$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa File: 1c405104-ce81-34dd-86ff-db540904d806.roa (raw, json) Hash identifier: aQXPKaq+sumeAJK+GL/19Pz+ufnHHFzcrgRC+chgkLo= Subject key identifier: 71:7A:A3:F6:AF:4B:E7:50:69:3D:C1:4C:4A:81:06:75:F6:5B:6F:F9 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A90A0AEBE65612949E8398040 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 10397 IP address blocks: 209.209.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ae:be:65:61:29:49:e8:39:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=d13ed0b4-c336-45ba-9acf-a27063e2dc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:24:e7:66:b3:a1:8f:7e:7b:64:65:89:a9:10: 27:5f:e7:04:d4:c1:22:9e:5f:ba:0c:17:81:99:62: 63:c5:45:a2:ac:64:ce:c2:14:eb:11:e3:54:4c:f0: 76:7b:80:56:c0:5c:28:e5:54:22:99:17:7e:fd:13: ed:96:44:56:e8:f7:d7:65:77:db:cc:65:85:9f:77: 16:bf:ef:63:5e:08:6a:a8:13:66:f5:b0:69:88:ae: 6f:30:94:b8:aa:02:a5:9f:b7:cc:cb:8f:20:9b:a9: be:09:20:29:9d:2b:15:9a:c1:94:c9:99:a9:2e:8a: 47:f4:91:45:fb:3a:e2:72:89:f3:d1:4f:83:02:81: 9c:a5:66:8a:6d:04:33:d4:13:12:63:53:15:92:1f: c9:96:60:a6:c3:85:3a:34:8c:68:2e:6d:23:81:ed: d9:fd:2c:47:55:a5:e1:44:b5:c1:81:6d:d9:9d:ac: 07:a5:2b:20:cd:4a:b9:93:73:64:02:5c:d6:75:ae: 5f:7b:b8:45:39:4b:33:44:2a:d7:9e:1e:65:c0:f7: cd:c7:a6:79:21:d3:78:8c:10:97:88:58:fe:de:82: 61:4d:13:8a:55:34:84:b2:6e:19:9b:41:a2:73:1b: 16:6c:d4:5f:09:29:48:cc:86:08:dc:c0:91:d1:e1: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7A:A3:F6:AF:4B:E7:50:69:3D:C1:4C:4A:81:06:75:F6:5B:6F:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a1:48:54:30:f5:e7:a6:fd:4f:be:19:db:c9:50:0c:da:0f: fc:00:af:bf:58:2d:93:68:90:a7:14:a0:74:16:e9:d4:b8:45: 5d:ab:0a:b0:63:9e:b1:d5:d5:72:76:2d:6c:9b:e3:31:c7:95: b2:b8:88:bf:d5:00:a4:d3:71:7c:a4:5c:12:10:61:92:24:c0: 0b:ed:bc:66:bb:09:ab:0a:b5:f3:bb:76:37:9e:a0:66:d2:41: 3d:df:83:58:f0:62:cd:b9:84:ff:70:e2:58:0d:8e:68:41:1b: 64:eb:79:5a:52:be:e4:c6:76:52:cb:02:d2:ec:50:18:0d:17: 39:a4:87:3f:8a:36:6c:7d:7a:00:61:fe:44:64:77:77:fb:3b: a2:31:5f:6f:c2:aa:2b:9c:a2:21:c8:2b:96:93:7e:f5:3e:11: 73:67:ee:0c:d2:0a:5a:ff:95:33:e0:ed:a5:29:5f:4b:46:03: 6b:bb:ea:59:d9:de:a8:e7:f9:98:5d:3e:42:7c:38:7f:bc:0d: bb:6b:cc:f3:35:0e:86:c5:cb:1c:92:6a:8d:ab:7b:99:22:d1: 98:65:d7:2e:ee:3c:c1:5d:94:45:f2:2b:ee:c2:fd:fe:a2:23: 51:1c:01:11:2b:f6:c7:87:68:98:d5:08:9e:10:d3:4e:c4:b7: 4b:c6:3d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoK6+ZWEpSeg5gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDEzZWQwYjQtYzMzNi00NWJhLTlhY2YtYTI3MDYzZTJkYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiTnZrOhj357ZGWJqRAnX+cE1MEinl+6DBeB mWJjxUWirGTOwhTrEeNUTPB2e4BWwFwo5VQimRd+/RPtlkRW6PfXZXfbzGWFn3cW v+9jXghqqBNm9bBpiK5vMJS4qgKln7fMy48gm6m+CSApnSsVmsGUyZmpLopH9JFF +zriconz0U+DAoGcpWaKbQQz1BMSY1MVkh/JlmCmw4U6NIxoLm0jge3Z/SxHVaXh RLXBgW3ZnawHpSsgzUq5k3NkAlzWda5fe7hFOUszRCrXnh5lwPfNx6Z5IdN4jBCX iFj+3oJhTROKVTSEsm4Zm0GicxsWbNRfCSlIzIYI3MCR0eFx6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF6o/avS+dQaT3BTEqBBnX2W2/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMWM0MDUxMDQtY2U4MS0z NGRkLTg2ZmYtZGI1NDA5MDRkODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuhSFQw9eem/U++GdvJUAzaD/wAr79YLZNokKcUoHQW6dS4RV2rCrBj nrHV1XJ2LWyb4zHHlbK4iL/VAKTTcXykXBIQYZIkwAvtvGa7CasKtfO7djeeoGbS QT3fg1jwYs25hP9w4lgNjmhBG2TreVpSvuTGdlLLAtLsUBgNFzmkhz+KNmx9egBh /kRkd3f7O6IxX2/CqiucoiHIK5aTfvU+EXNn7gzSClr/lTPg7aUpX0tGA2u76lnZ 3qjn+ZhdPkJ8OH+8DbtrzPM1DobFyxySao2re5ki0Zhl1y7uPMFdlEXyK+7C/f6i I1EcAREr9seHaJjVCJ4Q007Et0vGPWQ= -----END CERTIFICATE-----Generated at Sun Aug 10 13:43:06 2025 by rpki-client