$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa File: 929d6704-0887-38bf-80da-9c831cd58557.roa (raw, json) Hash identifier: kEcwF30vIZ7wX4GahtEJ7v8Ilum8ZX3LnS6J8nhYZVE= Subject key identifier: ED:DE:82:17:70:B6:A5:CF:4D:65:10:81:60:6A:A6:AE:A0:5A:40:E7 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A94D0D71011AD06227BCE8100 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 55246 IP address blocks: 209.237.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d7:10:11:ad:06:22:7b:ce:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=be1911d5-aef5-403c-ba1a-3cc68055c785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:6d:e2:ab:78:dd:7a:4d:4b:47:c7:06:53: d9:d0:c2:65:f5:36:09:0c:b4:57:2f:67:c2:5b:9c: 07:f4:ec:de:19:3a:6c:dd:e1:45:48:9b:dc:ad:e8: 33:e5:af:a9:75:df:92:a4:b0:ff:5b:86:0b:71:33: 10:57:2f:9d:77:03:1e:6e:23:72:3d:84:6d:bf:39: 3b:5d:42:84:59:d2:32:ee:dd:40:10:8d:64:a7:c3: e4:d3:5e:34:0f:d5:14:a6:12:e3:e1:fb:c8:c6:26: 31:5f:d6:74:e3:96:20:96:7e:e5:20:70:f1:cf:7b: 8f:52:d9:40:52:e1:c6:09:e8:fd:ab:d5:8e:6c:6e: 96:aa:ab:14:1d:25:3a:44:05:51:c2:b9:20:07:6f: db:2a:e8:39:89:c5:b7:15:2b:e1:96:6f:74:01:33: 01:97:84:57:67:8b:c4:e1:fc:90:28:c4:dd:ed:82: 07:5a:99:a1:42:a6:d4:4e:d2:46:60:bd:a9:3a:20: ca:ce:11:ac:ef:62:58:59:71:be:d1:e6:50:82:96: 06:bf:79:9e:bc:71:15:b4:6a:0f:42:ca:6a:33:06: 31:94:13:76:5c:ce:6c:67:b7:69:1f:41:82:99:b5: 86:21:8a:49:cb:c3:19:55:1a:8f:e7:ff:67:36:93: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DE:82:17:70:B6:A5:CF:4D:65:10:81:60:6A:A6:AE:A0:5A:40:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:78:8f:69:b4:7e:82:fb:14:f3:37:fe:84:b4:74:81:9a:17: 32:37:f7:bf:21:1d:18:28:22:51:17:e3:16:39:d8:bb:2a:6e: 00:90:59:39:4a:c2:ac:e9:e7:bf:dd:27:02:5e:97:fc:16:8e: 52:58:41:d1:21:d1:f4:52:92:7a:f9:23:aa:54:ac:ab:d5:72: 29:83:1a:d3:9c:ba:4b:df:e2:2c:49:25:bb:4a:d5:87:76:46: d2:43:37:0c:07:aa:85:7d:56:70:5a:86:41:28:bb:27:41:22: 0d:85:a1:3a:47:d4:e9:d8:a2:e0:f0:5b:20:8f:c3:00:33:dd: 4c:54:00:07:0d:c3:3d:d2:b9:94:85:55:16:f0:29:c7:09:ec: b0:fe:41:3c:a9:9f:6c:24:d2:82:1f:c9:bf:ac:6f:d7:e5:b5: 2b:78:10:31:af:67:41:5d:88:b8:a8:43:7d:98:18:35:db:dd: 4c:9d:a8:01:11:be:92:ce:38:86:67:3f:e3:70:e9:87:4d:44: f0:b3:fc:a0:49:16:d0:eb:04:c9:51:a3:35:90:bd:1e:fb:1e: 3a:df:14:9c:21:23:d7:04:0b:94:42:18:e1:0d:d0:0c:eb:62: e8:cd:2c:dc:00:66:e4:79:20:42:b7:52:47:8a:87:7a:fa:9e: 9d:ed:63:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NcQEa0GInvOgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk YmUxOTExZDUtYWVmNS00MDNjLWJhMWEtM2NjNjgwNTVjNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/ht4qt43XpNS0fHBlPZ0MJl9TYJDLRXL2fC W5wH9OzeGTps3eFFSJvcregz5a+pdd+SpLD/W4YLcTMQVy+ddwMebiNyPYRtvzk7 XUKEWdIy7t1AEI1kp8Pk0140D9UUphLj4fvIxiYxX9Z045Ygln7lIHDxz3uPUtlA UuHGCej9q9WObG6WqqsUHSU6RAVRwrkgB2/bKug5icW3FSvhlm90ATMBl4RXZ4vE 4fyQKMTd7YIHWpmhQqbUTtJGYL2pOiDKzhGs72JYWXG+0eZQgpYGv3mevHEVtGoP QspqMwYxlBN2XM5sZ7dpH0GCmbWGIYpJy8MZVRqP5/9nNpOM9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3eghdwtqXPTWUQgWBqpq6gWkDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvOTI5ZDY3MDQtMDg4Ny0z OGJmLTgwZGEtOWM4MzFjZDU4NTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp4j2m0foL7FPM3/oS0dIGaFzI3978hHRgoIlEX4xY52LsqbgCQWTlK wqzp57/dJwJel/wWjlJYQdEh0fRSknr5I6pUrKvVcimDGtOcukvf4ixJJbtK1Yd2 RtJDNwwHqoV9VnBahkEouydBIg2FoTpH1OnYouDwWyCPwwAz3UxUAAcNwz3SuZSF VRbwKccJ7LD+QTypn2wk0oIfyb+sb9fltSt4EDGvZ0FdiLioQ32YGDXb3UydqAER vpLOOIZnP+Nw6YdNRPCz/KBJFtDrBMlRozWQvR77HjrfFJwhI9cEC5RCGOEN0Azr YujNLNwAZuR5IEK3UkeKh3r6np3tY28= -----END CERTIFICATE-----Generated at Wed Aug 6 06:07:30 2025 by rpki-client