$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbf65b9-e159-3834-8050-400e8ea200d9.roa File: dcbf65b9-e159-3834-8050-400e8ea200d9.roa (raw, json) Hash identifier: AhaWXSgw2JrpTQBLdjmJZPuAvEt6zo0sm2UqLDFB+Jc= Subject key identifier: B7:2C:B0:10:87:48:2A:06:FA:33:69:E1:E0:2E:08:0B:94:4D:06:DE Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A410688262A67CDFA141A64F0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbf65b9-e159-3834-8050-400e8ea200d9.roa Signing time: Fri 20 Jun 2025 12:41:28 +0000 ROA not before: Fri 20 Jun 2025 12:41:28 +0000 ROA not after: Thu 18 Sep 2025 12:41:28 +0000 asID: 3257 IP address blocks: 173.232.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:06:88:26:2a:67:cd:fa:14:1a:64:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jun 20 12:41:28 2025 GMT Not After : Sep 18 12:41:28 2025 GMT Subject: CN=d12b18b1-3953-4ca7-83eb-9bbed98aced8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:0a:f3:96:39:d8:f6:cd:f9:d9:5c:03:af: a4:53:1c:5a:18:e4:c0:e6:0d:db:60:84:ef:57:b5: 99:e0:b6:47:1e:0b:82:2a:46:24:40:6a:ca:db:f9: e4:04:32:31:f2:e7:26:36:1a:72:40:07:6b:d1:5b: 00:0f:ef:1f:6c:b0:5b:c4:bc:31:21:c2:15:50:ef: 36:1a:46:99:83:ff:cd:24:36:10:59:b4:fc:27:cd: ac:68:78:54:42:d8:d0:15:53:6a:ac:dc:9b:46:fb: 12:2e:0e:20:9d:c6:11:0b:a8:bd:91:b8:d8:c9:1a: a0:5c:87:a0:d1:0b:22:65:c5:76:3a:b4:38:28:b6: 5d:94:f7:55:33:dc:e1:5e:19:f6:e3:10:06:49:f9: 0e:64:f6:7f:5e:ac:98:b6:01:dc:f7:48:21:78:87: cb:28:e5:ff:9b:6c:83:05:8b:a0:44:eb:df:f8:a0: f1:f8:8c:ff:3f:24:c1:bb:30:58:77:77:d1:ac:27: 5f:0f:ed:7c:34:8d:56:5e:a6:8f:25:b8:de:71:65: 43:ac:3d:22:50:97:a2:12:0b:61:69:f2:52:e3:cf: 44:42:47:36:ae:e7:80:8e:85:50:be:8e:47:5e:37: f4:2f:af:75:43:ce:67:4d:cd:da:6c:ad:5b:a9:f0: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2C:B0:10:87:48:2A:06:FA:33:69:E1:E0:2E:08:0B:94:4D:06:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbf65b9-e159-3834-8050-400e8ea200d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:10:9a:6f:65:ed:dd:cf:7d:d9:f3:01:1d:a1:c2:42:45:bc: 63:c3:fe:aa:73:f8:41:37:f8:76:9d:72:87:8a:11:51:27:7d: 0d:82:22:c5:cb:8f:cb:11:be:56:57:66:0d:e1:30:84:9d:97: 53:1d:66:92:22:43:84:be:37:23:68:9f:7f:fb:86:99:d0:5b: 62:1f:cc:bb:19:49:e0:d8:96:b6:c6:64:39:cf:3d:e2:d6:00: bf:a5:ff:fd:12:fc:84:31:60:62:88:95:67:ae:86:3b:aa:ce: 77:a5:a7:35:fe:fc:41:9b:bd:72:4d:66:2e:ae:9d:24:b5:29: cc:bf:5a:a4:67:d1:e1:7a:83:f3:0d:11:32:93:18:b7:fb:f8: 7d:d2:f9:4e:43:61:16:8a:1f:49:1c:f8:8d:83:e1:a4:3b:0c: 94:ff:2b:6e:88:81:b4:fd:eb:1c:49:b7:16:92:65:fc:ff:dc: 9d:5b:32:84:37:db:1f:a4:dc:75:09:92:cf:35:a0:be:48:21: e1:6e:79:18:90:cd:56:ed:83:5c:b1:2f:3d:8a:84:08:a6:c7: fa:57:75:28:50:9c:3b:3e:2c:7d:76:00:d7:a9:34:b1:c3:34: 87:fd:d6:2e:ae:fe:99:d8:f2:4d:b7:a8:ad:7a:6b:ed:d5:89: e5:b6:da:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBBogmKmfN+hQaZPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDYyMDEyNDEyOFoXDTI1MDkxODEyNDEyOFowLzEtMCsGA1UEAxMk ZDEyYjE4YjEtMzk1My00Y2E3LTgzZWItOWJiZWQ5OGFjZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng4K85Y52PbN+dlcA6+kUxxaGOTA5g3bYITv V7WZ4LZHHguCKkYkQGrK2/nkBDIx8ucmNhpyQAdr0VsAD+8fbLBbxLwxIcIVUO82 GkaZg//NJDYQWbT8J82saHhUQtjQFVNqrNybRvsSLg4gncYRC6i9kbjYyRqgXIeg 0QsiZcV2OrQ4KLZdlPdVM9zhXhn24xAGSfkOZPZ/XqyYtgHc90gheIfLKOX/m2yD BYugROvf+KDx+Iz/PyTBuzBYd3fRrCdfD+18NI1WXqaPJbjecWVDrD0iUJeiEgth afJS489EQkc2rueAjoVQvo5HXjf0L691Q85nTc3abK1bqfADuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcssBCHSCoG+jNp4eAuCAuUTQbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGNiZjY1YjktZTE1OS0z ODM0LTgwNTAtNDAwZThlYTIwMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArej8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4Qmm9l7d3PfdnzAR2hwkJFvGPD/qpz+EE3+HadcoeKEVEnfQ2CIsXL j8sRvlZXZg3hMISdl1MdZpIiQ4S+NyNon3/7hpnQW2IfzLsZSeDYlrbGZDnPPeLW AL+l//0S/IQxYGKIlWeuhjuqznelpzX+/EGbvXJNZi6unSS1Kcy/WqRn0eF6g/MN ETKTGLf7+H3S+U5DYRaKH0kc+I2D4aQ7DJT/K26IgbT96xxJtxaSZfz/3J1bMoQ3 2x+k3HUJks81oL5IIeFueRiQzVbtg1yxLz2KhAimx/pXdShQnDs+LH12ANepNLHD NIf91i6u/pnY8k23qK16a+3VieW22uw= -----END CERTIFICATE-----Generated at Tue Jul 1 02:43:09 2025 by rpki-client