$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa File: d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json) Hash identifier: cx1oprTzf7aOBV8iMxkIwMwKSv+Ds3Wb4ig/vhyXxmc= Subject key identifier: 60:AD:18:72:38:B7:9C:60:33:6B:1B:2D:B3:EE:C1:FA:E3:57:F2:DE Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F4328584AD3A0F1C0C3633CC93AB6C300 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 30500 IP address blocks: 74.123.68.0/22 maxlen: 24 198.134.28.0/22 maxlen: 24 208.77.196.0/22 maxlen: 24 208.123.208.0/24 maxlen: 24 208.123.210.0/23 maxlen: 24 208.123.212.0/22 maxlen: 24 208.123.216.0/22 maxlen: 24 2605:e680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f1:c0:c3:63:3c:c9:3a:b6:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=c4086730-aa03-4c50-9142-33fbe835f119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:6e:d5:3d:36:0f:39:aa:c5:9f:9d:fa:0b: 1a:f8:d3:5b:63:a9:d8:91:10:04:59:e4:7b:f7:2f: 1b:ee:10:0c:95:7b:38:ba:38:64:3d:f4:f0:32:9a: 9f:94:32:08:57:b3:32:81:ce:a5:64:ff:b2:a3:5d: 35:85:7f:a2:8a:ed:4d:82:f0:4b:cb:72:bb:9a:b0: be:f7:eb:d7:04:26:b0:ef:90:e2:f3:59:f3:16:a3: 1f:27:4c:af:bb:43:2f:94:71:b7:5b:d6:23:05:1d: b8:81:3e:26:61:62:f7:52:fa:41:65:58:4f:35:4c: c8:d2:d1:ab:e9:4d:67:1b:b9:df:fb:64:e6:fb:b6: d8:c9:52:63:c1:35:44:af:e6:77:7e:56:fe:f9:75: e0:f9:c9:03:91:41:2b:7c:03:75:d2:9e:ff:fb:a0: f5:01:08:1c:48:99:e3:8e:37:02:39:cc:e6:31:e6: c0:f3:c0:80:93:74:09:b5:94:82:59:53:3f:66:74: f9:ca:39:c6:19:1e:60:4e:bd:b4:00:a7:b7:0c:ee: 50:fa:eb:d7:3f:b7:ba:4a:ad:74:5a:9c:10:ee:6b: d7:0e:64:37:25:f0:79:a5:e9:61:5d:57:34:cc:46: 1d:e7:35:36:bf:19:71:4b:c5:71:4f:27:35:cb:bc: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AD:18:72:38:B7:9C:60:33:6B:1B:2D:B3:EE:C1:FA:E3:57:F2:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 74.123.68.0/22 198.134.28.0/22 208.77.196.0/22 208.123.208.0/24 208.123.210.0-208.123.219.255 IPv6: 2605:e680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2d:a0:ad:93:c8:17:45:ec:d2:56:c5:d4:7c:0a:10:fe:33: d7:fd:1e:62:50:61:45:0f:aa:57:e6:5e:da:a0:c7:c2:4f:05: 9d:55:c7:ae:c4:d4:40:21:92:a2:88:97:27:5a:4a:65:de:74: a1:2f:59:cb:e0:28:73:dd:bb:3f:bf:98:0c:3c:4e:a4:3b:d5: 83:97:80:85:6b:39:50:5a:0e:77:16:ba:29:6e:b0:37:ac:0b: 4b:d3:66:86:d7:99:b8:5f:bd:34:a8:8d:5a:a6:ce:40:d8:f6: f0:61:1f:72:e6:f4:4c:73:b8:6c:8e:f2:e0:a6:fc:98:a0:0a: db:40:d4:cd:f7:b2:4a:cb:da:b0:9c:b3:68:fc:17:ff:24:9d: 19:1d:9b:30:08:ac:f2:65:50:15:fb:b3:64:6d:27:f7:53:f0: 1e:72:42:a5:10:38:83:01:14:f5:29:a6:d7:53:be:0f:d5:19: f0:b4:0c:8c:b7:b9:15:91:55:e0:3e:8a:b1:1e:f8:34:59:ef: 94:e9:54:5d:78:f3:fb:cb:c3:1b:1a:a8:70:f0:bc:24:ca:21: 38:45:35:3e:75:1a:16:a8:3a:56:5b:7a:9a:5e:37:02:69:93: ff:81:ce:3c:38:bf:93:a0:40:ee:44:a8:4a:c4:ac:3e:7a:4e: 3b:15:79:f0 -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWErToPHAw2M8yTq2wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YzQwODY3MzAtYWEwMy00YzUwLTkxNDItMzNmYmU4MzVmMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzFu1T02DzmqxZ+d+gsa+NNbY6nYkRAEWeR7 9y8b7hAMlXs4ujhkPfTwMpqflDIIV7Mygc6lZP+yo101hX+iiu1NgvBLy3K7mrC+ 9+vXBCaw75Di81nzFqMfJ0yvu0MvlHG3W9YjBR24gT4mYWL3UvpBZVhPNUzI0tGr 6U1nG7nf+2Tm+7bYyVJjwTVEr+Z3flb++XXg+ckDkUErfAN10p7/+6D1AQgcSJnj jjcCOczmMebA88CAk3QJtZSCWVM/ZnT5yjnGGR5gTr20AKe3DO5Q+uvXP7e6Sq10 WpwQ7mvXDmQ3JfB5pelhXVc0zEYd5zU2vxlxS8VxTyc1y7wemQIDAQABo4IDhDCC A4AwHQYDVR0OBBYEFGCtGHI4t5xgM2sbLbPuwfrjV/LeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvZDQ3NDg5NmItOGYxOS0z YjY0LWE3N2QtMTMxY2Y2NTI0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCSntEAwQC xoYcAwQC0E3EAwQA0HvQMAwDBAHQe9IDBALQe9gwDQQCAAIwBwMFACYF5oAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKS2grZPIF0Xs0lbF1HwKEP4z1/0eYlBhRQ+qV+Ze2qDHwk8FnVXHrsTU QCGSooiXJ1pKZd50oS9Zy+Aoc927P7+YDDxOpDvVg5eAhWs5UFoOdxa6KW6wN6wL S9NmhteZuF+9NKiNWqbOQNj28GEfcub0THO4bI7y4Kb8mKAK20DUzfeySsvasJyz aPwX/ySdGR2bMAis8mVQFfuzZG0n91PwHnJCpRA4gwEU9Smm11O+D9UZ8LQMjLe5 FZFV4D6KsR74NFnvlOlUXXjz+8vDGxqocPC8JMohOEU1PnUaFqg6Vlt6ml43AmmT /4HOPDi/k6BA7kSoSsSsPnpOOxV58A== -----END CERTIFICATE-----Generated at Wed Aug 13 02:42:52 2025 by rpki-client