$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8708048e-e363-3407-a11a-1edb3e6d37a2.roa File: 8708048e-e363-3407-a11a-1edb3e6d37a2.roa (raw, json) Hash identifier: RHGzsirI52XO93mf/t2bYNeXvk5yuTtKWeRPQl8ZwmQ= Subject key identifier: C6:AE:12:E5:E6:CF:FC:9C:E3:9D:C8:1D:82:BB:DB:42:F8:D6:33:79 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A8576012F5D70288899040E09 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8708048e-e363-3407-a11a-1edb3e6d37a2.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 25961 IP address blocks: 209.237.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:01:2f:5d:70:28:88:99:04:0e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=0df5ba9b-5710-469b-8721-f7f818332c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:0d:09:90:7f:f2:d2:6b:00:61:04:52:eb: dc:e7:13:e4:18:fe:77:ef:99:5f:77:b0:1f:d4:11: d1:1f:03:3d:c1:aa:8c:4c:55:61:6c:f7:70:0d:97: a5:0d:cc:fc:d2:ec:81:7d:6d:0d:90:1f:ab:82:d2: ad:22:1c:21:8a:1c:f8:12:4f:6c:be:ae:b6:33:e3: 9a:88:cc:bf:6b:3c:9e:71:e5:4a:af:84:db:f4:71: 2a:66:69:89:6b:01:24:78:47:e0:74:65:93:c7:65: 38:8f:28:d9:b4:0e:79:27:a9:97:da:b7:2a:14:5b: 1f:ec:51:51:6a:fb:32:e5:a5:82:c6:18:1d:f0:fd: f6:e8:0e:28:da:d7:4d:6a:33:1d:18:1e:6f:2e:0b: fe:a2:96:0c:04:a1:e7:7a:05:07:4c:b3:be:01:a8: cd:ed:cb:9f:3b:15:cd:e1:ac:f8:47:3a:09:8a:d2: 40:b2:ed:f7:0e:4e:10:53:5e:35:c5:dd:30:6f:67: ef:8b:2f:50:71:34:8d:d7:7e:df:22:aa:77:92:2c: 0f:49:8a:6d:1c:34:92:c3:dd:28:af:97:3a:f2:3e: f5:c4:77:e0:28:a6:ca:e5:95:33:66:d8:36:a0:b5: 5a:2d:c9:f1:40:48:38:aa:1d:33:2b:25:8d:3f:f1: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:12:E5:E6:CF:FC:9C:E3:9D:C8:1D:82:BB:DB:42:F8:D6:33:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8708048e-e363-3407-a11a-1edb3e6d37a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a8:e5:2d:01:13:7a:d9:fb:9b:67:18:34:73:c8:7d:21:d2: 35:93:88:f5:49:da:33:8d:0d:c7:77:38:4c:21:1d:c9:26:fb: 79:15:d9:c0:54:da:78:43:25:16:00:cd:ca:d3:f6:43:29:49: 22:71:a5:17:f6:90:b7:94:25:75:88:d0:4a:76:dd:f9:0f:77: b6:af:4d:58:c2:fd:01:de:1a:a6:e9:c8:42:a6:e4:04:e3:3b: 95:95:f6:72:e3:99:00:46:9f:a6:fb:af:63:f6:8f:74:0f:b4: ce:39:64:51:9a:d2:f4:9b:d5:0f:ba:e7:48:30:fd:58:a4:00: f8:4c:33:d9:3d:71:39:33:15:73:ee:e8:f4:3d:80:ae:b2:cc: 74:bc:c7:e3:a5:88:75:ad:3e:64:d7:b5:48:27:75:78:81:28: 47:74:d4:8d:17:60:cc:fb:4d:65:4b:e5:2a:2e:44:73:31:a0: 22:1d:7b:4b:cf:85:8e:cc:b7:04:62:32:64:46:3c:9a:83:79: 1e:23:66:67:37:f9:19:eb:08:db:1a:32:ee:aa:1b:85:dc:25: 82:91:ad:c5:73:ff:e4:a0:47:b5:a3:db:8b:68:96:5b:4f:aa: 47:3a:23:79:dd:e6:ec:c1:92:d9:c9:5b:80:9a:0e:82:f2:45: 7d:b5:d4:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgEvXXAoiJkEDgkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MGRmNWJhOWItNTcxMC00NjliLTg3MjEtZjdmODE4MzMyYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7sNCZB/8tJrAGEEUuvc5xPkGP5375lfd7Af 1BHRHwM9waqMTFVhbPdwDZelDcz80uyBfW0NkB+rgtKtIhwhihz4Ek9svq62M+Oa iMy/azyeceVKr4Tb9HEqZmmJawEkeEfgdGWTx2U4jyjZtA55J6mX2rcqFFsf7FFR avsy5aWCxhgd8P326A4o2tdNajMdGB5vLgv+opYMBKHnegUHTLO+AajN7cufOxXN 4az4RzoJitJAsu33Dk4QU141xd0wb2fviy9QcTSN137fIqp3kiwPSYptHDSSw90o r5c68j71xHfgKKbK5ZUzZtg2oLVaLcnxQEg4qh0zKyWNP/F1jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMauEuXmz/yc453IHYK720L41jN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvODcwODA0OGUtZTM2My0z NDA3LWExMWEtMWVkYjNlNmQzN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmo5S0BE3rZ+5tnGDRzyH0h0jWTiPVJ2jONDcd3OEwhHckm+3kV2cBU 2nhDJRYAzcrT9kMpSSJxpRf2kLeUJXWI0Ep23fkPd7avTVjC/QHeGqbpyEKm5ATj O5WV9nLjmQBGn6b7r2P2j3QPtM45ZFGa0vSb1Q+650gw/VikAPhMM9k9cTkzFXPu 6PQ9gK6yzHS8x+OliHWtPmTXtUgndXiBKEd01I0XYMz7TWVL5SouRHMxoCIde0vP hY7MtwRiMmRGPJqDeR4jZmc3+RnrCNsaMu6qG4XcJYKRrcVz/+SgR7Wj24tolltP qkc6I3nd5uzBktnJW4CaDoLyRX211Oo= -----END CERTIFICATE-----Generated at Mon Aug 4 21:42:42 2025 by rpki-client