$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa File: ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa (raw, json) Hash identifier: 6fyo7a8+3La2xFMIGByuQUvpqnNJVcKJ7kL6WoMMwlI= Subject key identifier: 85:A3:5A:D1:1D:C2:32:39:39:F8:8A:D5:35:CB:DF:91:D3:BD:03:1C Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584A51D073CBECA34D8C2F090B00 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 12119 IP address blocks: 169.197.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:73:cb:ec:a3:4d:8c:2f:09:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=98c30140-d5af-4588-b260-8a65b2779441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:af:e8:95:62:06:da:63:8b:14:96:7a:71: 25:75:19:07:74:1d:92:d6:02:09:27:19:9d:62:cc: 7a:33:43:e0:4e:85:e4:64:bc:ba:97:c0:53:24:9f: 4b:fa:18:98:b7:52:e2:f3:0c:fb:66:fa:ea:e6:aa: 5d:ff:ab:76:4c:4b:88:eb:bf:e0:89:64:88:83:54: 95:b1:8b:25:e9:6b:35:2f:b5:e0:45:22:c6:cb:28: 5d:f7:df:23:8c:ad:2c:47:5d:eb:50:58:6c:a6:8f: 34:a9:07:d8:d3:05:89:bd:d6:9d:0c:54:23:06:5b: fd:93:3a:ee:f6:e3:41:3d:6b:26:fa:2b:27:f7:70: ff:49:57:38:2d:fb:a6:cc:23:bc:b9:93:55:be:e1: 0f:4c:b0:bb:fa:6b:7f:3e:95:26:d3:6f:ab:29:f8: 80:63:d5:3e:be:19:cd:7e:79:05:f3:cc:04:8e:d3: e9:6f:fa:a5:2a:e7:bc:32:f2:b3:a5:4f:49:7a:aa: 20:c2:a8:2a:22:ac:d4:d3:44:72:6b:1f:fb:51:5a: a3:83:60:5b:37:0b:e0:2f:47:cf:15:a1:db:57:11: a6:c8:d9:53:c6:3e:d6:f2:ca:b5:5d:83:f2:38:da: 02:9e:eb:c7:76:09:5f:63:55:b2:37:38:e2:0c:e9: b7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:5A:D1:1D:C2:32:39:39:F8:8A:D5:35:CB:DF:91:D3:BD:03:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 169.197.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:27:a2:52:36:2b:10:a0:c7:c2:97:9e:c0:83:28:8e:3a:52: 12:3c:2b:9d:41:e4:7b:d8:c0:e2:63:5a:a9:f8:81:a1:db:20: 62:04:0b:89:7b:b9:b1:36:7a:35:1e:6e:00:d9:56:73:33:fb: 37:37:a0:10:d6:31:86:2e:f1:28:57:a2:d6:f5:52:e9:71:d8: fe:a8:f2:0f:69:a2:52:91:c6:b4:a9:62:88:18:65:24:24:68: ce:ea:1a:fa:7a:13:73:c6:6e:4a:f6:82:ee:26:c1:bd:d0:c0: 9e:51:e8:ed:7a:66:8e:f7:4c:41:98:5b:36:64:c6:5e:9b:d7: ec:0d:7b:d4:7f:e3:f7:3c:74:91:50:04:e5:07:85:25:b0:28: 7f:94:45:f9:bb:d5:0f:87:2c:23:ef:51:37:eb:f5:ce:be:40: 75:09:21:3b:fb:94:dd:a1:eb:22:01:44:98:53:d4:2a:5b:ed: 92:e5:fb:64:eb:81:55:f9:bf:d1:8a:08:be:b3:d5:36:5d:e2: 1c:95:8d:6d:33:98:b8:49:48:22:20:1b:f3:21:91:df:d1:ac: 1b:9a:26:9b:85:53:0f:d0:05:e4:d2:d4:17:65:44:02:c8:0b: 3e:8e:29:e8:07:70:d9:ac:f5:00:b5:54:16:ea:57:db:7e:bd: 22:03:f4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HPL7KNNjC8JCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk OThjMzAxNDAtZDVhZi00NTg4LWIyNjAtOGE2NWIyNzc5NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueqv6JViBtpjixSWenEldRkHdB2S1gIJJxmd Ysx6M0PgToXkZLy6l8BTJJ9L+hiYt1Li8wz7Zvrq5qpd/6t2TEuI67/giWSIg1SV sYsl6Ws1L7XgRSLGyyhd998jjK0sR13rUFhspo80qQfY0wWJvdadDFQjBlv9kzru 9uNBPWsm+isn93D/SVc4LfumzCO8uZNVvuEPTLC7+mt/PpUm02+rKfiAY9U+vhnN fnkF88wEjtPpb/qlKue8MvKzpU9JeqogwqgqIqzU00Ryax/7UVqjg2BbNwvgL0fP FaHbVxGmyNlTxj7W8sq1XYPyONoCnuvHdglfY1WyNzjiDOm3vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWjWtEdwjI5OfiK1TXL35HTvQMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvYWQ1YzljM2UtNThiZC0z MzQ4LWI3ZDQtYzE5ZmNiZDA5ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqcWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEnolI2KxCgx8KXnsCDKI46UhI8K51B5HvYwOJjWqn4gaHbIGIEC4l7 ubE2ejUebgDZVnMz+zc3oBDWMYYu8ShXotb1Uulx2P6o8g9polKRxrSpYogYZSQk aM7qGvp6E3PGbkr2gu4mwb3QwJ5R6O16Zo73TEGYWzZkxl6b1+wNe9R/4/c8dJFQ BOUHhSWwKH+URfm71Q+HLCPvUTfr9c6+QHUJITv7lN2h6yIBRJhT1Cpb7ZLl+2Tr gVX5v9GKCL6z1TZd4hyVjW0zmLhJSCIgG/Mhkd/RrBuaJpuFUw/QBeTS1BdlRALI Cz6OKegHcNms9QC1VBbqV9t+vSID9LY= -----END CERTIFICATE-----Generated at Mon Jun 30 01:04:54 2025 by rpki-client