$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa File: f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa (raw, json) Hash identifier: baD0PebmUbyFuipdkZhkmM0cXm0Q7FpRL0+S+2mA15Y= Subject key identifier: EE:60:73:70:35:97:90:48:44:08:C5:B9:3B:DE:A9:D7:44:B8:57:34 Certificate issuer: /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Certificate serial: 010D0C9F4328584A506AEF715B16702CAD6E3000 Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 395978 IP address blocks: 173.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:ef:71:5b:16:70:2c:ad:6e:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=f066e45c-fbb8-438b-aad8-faa3ddd3ed6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:08:6c:d2:b8:ba:8a:21:8e:eb:0a:bc:5c: c1:03:e9:4b:01:36:49:e2:72:88:ac:93:df:ab:ab: 93:55:5b:c9:17:25:23:60:45:e7:24:77:6a:21:89: df:68:63:3c:33:38:4d:1d:38:15:34:48:e2:96:47: a3:4b:6a:ca:71:56:3e:a9:da:8a:c7:c6:de:cb:57: 95:f8:07:1a:d4:62:a9:f2:b6:00:6b:42:57:70:35: 7a:ee:58:99:0a:d8:8b:05:07:15:5a:d3:dc:c6:69: ba:08:1d:b1:05:b5:8a:8e:f7:41:ef:ba:05:8d:42: 8e:56:4f:20:ef:e2:58:ef:f2:27:d3:ad:f4:68:d6: 1e:4a:25:be:62:14:b2:fb:d8:f6:9d:da:09:4a:5e: 5b:c6:7f:fd:d5:b4:81:3d:ca:bd:d7:1c:84:7a:f2: 71:ab:50:c7:81:44:52:16:42:8f:34:91:eb:04:2f: ef:f0:40:a4:cf:ae:68:43:9e:bc:70:da:bd:3a:ae: 48:9c:fd:1f:5a:0b:2b:f3:07:a1:a9:cb:a9:8a:d2: 69:73:77:84:0c:43:87:16:ee:6d:b6:59:ae:e5:b9: c4:50:2c:c6:f7:17:5f:a2:93:17:cd:94:17:e1:38: 72:fe:93:3a:84:e3:ed:30:66:35:ae:55:a1:61:a9: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:73:70:35:97:90:48:44:08:C5:B9:3B:DE:A9:D7:44:B8:57:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl X509v3 Authority Key Identifier: keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer sbgp-ipAddrBlock: critical IPv4: 173.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:49:dc:87:a0:1c:00:b5:bb:d6:20:79:29:2a:17:a2:8e:0f: ad:6e:1e:e0:3d:9e:15:b8:d7:26:b7:0a:e6:f7:10:bb:a6:16: 87:92:27:25:bd:0c:eb:75:34:f2:8c:dc:be:5c:dc:04:ac:c3: f8:0c:10:ee:ef:7b:38:f3:1e:19:b1:ee:33:71:b6:b7:66:b4: 38:32:d2:72:6a:7b:c2:36:2d:bd:23:d8:cd:2d:b4:d3:93:c1: 37:e2:4c:c9:4c:86:69:c8:e4:8c:0c:7f:49:31:22:e3:f7:46: 2d:77:7a:3a:a1:a6:a5:25:39:6e:99:d5:e3:af:9c:05:8d:37: 6d:8f:d2:50:27:ef:12:df:f8:d3:40:1f:f5:1a:80:a6:58:33: 39:df:d4:09:a5:26:71:74:09:4f:de:27:10:4f:85:9e:f2:6f: c5:5f:3b:8f:a0:d4:1f:9d:dd:bb:6e:01:48:28:9e:d1:75:9b: f3:1e:6b:ab:a4:b6:a1:89:94:e9:f3:87:af:5b:c8:3f:3f:cb: ab:60:66:e0:d8:e1:f5:8f:22:12:63:39:ba:ae:c2:07:85:65: d1:31:03:2a:b3:38:49:84:16:fc:10:92:c2:8e:ea:da:29:8a: 21:db:80:06:ce:75:37:b8:2b:7b:7b:4c:51:b2:d7:f8:3f:ff: 06:af:0d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQau9xWxZwLK1uMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUw MGJjMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjA2NmU0NWMtZmJiOC00MzhiLWFhZDgtZmFhM2RkZDNlZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqQIbNK4uoohjusKvFzBA+lLATZJ4nKIrJPf q6uTVVvJFyUjYEXnJHdqIYnfaGM8MzhNHTgVNEjilkejS2rKcVY+qdqKx8bey1eV +Aca1GKp8rYAa0JXcDV67liZCtiLBQcVWtPcxmm6CB2xBbWKjvdB77oFjUKOVk8g 7+JY7/In0630aNYeSiW+YhSy+9j2ndoJSl5bxn/91bSBPcq91xyEevJxq1DHgURS FkKPNJHrBC/v8ECkz65oQ568cNq9Oq5InP0fWgsr8wehqcupitJpc3eEDEOHFu5t tlmu5bnEUCzG9xdfopMXzZQX4Thy/pM6hOPtMGY1rlWhYamwPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5gc3A1l5BIRAjFuTveqddEuFc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OWIw ODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvZjMwZmI1MWQtODIwMi0z ZWU4LWJjZDQtNzA1NTRlMDgwMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODliMDg3N2YtZjdhYy00YzEzLTlh MTAtYjAyMzU4ZWUwMGJjLzg5YjA4NzdmLWY3YWMtNGMxMy05YTEwLWIwMjM1OGVl MDBiYy5jcmwwHwYDVR0jBBgwFoAU4qqXMdzDv7nFqcRXYAVtTrwbvKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIz NThlZTAwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtJ3IegHAC1u9YgeSkqF6KOD61uHuA9nhW41ya3Cub3ELumFoeSJyW9 DOt1NPKM3L5c3ASsw/gMEO7vezjzHhmx7jNxtrdmtDgy0nJqe8I2Lb0j2M0ttNOT wTfiTMlMhmnI5IwMf0kxIuP3Ri13ejqhpqUlOW6Z1eOvnAWNN22P0lAn7xLf+NNA H/UagKZYMznf1AmlJnF0CU/eJxBPhZ7yb8VfO4+g1B+d3btuAUgontF1m/Mea6uk tqGJlOnzh69byD8/y6tgZuDY4fWPIhJjObquwgeFZdExAyqzOEmEFvwQksKO6top iiHbgAbOdTe4K3t7TFGy1/g//wavDSc= -----END CERTIFICATE-----Generated at Tue Jul 1 12:31:52 2025 by rpki-client