$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa File: ba968438-1dc4-3db1-a0a1-e4360c977088.roa (raw, json) Hash identifier: 1fAoslEFqr/vs9n0EymUm22MQCtSeJrlESGoXOpWHX4= Subject key identifier: 9B:7A:9F:12:3A:EA:AE:76:3E:D6:02:C7:01:13:2D:90:EB:07:A0:9C Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584A9FFBA5C38A98928E6C4B9000 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 52129 IP address blocks: 208.84.64.0/24 maxlen: 24 208.86.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a5:c3:8a:98:92:8e:6c:4b:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=ca1aae04-95b3-4c9b-80ba-b1f51bde40f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:14:40:33:ce:a4:f5:c2:94:67:95:1e:ea: b6:06:aa:7e:c3:7e:c1:66:28:96:94:dd:71:ff:61: d9:3e:a9:d2:c8:55:70:9d:da:e4:0d:76:d8:f1:d2: 67:73:95:7e:09:c5:32:85:75:4d:76:1e:7b:c3:4f: 49:af:14:08:0a:36:08:8c:0c:49:70:95:9c:dd:22: 68:42:f8:42:02:3a:71:67:66:b8:a0:05:d8:a5:9e: c8:b9:31:83:b9:6e:c4:46:c5:37:11:71:50:f2:2f: 01:26:16:f5:9d:13:d0:5b:26:4d:f2:5f:3b:1e:6f: 9e:65:e4:17:54:68:5a:c0:e9:ee:80:86:45:b9:55: ba:e9:b4:f0:a6:71:59:e4:27:dd:4b:4f:9b:9f:84: 87:5a:3d:f7:14:ac:20:72:8a:3e:22:ae:b1:4a:9e: c1:de:34:aa:c6:4a:03:68:dc:e7:fa:0d:57:01:15: e1:7c:29:10:fc:27:6f:df:04:a9:11:d1:bf:75:3e: 77:4e:e8:1c:75:21:45:8a:e6:8b:37:ac:76:30:3a: 7d:19:94:90:54:5f:60:29:ce:fc:15:b0:a6:ff:bb: f5:3d:78:30:d5:da:dd:c5:c6:cd:be:ee:e3:ab:04: 8a:66:d9:1f:cb:62:14:f2:55:a6:30:48:bf:08:60: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:9F:12:3A:EA:AE:76:3E:D6:02:C7:01:13:2D:90:EB:07:A0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 208.84.64.0/24 208.86.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e5:1d:4b:29:f7:3c:ee:56:3d:ba:22:00:49:df:1f:ed:db: 2e:e8:f5:50:7e:b3:05:38:e8:06:cb:3c:bd:cf:61:4d:1a:65: 5a:8e:6c:19:26:c2:2c:0d:83:b2:fd:04:f5:90:2e:ae:0d:1a: bc:ab:87:d7:51:d2:a5:e4:a3:72:2c:b0:e5:d8:11:f7:07:57: 4c:c9:ea:34:80:ee:a1:1b:b0:4b:cd:98:e9:12:50:f9:23:9a: e4:12:5c:e0:64:b9:7f:ea:66:b8:66:14:46:11:f4:4b:75:34: 21:27:09:59:6b:43:3f:7b:31:27:06:28:9f:e5:89:8c:f5:81: b7:24:d9:f6:97:36:8d:67:48:c7:df:cf:72:43:24:89:e8:bf: b2:1a:29:2f:38:63:3a:a8:5b:51:83:88:ef:9b:e9:5c:5b:84: d9:d8:8c:92:df:54:f8:b6:d4:fd:2f:a7:af:cd:62:19:47:61: 3f:79:54:03:98:fb:5c:73:c3:d0:4c:96:1c:31:1b:59:e3:36: 8f:e1:f9:f5:af:7f:3e:52:d5:bc:25:f3:2b:7d:9e:42:04:47: f3:0d:d1:07:61:c6:f3:bf:7e:63:e9:77:71:b0:5a:43:ff:c8: b6:df:2d:13:2c:f7:56:a0:0c:d6:9d:86:5d:6f:d6:aa:5e:1f: 71:d6:35:b9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqf+6XDipiSjmxLkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk Y2ExYWFlMDQtOTViMy00YzliLTgwYmEtYjFmNTFiZGU0MGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsUUQDPOpPXClGeVHuq2Bqp+w37BZiiWlN1x /2HZPqnSyFVwndrkDXbY8dJnc5V+CcUyhXVNdh57w09JrxQICjYIjAxJcJWc3SJo QvhCAjpxZ2a4oAXYpZ7IuTGDuW7ERsU3EXFQ8i8BJhb1nRPQWyZN8l87Hm+eZeQX VGhawOnugIZFuVW66bTwpnFZ5CfdS0+bn4SHWj33FKwgcoo+Iq6xSp7B3jSqxkoD aNzn+g1XARXhfCkQ/Cdv3wSpEdG/dT53TugcdSFFiuaLN6x2MDp9GZSQVF9gKc78 FbCm/7v1PXgw1drdxcbNvu7jqwSKZtkfy2IU8lWmMEi/CGA/VwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJt6nxI66q52PtYCxwETLZDrB6CcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYmE5Njg0MzgtMWRjNC0z ZGIxLWEwYTEtZTQzNjBjOTc3MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0FRAAwQA 0FbIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKPlHUsp9zzuVj26IgBJ3x/t2y7o9VB+swU46AbLPL3PYU0a ZVqObBkmwiwNg7L9BPWQLq4NGryrh9dR0qXko3IssOXYEfcHV0zJ6jSA7qEbsEvN mOkSUPkjmuQSXOBkuX/qZrhmFEYR9Et1NCEnCVlrQz97MScGKJ/liYz1gbck2faX No1nSMffz3JDJInov7IaKS84YzqoW1GDiO+b6VxbhNnYjJLfVPi21P0vp6/NYhlH YT95VAOY+1xzw9BMlhwxG1njNo/h+fWvfz5S1bwl8yt9nkIER/MN0QdhxvO/fmPp d3GwWkP/yLbfLRMs91agDNadhl1v1qpeH3HWNbk= -----END CERTIFICATE-----Generated at Wed Aug 6 04:09:29 2025 by rpki-client