhkNzuNv2VtXHQpLEaDzHSTFH6bmkFssIIaaA8EGvc+N rxVXGdRNzeuiqjPZC/VyKx6wdtP47Jfjr4NxbSeh1KrWGMio0CSv+ZOeCVQ0qmLJ Yj6HksvK/mU1rdSAgvv/Kyl4Ug5hjNQtddxOvBzgSGANMrlY6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj2tl6J0ysB06SwjsHg/SgZ/w0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzc5MDkyM2UtM2M5Yy0z ZDk2LWE4YzctZWM1NjZmNTIyOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUEv14PzGe7UTzJwkjWP2ztY/pFNoQ8vPApLnWX1FZwYiKhhdSiFjKc DV+oewx/T9WsclmGhZxfpxBWTp1/RHxLb4VdhBZA8MCkCPx1aYRFCTXiHNjP0/Y0 +Nbwd7ukgmxQ1wnn42aczzqY4owWoFXcJvxCYZbDXFMyxCmFCeN+zt8dCnqdBnVp XaRhcq5LtnbvIq579xkTyi1505CxSIHwE1iZFRusbsXCAWaHYvpdPG7l3hf4NMAC BQJMB+oFOnQQmTyqAWHwPDTTfetLsCJRWP6vpzCZdh1htCTruJcNKwYiOK1Ts7wX xqLZx+kkAM2KehCa7YGTwvyO1Vo5B+Q= -----END CERTIFICATE-----Generated at Fri Jun 6 13:40:26 2025 by rpki-client