$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json) Hash identifier: g4PEv35dqHCZW4csO2xzbZ4zXCd0QJWyestJQxrJBFQ= Subject key identifier: 94:24:53:E1:FB:D6:4B:59:E8:89:70:91:A2:1B:DB:23:14:F5:9B:15 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F43285849DF5A775D25A04BF97E7A5380 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 46979 IP address blocks: 173.225.0.0/21 maxlen: 21 173.225.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:77:5d:25:a0:4b:f9:7e:7a:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=1c0d6699-2a05-446e-b0e0-4a9211b20cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ce:de:21:ea:cc:90:af:99:e6:d1:90:98:a1: 7a:0a:aa:d9:46:26:56:de:52:86:0c:89:8d:25:4a: df:a6:c8:54:87:73:2c:cc:fc:e0:2e:e4:e9:e6:e0: 1f:71:be:46:17:10:e0:b8:b8:27:33:91:e8:7f:d1: 73:57:1c:85:87:09:25:38:1b:7b:34:ed:bb:72:67: f3:b9:39:54:8c:d2:4f:6c:92:d1:18:ff:ee:d7:f0: cf:5d:6f:55:57:2f:44:fc:26:d4:6b:76:39:07:a5: 71:56:74:30:a2:ae:a7:f0:dd:bf:0f:dd:21:0f:40: ab:ed:bd:cb:10:62:9f:59:e9:47:bb:c3:e2:3e:03: 58:16:94:cf:3f:99:f4:cd:9d:20:0c:63:20:66:a2: 88:a4:93:35:15:59:35:fb:e9:12:47:1c:67:19:a9: c5:cd:f7:a4:77:8b:bd:84:53:f2:5b:61:8d:ab:df: 40:ea:8f:f1:b4:bb:1d:02:19:40:8f:5a:76:5f:7f: 3e:d3:ac:1c:ec:5a:e8:a6:56:c8:88:b0:06:af:aa: aa:92:9d:0c:7c:1c:42:e9:bf:cd:ce:f6:f1:9b:34: 2d:31:b2:c8:08:e9:21:2d:89:02:77:96:fa:2b:f3: 19:3e:a5:df:49:d8:5d:d7:39:c7:51:4a:63:c7:3b: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:53:E1:FB:D6:4B:59:E8:89:70:91:A2:1B:DB:23:14:F5:9B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:10:76:0f:14:01:cc:e0:55:f8:79:df:f8:73:fd:63:1d:b3: b2:50:c6:9b:2a:95:61:97:cd:78:0c:92:4a:4d:83:fd:90:52: df:9a:54:e1:d8:e6:4b:35:ea:d1:12:ba:95:74:ed:7c:d9:ed: ca:8c:e5:07:53:b8:3c:37:59:45:3e:b9:a3:22:e4:8a:58:82: 50:7e:c0:8b:f2:f8:16:9e:eb:e9:5c:c2:b0:94:e8:83:35:49: 40:93:dc:77:aa:c7:1c:44:ab:8f:fd:8a:db:6a:89:c8:55:9a: 83:58:c3:19:a5:85:c2:ac:af:5c:29:af:33:69:04:30:9a:6b: ab:b1:66:46:32:fd:00:84:59:68:bd:80:81:89:1e:11:77:7d: 82:ad:52:b8:57:69:e0:19:0e:9d:9d:e9:8a:36:e7:be:e5:a6: b6:00:38:ac:2a:32:fe:79:0b:a4:80:d2:a9:24:bd:6e:f7:39: 6e:a0:4b:a2:d7:5d:ea:6b:b2:3a:5c:81:54:3c:ff:cc:06:29: f5:37:a0:8c:a9:dd:71:45:ff:46:1c:86:16:47:70:36:6d:fb: 10:92:58:09:d0:88:94:0c:a8:77:8c:7c:4f:a2:a3:6d:af:ee: d7:47:1f:2b:bc:4f:2a:17:f5:30:dc:43:c5:14:04:93:5a:1b: 0c:6c:ad:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnddJaBL+X56U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MWMwZDY2OTktMmEwNS00NDZlLWIwZTAtNGE5MjExYjIwY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M7eIerMkK+Z5tGQmKF6CqrZRiZW3lKGDImN JUrfpshUh3MszPzgLuTp5uAfcb5GFxDguLgnM5Hof9FzVxyFhwklOBt7NO27cmfz uTlUjNJPbJLRGP/u1/DPXW9VVy9E/CbUa3Y5B6VxVnQwoq6n8N2/D90hD0Cr7b3L EGKfWelHu8PiPgNYFpTPP5n0zZ0gDGMgZqKIpJM1FVk1++kSRxxnGanFzfekd4u9 hFPyW2GNq99A6o/xtLsdAhlAj1p2X38+06wc7FroplbIiLAGr6qqkp0MfBxC6b/N zvbxmzQtMbLICOkhLYkCd5b6K/MZPqXfSdhd1znHUUpjxzvRrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQkU+H71ktZ6IlwkaIb2yMU9ZsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMQdg8UAczgVfh53/hz/WMds7JQxpsqlWGXzXgMkkpNg/2QUt+aVOHY 5ks16tESupV07XzZ7cqM5QdTuDw3WUU+uaMi5IpYglB+wIvy+Bae6+lcwrCU6IM1 SUCT3HeqxxxEq4/9ittqichVmoNYwxmlhcKsr1wprzNpBDCaa6uxZkYy/QCEWWi9 gIGJHhF3fYKtUrhXaeAZDp2d6Yo2577lprYAOKwqMv55C6SA0qkkvW73OW6gS6LX XeprsjpcgVQ8/8wGKfU3oIyp3XFF/0YchhZHcDZt+xCSWAnQiJQMqHeMfE+io22v 7tdHHyu8TyoX9TDcQ8UUBJNaGwxsrSU= -----END CERTIFICATE-----Generated at Mon Jun 30 02:29:31 2025 by rpki-client