$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa File: 2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa (raw, json) Hash identifier: K3wrtJb26Z6DSfsy28umpONfJ5cE2t3+o2qcYJ2FxZM= Subject key identifier: 29:2B:25:DD:1F:98:E8:B7:8D:B1:35:18:1F:DE:FE:2E:31:79:B7:14 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB00C870245947CDB384700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa Signing time: Sun 03 Aug 2025 02:35:50 +0000 ROA not before: Sun 03 Aug 2025 02:35:50 +0000 ROA not after: Sat 01 Nov 2025 02:35:50 +0000 asID: 53813 IP address blocks: 209.55.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:0c:87:02:45:94:7c:db:38:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:50 2025 GMT Not After : Nov 1 02:35:50 2025 GMT Subject: CN=bbac5476-5a9b-4079-a416-d82feaa12fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:4d:95:db:a3:54:e6:c2:18:d5:8c:9e:0e: ad:7c:df:ce:e3:6d:34:8a:6e:53:76:69:ae:21:6a: fa:87:65:ff:65:a2:af:01:58:0f:8b:9b:bb:14:21: 0b:df:a7:10:4f:4c:21:da:8b:47:4c:43:0c:2e:3f: bf:b4:7e:65:5f:30:86:c0:e2:40:31:c3:65:36:f8: ab:36:8e:22:45:b8:ed:72:39:a1:a9:94:ce:cd:d1: f6:bf:95:5c:4a:31:f1:ce:7f:40:77:d9:4e:a2:1d: 06:46:17:b6:a8:b5:51:33:e9:b6:43:1e:46:3a:ec: 67:7a:50:88:7d:e5:09:76:78:47:40:71:a3:74:a3: 21:e8:0e:ac:07:87:0b:c8:48:78:74:f9:1e:35:d0: 9d:98:ad:ac:5c:5f:13:08:3c:e0:df:cd:fa:cf:fe: b5:fe:a6:58:84:7d:4f:66:65:3b:37:ac:45:81:49: c2:bb:64:ae:3c:27:17:0a:83:e5:6d:93:9e:13:34: 0d:39:57:bb:2f:0d:36:08:e2:56:7c:7d:f5:9b:f5: 6d:83:b4:d9:07:fe:83:a6:57:6e:4d:5a:25:bb:26: 9e:10:e8:cc:39:a3:8b:59:e0:2f:ce:4b:7a:e7:4c: 0e:ce:c9:4f:0c:23:7a:42:fa:20:e9:2c:d9:34:8f: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:25:DD:1F:98:E8:B7:8D:B1:35:18:1F:DE:FE:2E:31:79:B7:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:95:47:25:38:cf:b6:58:f0:92:85:7d:87:f1:09:46:f2:ac: c4:0a:b4:1a:6a:a5:c4:b2:e9:0a:35:85:ba:b7:42:aa:8b:eb: a3:d5:d0:26:92:94:e7:65:81:9c:19:f4:fe:a6:70:20:8e:04: 6a:3e:0d:51:7c:44:ea:9c:55:da:86:5c:8f:07:bc:bf:f0:da: e1:6f:9e:8c:ce:63:34:bc:ac:c8:6a:ef:0b:9c:e6:93:4c:63: 92:d0:e2:9a:9c:f6:a2:68:a6:84:97:30:fa:04:d6:ee:67:68: d8:da:29:00:ee:28:11:61:27:cc:4c:ce:ef:a5:62:85:d5:b3: d6:29:bb:52:92:5e:ff:d9:c5:52:9f:f0:81:9d:62:84:66:7d: 93:80:1b:37:f2:87:b1:74:47:1e:21:32:9f:da:8d:70:b3:aa: 73:ea:da:86:9b:54:90:5a:ee:c1:4c:f1:cb:f1:45:ef:32:a7: 29:50:7f:c7:fa:ab:63:16:60:70:8f:81:6d:56:d9:e6:46:db: 3e:9f:0c:87:d3:3b:06:2b:9c:53:c5:a8:aa:a9:3d:1f:30:3d: 46:0c:89:e5:1a:33:48:49:90:b8:a9:06:7f:d3:80:87:d3:be: dd:6a:6e:32:e4:88:87:fe:37:86:af:1c:e5:93:b1:88:3f:28: 88:4d:75:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAyHAkWUfNs4RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU1MFoXDTI1MTEwMTAyMzU1MFowLzEtMCsGA1UEAxMk YmJhYzU0NzYtNWE5Yi00MDc5LWE0MTYtZDgyZmVhYTEyZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUpNldujVObCGNWMng6tfN/O4200im5Tdmmu IWr6h2X/ZaKvAVgPi5u7FCEL36cQT0wh2otHTEMMLj+/tH5lXzCGwOJAMcNlNvir No4iRbjtcjmhqZTOzdH2v5VcSjHxzn9Ad9lOoh0GRhe2qLVRM+m2Qx5GOuxnelCI feUJdnhHQHGjdKMh6A6sB4cLyEh4dPkeNdCdmK2sXF8TCDzg3836z/61/qZYhH1P ZmU7N6xFgUnCu2SuPCcXCoPlbZOeEzQNOVe7Lw02COJWfH31m/Vtg7TZB/6Dpldu TVoluyaeEOjMOaOLWeAvzkt650wOzslPDCN6Qvog6SzZNI/BIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkrJd0fmOi3jbE1GB/e/i4xebcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmNiNmU2MjktOWZkMi0z MWE3LTlmM2ItNGY2MTJjM2NlNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiVRyU4z7ZY8JKFfYfxCUbyrMQKtBpqpcSy6Qo1hbq3QqqL66PV0CaS lOdlgZwZ9P6mcCCOBGo+DVF8ROqcVdqGXI8HvL/w2uFvnozOYzS8rMhq7wuc5pNM Y5LQ4pqc9qJopoSXMPoE1u5naNjaKQDuKBFhJ8xMzu+lYoXVs9Ypu1KSXv/ZxVKf 8IGdYoRmfZOAGzfyh7F0Rx4hMp/ajXCzqnPq2oabVJBa7sFM8cvxRe8ypylQf8f6 q2MWYHCPgW1W2eZG2z6fDIfTOwYrnFPFqKqpPR8wPUYMieUaM0hJkLipBn/TgIfT vt1qbjLkiIf+N4avHOWTsYg/KIhNdRA= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:06 2025 by rpki-client