$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa File: 923d10f4-214a-3d9d-bdd9-d06f363baa32.roa (raw, json) Hash identifier: SezZyj4WO2txCf4ZomXrtkAkc62EQbmkzAZR62JlFFQ= Subject key identifier: 52:0A:0C:2D:C6:E5:9D:58:B1:E1:27:05:20:7E:11:88:9E:0B:72:9A Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A41018F85B7B8D2C584E3C940 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa Signing time: Fri 20 Jun 2025 12:31:27 +0000 ROA not before: Fri 20 Jun 2025 12:31:27 +0000 ROA not after: Thu 18 Sep 2025 12:31:27 +0000 asID: 3257 IP address blocks: 173.44.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:01:8f:85:b7:b8:d2:c5:84:e3:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jun 20 12:31:27 2025 GMT Not After : Sep 18 12:31:27 2025 GMT Subject: CN=f48d9c87-17d4-4e70-b3cd-79b9c01c3991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:e6:b9:fb:87:b5:df:01:2d:96:8f:d7:7c: 60:95:7b:6e:96:e0:fc:ba:83:87:9d:69:fc:9a:ca: 4d:59:7d:5a:de:b6:7d:6b:78:94:1d:ba:8f:c2:2e: 0c:b6:71:d7:51:47:3f:0c:7a:2c:2f:dd:99:7f:0b: de:7f:89:b4:31:f0:d3:c0:0c:34:61:79:7a:ad:79: 35:ca:fc:57:1c:9d:22:fa:e7:36:23:c9:87:63:50: d2:06:a2:0b:67:21:cc:37:f8:ec:3c:81:60:16:96: 96:b4:21:c0:9d:3f:9d:d1:e2:89:c5:ba:8f:65:9d: 6c:53:aa:c4:1c:46:e0:84:2b:d7:ce:4f:b5:57:04: f3:f1:31:65:83:6b:33:5a:4d:6b:da:8d:1c:88:05: 13:30:9b:27:cc:14:8c:fc:5e:76:94:bf:4a:df:37: d5:64:df:42:66:ca:c7:2e:e8:09:56:f8:ae:7c:95: af:42:14:63:b3:06:5f:0b:6a:b3:0d:29:3a:48:45: f7:f2:a8:19:93:20:ba:ce:1d:69:8d:20:23:42:f7: 48:42:4e:da:7c:24:32:7b:e5:ad:a0:82:2d:82:f1: 60:3b:92:19:fb:ed:f2:cb:db:96:5a:55:1a:10:ca: d3:f9:c5:92:66:82:20:4b:c1:4e:08:7b:cb:f1:74: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0A:0C:2D:C6:E5:9D:58:B1:E1:27:05:20:7E:11:88:9E:0B:72:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.44.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:77:a6:e8:5d:30:dc:1f:95:6a:d5:b8:fb:55:dd:b8:5f:0a: a9:39:02:54:e3:fd:cf:2a:4f:16:e9:a3:9d:34:b1:de:9e:57: 55:6e:3a:5f:ab:4c:f3:26:f4:ce:36:5c:ae:29:80:bd:20:8d: 61:c8:4e:92:d1:3c:7b:85:e3:92:e7:8f:e8:64:54:33:f6:ab: 72:a5:a7:0e:e6:d2:a8:da:0c:82:65:bc:b5:99:53:9c:d8:29: 1c:1b:6a:2f:70:3f:03:e5:d3:c2:16:a2:fc:fb:be:de:57:48: 6e:e5:9f:73:fd:b1:41:51:94:89:f1:e2:4c:8c:f2:16:48:04: 81:12:b6:f2:20:50:34:54:57:b6:05:19:b5:ed:26:d8:33:3b: 1c:d9:ff:aa:d9:0c:45:f0:e2:f3:50:b6:0e:e3:a8:8a:6b:12: 56:55:ca:5e:28:31:64:e8:d4:fa:1e:6c:ac:59:52:49:19:6a: 79:d7:c5:ee:4c:a8:67:57:af:0b:80:7c:6d:94:05:ba:2b:0b: b9:2a:5a:fa:14:bf:d5:8c:34:05:82:ce:2d:79:04:d3:76:b4: c8:42:cd:f8:57:a4:94:1c:52:ec:d5:63:81:c0:d2:df:be:97: cb:34:79:46:e4:2c:94:09:f9:4d:1e:69:37:5e:39:0e:38:29: 4c:4f:69:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBAY+Ft7jSxYTjyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDYyMDEyMzEyN1oXDTI1MDkxODEyMzEyN1owLzEtMCsGA1UEAxMk ZjQ4ZDljODctMTdkNC00ZTcwLWIzY2QtNzliOWMwMWMzOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC3mufuHtd8BLZaP13xglXtuluD8uoOHnWn8 mspNWX1a3rZ9a3iUHbqPwi4MtnHXUUc/DHosL92Zfwvef4m0MfDTwAw0YXl6rXk1 yvxXHJ0i+uc2I8mHY1DSBqILZyHMN/jsPIFgFpaWtCHAnT+d0eKJxbqPZZ1sU6rE HEbghCvXzk+1VwTz8TFlg2szWk1r2o0ciAUTMJsnzBSM/F52lL9K3zfVZN9CZsrH LugJVviufJWvQhRjswZfC2qzDSk6SEX38qgZkyC6zh1pjSAjQvdIQk7afCQye+Wt oIItgvFgO5IZ++3yy9uWWlUaEMrT+cWSZoIgS8FOCHvL8XR9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIKDC3G5Z1YseEnBSB+EYieC3KaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTIzZDEwZjQtMjE0YS0z ZDlkLWJkZDktZDA2ZjM2M2JhYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl3puhdMNwflWrVuPtV3bhfCqk5AlTj/c8qTxbpo500sd6eV1VuOl+r TPMm9M42XK4pgL0gjWHITpLRPHuF45Lnj+hkVDP2q3Klpw7m0qjaDIJlvLWZU5zY KRwbai9wPwPl08IWovz7vt5XSG7ln3P9sUFRlInx4kyM8hZIBIEStvIgUDRUV7YF GbXtJtgzOxzZ/6rZDEXw4vNQtg7jqIprElZVyl4oMWTo1PoebKxZUkkZannXxe5M qGdXrwuAfG2UBborC7kqWvoUv9WMNAWCzi15BNN2tMhCzfhXpJQcUuzVY4HA0t++ l8s0eUbkLJQJ+U0eaTdeOQ44KUxPaXY= -----END CERTIFICATE-----Generated at Tue Jul 1 15:25:06 2025 by rpki-client