$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa File: daf14092-dafe-3ba6-9746-8236744966f4.roa (raw, json) Hash identifier: njofnxeid2El3O17FU7pmsq3d1+4QvrvrOZykhyA3KM= Subject key identifier: 52:64:A9:A5:CE:DE:3E:1D:E8:64:79:05:CA:73:E4:8E:E8:4B:66:1B Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A9900C10A4BC3D22A10BFE260 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 397422 IP address blocks: 209.237.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c1:0a:4b:c3:d2:2a:10:bf:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=34950fa3-6f1e-458e-bc26-44113fb48029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5d:43:30:85:f8:88:06:a2:32:94:10:da:b1: f8:e3:3c:fd:c7:8c:a3:6b:0e:06:ec:52:74:27:55: a9:2d:37:c2:63:fc:3e:b9:72:06:ba:9c:11:ec:3f: bc:13:c3:5b:03:3b:94:48:42:0a:09:f4:61:06:f7: b2:dc:18:27:bd:d2:ed:6a:63:75:5e:76:4c:92:61: e6:78:b4:82:42:4a:74:4c:78:7c:47:1f:15:3b:00: 2a:eb:6f:06:68:59:80:74:f0:0d:3e:74:7e:3d:85: 40:2a:4e:6f:eb:38:24:34:70:d1:a6:8e:8e:0f:de: 02:69:34:34:b3:08:dc:82:98:86:12:bc:20:c5:c1: 4b:b4:25:82:5b:04:c2:65:d9:b3:c3:52:41:bd:75: fa:b7:7f:c2:7b:ad:77:15:1a:1d:ba:89:77:7a:4b: a5:2c:8b:41:fa:63:ca:50:91:af:d8:ba:df:c9:b1: 2e:37:06:d2:2f:ba:07:a1:30:2b:88:61:29:49:ff: bb:25:d9:1b:e4:95:cb:a2:33:0e:7a:bb:31:d0:2b: 94:8d:e5:33:a7:ca:d8:7a:98:e4:13:8d:32:cb:65: ca:01:f1:83:96:cd:be:98:81:c4:5a:e7:72:7e:6c: 08:3a:66:0a:1a:5a:e3:96:c9:44:55:38:40:20:46: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:A9:A5:CE:DE:3E:1D:E8:64:79:05:CA:73:E4:8E:E8:4B:66:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:93:de:fa:c9:61:d6:73:d0:7e:29:6c:02:65:9a:2e:24:f6: b5:65:c7:d3:5c:c1:12:60:ba:48:08:9b:91:9b:3d:cb:ae:73: ee:b0:ce:bc:f4:9c:6a:90:8e:7b:2f:49:4c:3f:71:bd:cc:bc: 64:7b:de:04:a5:a6:77:08:8b:e4:01:9f:c0:fc:a1:43:c9:7b: 9a:a8:16:5c:73:d4:72:6d:fe:48:da:fe:f4:68:dc:55:33:2e: d9:0c:58:b0:10:b9:8f:14:98:da:f8:6d:52:a0:23:11:43:ae: b8:9b:a9:a3:aa:a5:8b:b4:f1:42:ba:f9:30:a6:49:b2:7a:5d: c0:17:99:c4:64:ed:68:fa:e9:f2:48:5d:1d:88:a2:3b:79:cd: 41:93:e9:97:d4:86:47:4f:6a:b8:df:02:c7:42:52:0a:91:76: 12:c5:db:c7:2d:28:f7:37:a6:d5:61:b7:42:6a:5a:ad:12:2e: f0:b2:96:f6:6a:5c:f1:fe:52:e6:93:21:b1:2f:89:8b:93:7b: e0:c4:c4:0d:4f:f4:0e:59:48:24:d6:32:2d:c8:75:60:dc:f3: 43:b9:0e:87:58:27:af:66:7f:f1:a3:7f:24:62:3c:73:fb:93: 98:9f:1f:a3:0b:c7:4d:00:b6:10:10:34:04:1e:b8:8e:3b:10: 19:1c:f5:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMEKS8PSKhC/4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MzQ5NTBmYTMtNmYxZS00NThlLWJjMjYtNDQxMTNmYjQ4MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj11DMIX4iAaiMpQQ2rH44zz9x4yjaw4G7FJ0 J1WpLTfCY/w+uXIGupwR7D+8E8NbAzuUSEIKCfRhBvey3BgnvdLtamN1XnZMkmHm eLSCQkp0THh8Rx8VOwAq628GaFmAdPANPnR+PYVAKk5v6zgkNHDRpo6OD94CaTQ0 swjcgpiGErwgxcFLtCWCWwTCZdmzw1JBvXX6t3/Ce613FRoduol3ekulLItB+mPK UJGv2LrfybEuNwbSL7oHoTAriGEpSf+7Jdkb5JXLojMOersx0CuUjeUzp8rYepjk E40yy2XKAfGDls2+mIHEWudyfmwIOmYKGlrjlslEVThAIEaqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJkqaXO3j4d6GR5Bcpz5I7oS2YbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGFmMTQwOTItZGFmZS0z YmE2LTk3NDYtODIzNjc0NDk2NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+T3vrJYdZz0H4pbAJlmi4k9rVlx9NcwRJgukgIm5GbPcuuc+6wzrz0 nGqQjnsvSUw/cb3MvGR73gSlpncIi+QBn8D8oUPJe5qoFlxz1HJt/kja/vRo3FUz LtkMWLAQuY8UmNr4bVKgIxFDrribqaOqpYu08UK6+TCmSbJ6XcAXmcRk7Wj66fJI XR2Iojt5zUGT6ZfUhkdParjfAsdCUgqRdhLF28ctKPc3ptVht0JqWq0SLvCylvZq XPH+UuaTIbEviYuTe+DExA1P9A5ZSCTWMi3IdWDc80O5DodYJ69mf/GjfyRiPHP7 k5ifH6MLx00AthAQNAQeuI47EBkc9bc= -----END CERTIFICATE-----Generated at Mon Aug 4 22:20:10 2025 by rpki-client