$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa File: 4e87abc2-70e9-3d43-b866-1496a6621e10.roa (raw, json) Hash identifier: 8mPFXxDmBqWS1ya+H1PHflfqGV621BZMqqr94Apgn3Q= Subject key identifier: 7C:4B:F9:FA:AE:EB:CD:1A:19:C4:2D:B5:92:1D:59:D1:E5:D6:D5:0E Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285849E91FA4C38D52D9F5BAC84E80 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 62651 IP address blocks: 173.245.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a4:c3:8d:52:d9:f5:ba:c8:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=9731e018-13a7-47cd-82a8-eeb8e33d8353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:c2:66:87:1a:4d:41:3f:dc:74:74:2a:12: d8:04:3b:bf:03:f6:99:e1:10:90:8b:1e:cf:a7:85: 1b:d1:90:a2:b0:03:c8:e4:c4:8b:e2:ad:23:43:64: 29:85:f8:03:78:10:46:91:cb:01:3d:ff:4d:bd:8f: 83:72:22:c3:54:01:6b:04:79:09:ad:27:99:78:af: 5e:f5:31:88:03:1b:e9:2f:53:b0:7e:36:70:d9:e9: 8c:47:4d:80:cd:a8:f7:ad:3a:5b:f0:bd:92:cc:75: 0d:64:5b:14:5d:82:46:ad:a5:2c:48:bb:18:c2:79: b4:44:1d:51:0f:da:58:74:ed:2b:6f:cd:2a:07:44: 08:6f:95:b4:2a:6a:c7:f6:6a:9f:99:40:88:ea:be: 15:21:7f:b6:d0:87:ac:74:50:b6:64:c0:f7:1d:1e: 35:2f:95:6b:49:4f:b3:7d:55:23:16:b6:44:bc:56: a4:a9:e1:2a:12:ca:6a:9e:03:93:58:cd:5a:22:fd: 19:ea:91:42:d5:a9:53:8c:a1:46:72:70:2a:af:c6: 84:ca:80:ab:0f:20:2d:7b:97:e8:33:cf:93:dc:b4: 40:1a:5e:8b:36:0b:fb:0a:3b:94:62:d9:cc:ce:92: 16:99:78:1b:e9:a5:97:39:ac:44:58:13:3b:ed:88: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4B:F9:FA:AE:EB:CD:1A:19:C4:2D:B5:92:1D:59:D1:E5:D6:D5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ae:a3:89:c9:38:e3:07:42:c9:f2:a1:61:f9:c0:95:8a:04: 15:e6:56:23:81:b7:23:bb:7d:16:5b:ed:a8:09:2e:f9:fa:f2: 81:52:66:ee:51:3d:c3:82:02:cd:89:5b:da:71:bf:6d:e9:41: 71:32:91:55:60:6a:2a:3a:b8:85:41:f0:ec:33:9e:e4:78:9b: 76:87:15:ff:95:17:6e:d1:e8:9d:3b:63:20:77:cd:df:1b:a9: 2a:77:f7:b2:7a:5f:01:d7:83:26:78:29:9e:f9:06:33:15:07: 86:ea:aa:b5:96:46:26:06:40:9c:0d:7c:cd:b8:17:1f:23:b9: dc:f3:d2:0d:69:25:5f:9d:b6:46:d2:12:0b:29:ad:3c:b3:56: 25:54:e4:0d:f3:1c:ab:5b:0f:9d:da:7e:6f:7e:36:ca:35:19: c0:b0:3c:e4:c6:38:f1:e7:b6:38:52:50:04:33:de:fe:14:55: e5:ff:d3:df:0f:a1:9f:c0:d7:6b:81:e8:2d:1e:13:08:f1:2c: ef:68:b5:48:38:16:0c:43:0e:d7:43:ac:8e:3a:9f:61:e2:65: aa:84:ab:5c:d8:85:85:92:bc:37:cd:48:3c:7f:d3:67:11:e0: e9:3f:b3:bd:c5:88:02:a7:a3:40:63:4c:c7:ca:da:2b:1f:e0: 73:6a:aa:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6TDjVLZ9brIToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk OTczMWUwMTgtMTNhNy00N2NkLTgyYTgtZWViOGUzM2Q4MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCrCZocaTUE/3HR0KhLYBDu/A/aZ4RCQix7P p4Ub0ZCisAPI5MSL4q0jQ2QphfgDeBBGkcsBPf9NvY+DciLDVAFrBHkJrSeZeK9e 9TGIAxvpL1OwfjZw2emMR02Azaj3rTpb8L2SzHUNZFsUXYJGraUsSLsYwnm0RB1R D9pYdO0rb80qB0QIb5W0KmrH9mqfmUCI6r4VIX+20IesdFC2ZMD3HR41L5VrSU+z fVUjFrZEvFakqeEqEspqngOTWM1aIv0Z6pFC1alTjKFGcnAqr8aEyoCrDyAte5fo M8+T3LRAGl6LNgv7CjuUYtnMzpIWmXgb6aWXOaxEWBM77YhM3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxL+fqu680aGcQttZIdWdHl1tUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvNGU4N2FiYzItNzBlOS0z ZDQzLWI4NjYtMTQ5NmE2NjIxZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiuo4nJOOMHQsnyoWH5wJWKBBXmViOBtyO7fRZb7agJLvn68oFSZu5R PcOCAs2JW9pxv23pQXEykVVgaio6uIVB8OwznuR4m3aHFf+VF27R6J07YyB3zd8b qSp397J6XwHXgyZ4KZ75BjMVB4bqqrWWRiYGQJwNfM24Fx8judzz0g1pJV+dtkbS EgsprTyzViVU5A3zHKtbD53afm9+Nso1GcCwPOTGOPHntjhSUAQz3v4UVeX/098P oZ/A12uB6C0eEwjxLO9otUg4FgxDDtdDrI46n2HiZaqEq1zYhYWSvDfNSDx/02cR 4Ok/s73FiAKno0BjTMfK2isf4HNqqs4= -----END CERTIFICATE-----Generated at Mon Jun 30 16:11:36 2025 by rpki-client