$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/cca0876a-5604-3087-980d-a9fcf56fcb98.roa File: cca0876a-5604-3087-980d-a9fcf56fcb98.roa (raw, json) Hash identifier: G2nMqE4lrZUy16JsqRdk2Y8xPrsamwGvieXACH3cjFI= Subject key identifier: DB:6C:0E:E3:45:21:A1:C6:3D:FB:BA:89:71:44:A0:72:A5:82:A0:EC Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F4328584A3A157700E5AF8605E7B8D680 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/cca0876a-5604-3087-980d-a9fcf56fcb98.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 33099 IP address blocks: 174.136.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:77:00:e5:af:86:05:e7:b8:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=f2ea220e-f327-41e9-b350-1af50fcae3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:a1:11:9f:c6:af:ba:f8:be:9d:2f:9b:9c: 18:77:58:78:ce:bd:8a:ab:d1:50:cd:76:55:ac:75: a2:6c:7a:51:b8:03:fa:33:26:1c:fc:6d:25:58:2e: 77:ef:6d:8f:aa:28:f5:b9:da:25:58:18:24:86:47: 3f:dd:a2:88:c9:3a:86:87:18:fc:43:3f:96:7f:bf: 0a:a8:c9:1a:fe:54:33:2d:72:d5:37:31:4d:95:85: 69:f8:30:57:cf:2f:64:c7:fc:ba:42:59:ad:c9:04: e6:34:51:b8:61:b4:54:64:18:df:8a:db:73:40:03: a9:d5:08:ff:d8:43:09:dd:03:65:48:f3:46:1b:f8: ab:b7:ac:89:7c:e9:32:9e:b9:d7:a3:77:44:bf:3e: 4a:ed:ff:5a:03:4d:61:96:60:0c:76:a1:88:7c:51: 31:b9:2d:f4:e8:54:78:fd:07:b2:89:06:77:b5:b3: 4b:68:6b:27:3e:1b:f8:b7:16:cf:e7:f9:3f:32:68: b3:16:80:81:2d:91:23:d6:0b:1d:12:f4:fa:ff:2e: 5e:6a:23:c3:20:7f:9a:ce:65:8f:f7:64:cb:dc:e6: 64:59:1f:46:c6:63:13:58:b6:a5:bd:08:c3:c9:a0: dd:ae:f9:d4:3f:46:18:4b:5a:dc:05:6d:a5:b5:4b: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6C:0E:E3:45:21:A1:C6:3D:FB:BA:89:71:44:A0:72:A5:82:A0:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/cca0876a-5604-3087-980d-a9fcf56fcb98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 174.136.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f5:dc:7b:d7:dd:f5:60:57:47:02:6b:91:84:3b:1d:10:d8: 89:f7:c5:cc:3e:76:d2:4e:3e:a4:e2:d1:fd:ea:9d:b5:a7:cf: ce:86:95:bc:f7:b6:2d:c5:b3:ba:89:d0:8e:e7:b6:fb:07:99: da:46:7b:cf:25:87:05:4f:5f:89:48:6a:bf:c5:03:14:28:d8: 97:11:da:92:a1:f2:95:1c:68:c0:45:74:48:54:0e:86:18:bc: ac:c6:5b:49:21:9f:41:03:07:9c:60:12:92:e3:b8:16:eb:e6: 97:04:60:da:cb:74:82:94:97:47:5c:5c:0d:b7:4b:c8:35:9a: f2:76:a2:cf:74:4b:83:b7:f4:77:14:3c:e9:f7:4e:b9:fa:e2: 88:70:96:e3:88:dd:97:fc:70:b4:5d:8e:f5:38:11:2b:e1:67: 57:c5:8f:d9:33:1d:f0:17:33:3e:14:22:d7:2a:0d:e7:d7:83: 65:80:9a:85:ca:ce:95:5d:cb:14:aa:cb:70:d1:3b:67:4e:d1: 6d:dc:83:1e:6f:14:97:98:7c:03:1f:68:ea:34:5f:c7:2a:ec: a2:98:c0:bb:36:c9:a1:c6:1b:b0:03:98:aa:63:df:c8:86:4d: bb:70:69:9e:f9:2a:d5:ff:19:b3:96:65:0f:b4:9a:6c:d9:fb: e1:58:2b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXcA5a+GBee41oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZjJlYTIyMGUtZjMyNy00MWU5LWIzNTAtMWFmNTBmY2FlM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAKhEZ/Gr7r4vp0vm5wYd1h4zr2Kq9FQzXZV rHWibHpRuAP6MyYc/G0lWC53722Pqij1udolWBgkhkc/3aKIyTqGhxj8Qz+Wf78K qMka/lQzLXLVNzFNlYVp+DBXzy9kx/y6QlmtyQTmNFG4YbRUZBjfittzQAOp1Qj/ 2EMJ3QNlSPNGG/irt6yJfOkynrnXo3dEvz5K7f9aA01hlmAMdqGIfFExuS306FR4 /QeyiQZ3tbNLaGsnPhv4txbP5/k/MmizFoCBLZEj1gsdEvT6/y5eaiPDIH+azmWP 92TL3OZkWR9GxmMTWLalvQjDyaDdrvnUP0YYS1rcBW2ltUtsMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtsDuNFIaHGPfu6iXFEoHKlgqDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvY2NhMDg3NmEtNTYwNC0z MDg3LTk4MGQtYTlmY2Y1NmZjYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrojEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj13HvX3fVgV0cCa5GEOx0Q2In3xcw+dtJOPqTi0f3qnbWnz86Glbz3 ti3Fs7qJ0I7ntvsHmdpGe88lhwVPX4lIar/FAxQo2JcR2pKh8pUcaMBFdEhUDoYY vKzGW0khn0EDB5xgEpLjuBbr5pcEYNrLdIKUl0dcXA23S8g1mvJ2os90S4O39HcU POn3Trn64ohwluOI3Zf8cLRdjvU4ESvhZ1fFj9kzHfAXMz4UItcqDefXg2WAmoXK zpVdyxSqy3DRO2dO0W3cgx5vFJeYfAMfaOo0X8cq7KKYwLs2yaHGG7ADmKpj38iG TbtwaZ75KtX/GbOWZQ+0mmzZ++FYK64= -----END CERTIFICATE-----Generated at Wed Jul 2 20:51:30 2025 by rpki-client