$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa File: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (raw, json) Hash identifier: PHxz0dhEAuHCh3PuuIKqldrafwu3e1ehDbsaItPWbqs= Subject key identifier: 36:E6:A5:09:D4:10:01:6B:22:C0:C3:A5:98:92:0B:10:42:ED:B6:FA Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584AADF11BDD6001CB773BC968B0 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 400790 IP address blocks: 207.228.219.0/24 maxlen: 24 2606:f6c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1b:dd:60:01:cb:77:3b:c9:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=3abf4192-eff3-4599-b3d4-91be3cb3d527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:88:87:71:2e:41:3b:02:82:b5:d8:c1:43: 78:0b:92:d4:57:a7:05:db:03:0a:a9:d1:8c:47:84: f3:8a:d9:a9:ee:1d:ec:fa:41:dc:c2:0b:b9:6a:8d: d5:69:0e:f1:16:ff:99:bc:18:e3:4d:ed:49:3b:cd: 77:82:cd:b6:5b:38:f0:40:74:e5:9a:45:de:3c:80: 86:59:11:5f:6f:36:d9:94:0a:33:02:4a:c4:c7:e4: 51:ae:f8:86:eb:e3:64:69:40:06:b0:18:60:7a:28: c7:cb:33:2a:1f:bf:52:50:6a:27:bb:89:ed:c6:bb: 3b:e1:7b:95:82:3a:0c:0e:08:57:d4:08:44:07:64: 48:e0:10:27:ac:94:af:63:68:7e:49:ad:d0:f6:7e: f5:44:02:c6:f0:6f:87:78:12:35:dd:49:e0:ff:71: bf:62:49:2a:22:bc:ee:54:b7:5c:d3:38:ef:54:3c: 95:ac:17:d3:f3:8c:2a:a1:b9:b8:1d:4c:e4:c2:d6: a4:24:ca:43:19:ea:b4:b2:ee:9f:c0:ec:50:26:66: 5f:ab:49:83:bb:29:be:80:1f:c4:40:88:af:9d:03: 23:e2:96:38:7e:a4:1d:d1:54:86:60:3a:81:78:09: 6e:bb:21:51:55:95:96:01:e0:62:f4:30:a8:3c:39: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E6:A5:09:D4:10:01:6B:22:C0:C3:A5:98:92:0B:10:42:ED:B6:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.219.0/24 IPv6: 2606:f6c0:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:69:05:7e:8a:59:4a:46:80:18:92:a2:17:19:d2:8e:e0:c9: 09:fe:4a:61:80:d3:8d:39:52:5b:cf:5a:c6:f7:9d:ff:fc:dc: 66:8e:e9:88:76:7f:fc:4e:ac:7d:a5:09:8a:cc:36:0d:86:55: 12:5f:7e:5e:36:6a:e1:e2:6a:a9:82:05:7e:73:52:59:3d:c5: 0a:f1:fd:9d:6d:45:5a:e4:3b:cb:59:a8:c4:3e:b1:62:69:ea: 24:1d:57:da:22:4d:c1:b3:65:42:eb:41:b8:63:7e:a3:0f:ad: 79:c1:9e:eb:27:32:ca:a9:2f:b7:e9:94:61:6b:56:5e:60:0b: ba:34:e4:fb:a0:43:8e:a2:b8:8d:f4:72:e7:8d:52:21:e1:57: 7e:12:26:f4:01:d5:f4:c5:82:28:72:35:d9:ee:f1:6f:82:99: 78:ba:1f:12:d8:17:f8:30:fc:11:f4:7b:84:14:12:04:0a:7f: b6:f4:20:28:48:67:06:b0:1e:ac:e6:df:29:8f:ab:d6:a0:ee: 26:e8:f9:a8:f5:bd:3f:db:62:8b:95:0d:aa:19:89:31:ec:79: 12:3d:60:e3:e7:7d:9f:39:35:16:62:90:33:4f:66:3c:c9:db: 95:ca:77:f6:35:83:1f:be:73:12:d1:9b:78:32:38:83:49:d6: 5c:72:65:80 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqt8RvdYAHLdzvJaLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk M2FiZjQxOTItZWZmMy00NTk5LWIzZDQtOTFiZTNjYjNkNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AKIh3EuQTsCgrXYwUN4C5LUV6cF2wMKqdGM R4Tzitmp7h3s+kHcwgu5ao3VaQ7xFv+ZvBjjTe1JO813gs22WzjwQHTlmkXePICG WRFfbzbZlAozAkrEx+RRrviG6+NkaUAGsBhgeijHyzMqH79SUGonu4ntxrs74XuV gjoMDghX1AhEB2RI4BAnrJSvY2h+Sa3Q9n71RALG8G+HeBI13Ung/3G/YkkqIrzu VLdc0zjvVDyVrBfT84wqobm4HUzkwtakJMpDGeq0su6fwOxQJmZfq0mDuym+gB/E QIivnQMj4pY4fqQd0VSGYDqBeAluuyFRVZWWAeBi9DCoPDm5tQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDbmpQnUEAFrIsDDpZiSCxBC7bb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvNWZhNmUzZDktZDYxOC0z ZDk1LTlhMTEtYWY2NzYwMTY0Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TbMA8E AgACMAkDBwAmBvbAAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgmkFfopZSkaAGJKiFxnSjuDJCf5KYYDT jTlSW89axved//zcZo7piHZ//E6sfaUJisw2DYZVEl9+XjZq4eJqqYIFfnNSWT3F CvH9nW1FWuQ7y1moxD6xYmnqJB1X2iJNwbNlQutBuGN+ow+tecGe6ycyyqkvt+mU YWtWXmALujTk+6BDjqK4jfRy541SIeFXfhIm9AHV9MWCKHI12e7xb4KZeLofEtgX +DD8EfR7hBQSBAp/tvQgKEhnBrAerObfKY+r1qDuJuj5qPW9P9tii5UNqhmJMex5 Ej1g4+d9nzk1FmKQM09mPMnblcp39jWDH75zEtGbeDI4g0nWXHJlgA== -----END CERTIFICATE-----Generated at Wed Aug 6 09:40:46 2025 by rpki-client