$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa File: 0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa (raw, json) Hash identifier: nzU/JJG7DkJNRY1Ce0blXtYkpcQl43znMMAdH4iXO4E= Subject key identifier: 3B:80:6A:3F:68:2E:31:3B:8B:CA:3B:42:E7:42:FB:DF:B8:2D:BD:DB Certificate issuer: /CN=67961c8b-389c-46be-9541-ceac7d38b9aa Certificate serial: 010D0C9F4328584AB220CDC4CB7529C3C58CE600 Authority key identifier: 29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 36105 IP address blocks: 159.117.48.0/20 maxlen: 24 204.80.112.0/20 maxlen: 24 216.243.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:cd:c4:cb:75:29:c3:c5:8c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67961c8b-389c-46be-9541-ceac7d38b9aa Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=7a6ab475-e70c-4d38-866c-22959998fae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:07:5b:e3:7a:0b:ed:2b:89:b1:65:fe:40: f9:5c:c0:00:a4:ef:63:6e:2d:dc:0e:07:29:d2:75: b9:45:1c:29:aa:a9:63:65:a6:e5:73:c9:80:c5:1b: e5:e1:c1:97:8a:ed:53:9e:ea:30:31:25:02:4e:e7: cb:1e:4d:2a:07:21:7f:f0:12:d9:77:74:57:64:8b: 2c:fe:f6:c7:8b:27:57:60:e4:a2:26:28:2a:5a:f7: 21:8c:db:25:b5:bf:e7:3c:28:22:aa:60:0d:bc:ab: af:fa:39:f7:93:56:0a:9e:b0:06:87:dc:2e:06:49: 1a:71:1f:f6:c3:f9:0c:4f:f2:b1:d4:bd:b9:b4:69: 37:dc:f3:8b:79:09:8c:4c:cc:20:c8:e9:8d:e8:48: a1:1e:51:48:b4:19:50:a7:c5:b9:0c:c5:27:2c:51: 10:98:ac:de:28:58:70:a5:80:39:e0:84:0c:a1:0b: 12:8b:f3:c2:f0:20:e6:4e:75:5b:37:6f:5d:da:09: 17:20:32:fa:50:5a:a0:2f:e1:a1:ea:63:65:3f:f8: 3f:e6:90:84:6b:61:2e:2b:b9:57:ea:fb:8e:5c:85: 06:6e:2f:8b:1d:0a:05:6c:d1:20:42:64:63:8f:42: 41:15:48:34:85:7d:1a:fc:c1:a8:60:4b:9e:5e:93: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:80:6A:3F:68:2E:31:3B:8B:CA:3B:42:E7:42:FB:DF:B8:2D:BD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl X509v3 Authority Key Identifier: keyid:29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer sbgp-ipAddrBlock: critical IPv4: 159.117.48.0/20 204.80.112.0/20 216.243.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c5:7b:6c:5e:62:96:6c:96:01:bf:87:88:10:8c:1b:39:30: 7b:5d:ab:01:73:cd:a1:d5:d0:b7:c2:08:3d:cd:d4:30:eb:0a: 7d:73:a3:28:7a:d7:c4:e7:65:ee:39:6e:73:1a:e9:18:a0:bc: ad:ce:5d:ec:5e:28:9e:88:e8:84:2b:1e:45:cb:87:53:3b:7d: a5:22:7c:ad:87:23:49:5e:08:4f:bc:5d:8d:ce:c4:d6:18:73: 4e:0d:dd:54:97:36:ec:44:23:52:dc:6e:50:1b:f5:f3:21:72: fb:57:e0:48:f0:b1:cd:4f:c6:2a:e2:2e:71:10:7d:e6:52:a3: 79:50:33:05:5a:78:8b:cf:99:7b:1f:c0:3d:8f:9d:94:9c:75: 0a:c8:45:2c:7b:bb:17:bf:be:cf:5e:f5:d8:54:1e:5a:85:d0: c8:cd:d8:db:fd:9a:47:2b:ce:be:d9:95:69:5c:d3:7d:1e:26: 0b:11:0b:3d:15:ae:3e:35:1d:7c:30:e1:13:de:80:4a:df:b1: fa:14:7b:2f:d3:11:f6:87:f3:9c:f0:4e:33:1c:7e:56:4e:ed: 05:62:99:bd:c5:7f:64:49:a8:4e:d2:7f:06:cc:45:7c:bb:f7: 4d:b5:83:c5:e5:11:cf:a8:4b:b8:1d:44:eb:73:9d:b4:96:0a: 3e:c7:30:e8 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEqyIM3Ey3Upw8WM5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc5NjFjOGItMzg5Yy00NmJlLTk1NDEtY2VhYzdkMzhi OWFhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2E2YWI0NzUtZTcwYy00ZDM4LTg2NmMtMjI5NTk5OThmYWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN0HW+N6C+0ribFl/kD5XMAApO9jbi3cDgcp 0nW5RRwpqqljZablc8mAxRvl4cGXiu1TnuowMSUCTufLHk0qByF/8BLZd3RXZIss /vbHiydXYOSiJigqWvchjNsltb/nPCgiqmANvKuv+jn3k1YKnrAGh9wuBkkacR/2 w/kMT/Kx1L25tGk33POLeQmMTMwgyOmN6EihHlFItBlQp8W5DMUnLFEQmKzeKFhw pYA54IQMoQsSi/PC8CDmTnVbN29d2gkXIDL6UFqgL+Gh6mNlP/g/5pCEa2EuK7lX 6vuOXIUGbi+LHQoFbNEgQmRjj0JBFUg0hX0a/MGoYEueXpPz+QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDuAaj9oLjE7i8o7QudC+9+4Lb3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Nzk2 MWM4Yi0zODljLTQ2YmUtOTU0MS1jZWFjN2QzOGI5YWEvMGE5OTBiMGUtNTVjMC0z NmI0LWI2OGEtOGUxNTI5NjVjOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjc5NjFjOGItMzg5Yy00NmJlLTk1 NDEtY2VhYzdkMzhiOWFhLzY3OTYxYzhiLTM4OWMtNDZiZS05NTQxLWNlYWM3ZDM4 YjlhYS5jcmwwHwYDVR0jBBgwFoAUKUeUbce7w/Qg5Vgtj1rNN9wUu5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82Nzk2MWM4Yi0zODljLTQ2YmUtOTU0MS1jZWFj N2QzOGI5YWEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEn3UwAwQE zFBwAwQE2PPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFLFe2xeYpZslgG/h4gQjBs5MHtdqwFzzaHV0LfC CD3N1DDrCn1zoyh618TnZe45bnMa6RigvK3OXexeKJ6I6IQrHkXLh1M7faUifK2H I0leCE+8XY3OxNYYc04N3VSXNuxEI1LcblAb9fMhcvtX4Ejwsc1PxiriLnEQfeZS o3lQMwVaeIvPmXsfwD2PnZScdQrIRSx7uxe/vs9e9dhUHlqF0MjN2Nv9mkcrzr7Z lWlc030eJgsRCz0Vrj41HXww4RPegErfsfoUey/TEfaH85zwTjMcflZO7QVimb3F f2RJqE7SfwbMRXy79021g8XlEc+oS7gdROtznbSWCj7HMOg= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:03 2025 by rpki-client