$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa File: 341baf55-f72d-3c76-a1a8-98e45e858f4d.roa (raw, json) Hash identifier: IvnXiRRlMs+I4Cmcr5MZGgc72dweEjiorHPmO1jOuQk= Subject key identifier: DE:D2:F0:3F:EC:5D:33:D6:4A:2C:B7:7F:57:7B:C8:25:B7:8A:37:28 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584A9FFB9D00506849784031A280 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 26211 IP address blocks: 67.231.144.0/20 maxlen: 24 148.163.128.0/19 maxlen: 24 208.84.64.0/22 maxlen: 24 208.86.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:9d:00:50:68:49:78:40:31:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=ed7c2cc3-d761-4bd8-9165-7e8854f60bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:bd:26:f0:b1:7f:23:c1:26:4a:d4:ff:75: 3e:dc:2e:a3:8b:01:ca:d0:7f:a8:40:4b:58:82:3f: 7c:92:12:34:a6:5e:21:10:78:eb:e4:af:a0:24:a0: c5:2f:de:42:28:7f:2e:66:a2:9a:63:65:59:ae:a2: ce:df:21:be:9d:44:3c:15:f1:39:39:46:cf:29:dd: 0f:c7:5b:a0:ff:a5:49:f9:e7:53:03:02:a2:13:eb: ee:00:19:7a:f2:ab:46:b0:fb:3f:cf:da:83:f5:a8: 12:96:31:f8:1d:10:49:55:04:f0:84:84:3c:1e:0d: 5a:b8:12:a7:75:f2:a5:b7:c9:bf:d8:ee:eb:15:7f: 5b:8f:72:0a:99:6c:0e:50:26:4e:63:d9:36:15:3f: 48:81:90:b2:c2:65:ff:2d:b1:da:ef:6c:af:55:63: 64:4f:92:0a:68:af:03:98:15:15:9f:24:be:32:1f: 87:61:54:83:11:bb:06:a4:01:b7:24:0d:ef:ab:d1: 9c:08:87:b0:55:8f:69:75:bb:39:0e:ab:2b:6a:52: bd:a4:9d:a0:3a:d9:c3:fc:95:1a:aa:fa:5f:26:fe: 79:46:62:94:3f:65:9f:de:8e:f2:3d:81:1e:e4:ad: 80:73:62:ba:17:51:ac:20:3f:0d:a3:96:d7:eb:ce: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:F0:3F:EC:5D:33:D6:4A:2C:B7:7F:57:7B:C8:25:B7:8A:37:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 67.231.144.0/20 148.163.128.0/19 208.84.64.0/22 208.86.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:5c:9d:a8:31:b1:fb:04:12:48:7a:98:22:e9:17:f8:29:1a: 96:eb:3c:38:ba:93:f2:ad:a9:74:18:0c:b8:31:28:d3:00:23: 56:5a:7e:bb:50:8b:7b:e6:da:99:9d:76:05:94:b3:c6:e6:2f: ee:6d:4b:a5:32:f7:34:92:47:52:50:8a:a7:11:6b:aa:a5:f0: 23:07:a5:9c:77:b2:41:25:49:a3:43:3f:40:1c:34:af:7e:8b: 8c:06:a4:cf:37:b0:3c:79:5c:53:8e:31:7c:da:79:51:e5:c0: fc:42:58:44:54:92:38:69:f7:65:e1:b4:a9:0f:20:56:19:63: c2:2b:39:81:28:f2:59:33:a5:d7:67:8d:35:63:9a:4e:11:4b: 3e:47:d4:4f:4d:64:4b:89:b6:e5:55:a2:5b:c4:3e:20:b3:65: 63:49:67:7d:e7:11:6c:85:5b:2a:8e:53:3b:dd:4d:94:ef:89: 25:e0:51:20:25:15:68:bf:1f:89:2d:a9:5d:ad:22:0d:ae:7b: 34:eb:22:45:66:83:e8:e7:d0:59:e5:24:7b:75:f6:32:75:83: 1e:d5:28:60:0b:fa:b7:a9:46:28:bf:a8:16:28:c3:37:7a:23: 72:ca:5f:b0:e0:f7:68:66:bf:1b:b9:9d:d9:51:59:03:27:ce: 0a:4c:f0:4f -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEqf+50AUGhJeEAxooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZWQ3YzJjYzMtZDc2MS00YmQ4LTkxNjUtN2U4ODU0ZjYwYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+S9JvCxfyPBJkrU/3U+3C6jiwHK0H+oQEtY gj98khI0pl4hEHjr5K+gJKDFL95CKH8uZqKaY2VZrqLO3yG+nUQ8FfE5OUbPKd0P x1ug/6VJ+edTAwKiE+vuABl68qtGsPs/z9qD9agSljH4HRBJVQTwhIQ8Hg1auBKn dfKlt8m/2O7rFX9bj3IKmWwOUCZOY9k2FT9IgZCywmX/LbHa72yvVWNkT5IKaK8D mBUVnyS+Mh+HYVSDEbsGpAG3JA3vq9GcCIewVY9pdbs5DqsralK9pJ2gOtnD/JUa qvpfJv55RmKUP2Wf3o7yPYEe5K2Ac2K6F1GsID8No5bX68728QIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFN7S8D/sXTPWSiy3f1d7yCW3ijcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvMzQxYmFmNTUtZjcyZC0z Yzc2LWExYTgtOThlNDVlODU4ZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEQ+eQAwQF lKOAAwQC0FRAAwQC0FbIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALVcnagxsfsEEkh6mCLpF/gpGpbrPDi6 k/KtqXQYDLgxKNMAI1ZafrtQi3vm2pmddgWUs8bmL+5tS6Uy9zSSR1JQiqcRa6ql 8CMHpZx3skElSaNDP0AcNK9+i4wGpM83sDx5XFOOMXzaeVHlwPxCWERUkjhp92Xh tKkPIFYZY8IrOYEo8lkzpddnjTVjmk4RSz5H1E9NZEuJtuVVolvEPiCzZWNJZ33n EWyFWyqOUzvdTZTviSXgUSAlFWi/H4ktqV2tIg2uezTrIkVmg+jn0FnlJHt19jJ1 gx7VKGAL+repRii/qBYowzd6I3LKX7Dg92hmvxu5ndlRWQMnzgpM8E8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:16 2025 by rpki-client