$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa File: 850c851f-a2f0-39ea-8b04-db5609732a44.roa (raw, json) Hash identifier: Q4TvG/r2SQXTkIoMU04y0OOPHlI27G+1oeXAumFQYlE= Subject key identifier: BF:7E:37:6C:19:B8:90:24:3E:DA:FE:A0:48:EF:D2:BA:78:46:2C:01 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584AC01649A3E5EAC342F9D5AD00 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 46979 IP address blocks: 173.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:49:a3:e5:ea:c3:42:f9:d5:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=bd3e6181-aa73-4044-9d2a-c9e572f52f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:35:cb:3c:7e:1f:a2:fa:a5:2b:c1:03:43: 31:96:fe:25:e6:2b:2e:a5:d6:d4:a0:62:a1:60:0c: 6f:c7:53:b6:51:fd:a8:7d:4f:9b:f2:fc:be:55:49: cc:d0:c6:e5:93:e4:0c:2b:1e:6b:76:ea:93:28:d8: 09:ad:e7:ec:1e:c4:31:35:c0:fc:e6:34:18:7e:c8: ee:f1:f0:04:93:2f:42:23:fc:2d:76:84:a9:d6:e8: a1:8a:f9:a9:33:ef:e3:93:b9:ec:82:81:d2:5d:e9: 9a:b2:33:1f:8d:2c:69:fc:c9:15:50:7e:52:ce:58: 5b:dc:28:3a:ed:d3:9f:a1:8d:49:79:80:4a:5b:4e: 59:e9:1e:da:9e:c5:26:3d:eb:af:ff:7a:3f:ca:53: 27:a6:be:08:1e:d7:22:78:1c:c3:9c:24:96:28:af: ef:a2:d8:04:50:17:da:df:19:ac:53:1f:3a:39:82: 78:8b:5a:a0:59:75:21:23:fa:18:a9:b0:d9:7b:00: ef:94:46:41:65:68:e2:27:27:b4:16:ac:62:2d:4a: 47:08:15:28:04:05:13:92:5f:61:79:cf:9a:61:50: 45:2e:16:01:47:f6:8a:d5:b6:8a:17:c2:fc:69:7e: 63:5b:68:2e:62:a2:16:20:6c:fb:f3:88:2e:df:ce: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7E:37:6C:19:B8:90:24:3E:DA:FE:A0:48:EF:D2:BA:78:46:2C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:72:69:d5:34:0d:76:89:71:ea:e9:22:3e:a0:51:43:c8:c7: d7:01:92:d4:9c:13:8a:65:75:04:d7:53:47:d5:1f:f6:c3:b2: 35:b2:11:c7:e2:fa:6d:f6:58:bd:ee:40:90:bb:fb:4a:30:e3: 92:b0:22:b3:23:fc:33:38:16:c2:c6:cb:f6:83:89:80:52:a7: 03:b4:8b:d3:ec:40:f8:2d:17:98:f2:94:69:e1:e9:9b:63:ac: 75:ae:c4:c2:18:50:5b:06:20:db:46:5d:a2:d3:f4:e2:83:51: 1c:2c:b6:71:a3:24:ae:e4:f9:94:bc:fe:a9:ed:97:2f:c9:3c: 3b:a5:09:08:ed:16:1b:da:c4:5e:b3:4b:d5:bf:40:8a:2d:7d: 7c:d7:fd:5a:54:08:98:88:b9:ae:58:af:7d:27:64:9e:0f:8d: 07:21:c7:38:2c:7c:6f:bb:06:1e:37:a5:90:9f:d6:ef:e0:fe: c8:75:47:6c:65:08:4a:d5:0f:f3:96:bc:fd:63:e7:6b:ed:7a: b3:83:fb:59:2e:63:a1:b6:5e:a2:b2:c1:90:4e:f7:d6:d6:37: 19:fc:4f:ea:d7:39:7a:33:60:d2:ff:54:0f:6f:7b:5d:3a:b5: 20:89:0c:6a:e4:82:28:f8:68:5e:b4:b1:e7:06:3f:5d:7c:8f: 40:67:81:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkmj5erDQvnVrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YmQzZTYxODEtYWE3My00MDQ0LTlkMmEtYzllNTcyZjUyZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFk1yzx+H6L6pSvBA0Mxlv4l5isupdbUoGKh YAxvx1O2Uf2ofU+b8vy+VUnM0Mblk+QMKx5rduqTKNgJrefsHsQxNcD85jQYfsju 8fAEky9CI/wtdoSp1uihivmpM+/jk7nsgoHSXemasjMfjSxp/MkVUH5Szlhb3Cg6 7dOfoY1JeYBKW05Z6R7ansUmPeuv/3o/ylMnpr4IHtcieBzDnCSWKK/votgEUBfa 3xmsUx86OYJ4i1qgWXUhI/oYqbDZewDvlEZBZWjiJye0FqxiLUpHCBUoBAUTkl9h ec+aYVBFLhYBR/aK1baKF8L8aX5jW2guYqIWIGz784gu386gmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9+N2wZuJAkPtr+oEjv0rp4RiwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvODUwYzg1MWYtYTJmMC0z OWVhLThiMDQtZGI1NjA5NzMyYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5yadU0DXaJcerpIj6gUUPIx9cBktScE4pldQTXU0fVH/bDsjWyEcfi +m32WL3uQJC7+0ow45KwIrMj/DM4FsLGy/aDiYBSpwO0i9PsQPgtF5jylGnh6Ztj rHWuxMIYUFsGINtGXaLT9OKDURwstnGjJK7k+ZS8/qntly/JPDulCQjtFhvaxF6z S9W/QIotfXzX/VpUCJiIua5Yr30nZJ4PjQchxzgsfG+7Bh43pZCf1u/g/sh1R2xl CErVD/OWvP1j52vterOD+1kuY6G2XqKywZBO99bWNxn8T+rXOXozYNL/VA9ve106 tSCJDGrkgij4aF60secGP118j0BngfM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:53:56 2025 by rpki-client