$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5bb7985-7692-3638-af38-64301ac9aded.roa File: d5bb7985-7692-3638-af38-64301ac9aded.roa (raw, json) Hash identifier: kijmkQDN+1kbBIp9BVOr1VNKbQfO/2taIRd05yJkSA0= Subject key identifier: 60:04:AB:59:EC:18:B3:60:29:D7:B1:42:3B:3E:9D:D1:F2:EF:FB:0D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55CB9208DE4858AC518980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5bb7985-7692-3638-af38-64301ac9aded.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 15247 IP address blocks: 208.181.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cb:92:08:de:48:58:ac:51:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=e6e9cf39-54e3-4edb-8daf-587c115afe42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e7:ce:77:34:c0:80:d3:53:92:54:3d:6c:56: 53:05:6e:8d:4d:2e:da:98:2f:49:2c:88:6a:df:87: 62:c2:59:e1:46:59:67:7b:4c:73:1c:5b:1c:53:4a: f1:ad:2c:22:d2:99:75:18:79:74:bc:f2:7a:c9:f2: 98:31:5e:81:0c:21:d5:d7:37:00:2c:bc:1e:12:6e: a7:e0:ff:8f:c1:86:d4:d1:cd:5d:5f:a5:0a:d6:58: b8:fd:87:bf:39:0e:b0:e4:c4:2e:f2:7b:98:da:16: 9c:67:2e:20:1b:97:09:1f:92:ac:af:07:41:c9:67: ea:74:a3:14:db:60:2a:f3:44:68:88:96:a3:85:c6: 06:2e:8e:b8:c3:d6:b3:79:d3:bb:a2:b8:f5:e4:32: f7:44:20:c9:b1:9a:37:fc:ec:01:43:ac:2d:11:3d: c4:c3:f9:6a:93:c7:d3:df:48:b2:2a:41:36:ea:1d: 70:17:e9:87:e0:62:e8:6c:d2:e5:e2:22:53:5e:d0: 20:d8:e6:c9:c0:cd:99:78:41:fd:47:7b:00:42:b0: 9a:b8:d8:cd:ab:0c:b1:0b:65:dd:db:eb:c2:de:b6: 21:15:1a:61:aa:59:2b:f1:e9:0a:21:df:02:07:99: 58:3a:1f:6e:de:18:34:81:62:48:e7:04:20:0e:02: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:04:AB:59:EC:18:B3:60:29:D7:B1:42:3B:3E:9D:D1:F2:EF:FB:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5bb7985-7692-3638-af38-64301ac9aded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ea:02:de:88:1f:d3:67:79:46:31:7d:97:57:b9:b1:34:73: 8b:a7:7e:50:2f:4e:7e:5e:79:ac:1d:4c:f5:5d:93:49:31:42: d7:98:eb:de:50:3d:93:98:ba:2e:b3:1b:49:58:65:ec:75:4c: b4:f9:45:c4:43:06:49:03:09:7f:06:10:70:6c:e4:ea:e4:69: 5e:af:e0:b2:e2:c2:65:90:4d:97:06:5e:85:af:23:12:48:99: 58:e6:9d:10:b5:4b:54:57:0d:05:d7:7c:3e:60:0f:d1:3f:83: 4a:42:71:da:7a:29:1b:f6:dd:e1:98:f5:ae:a0:9b:d7:99:2a: de:d3:49:6b:b8:10:8c:b1:c7:44:95:dd:ce:3a:37:f3:1c:b6: 6c:0c:68:10:da:23:18:3e:ea:93:4f:cc:56:b7:38:f4:a6:00: 38:6b:07:a3:87:e5:cf:0f:f5:a8:f9:76:a8:0d:4c:da:41:3c: 52:ce:31:d2:05:01:53:0f:71:14:f2:67:0e:ee:dc:c7:d2:57: bc:da:d9:76:7a:8c:f6:49:24:36:f1:b2:59:9e:a5:b7:8b:86: 8a:33:3d:6e:8d:72:ba:ec:19:6d:7a:59:d2:af:f0:7c:9e:fb: d6:65:dd:c4:92:4f:63:e2:9c:7a:c7:d4:2a:7e:80:e7:39:3a: e1:28:65:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcuSCN5IWKxRiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ZTZlOWNmMzktNTRlMy00ZWRiLThkYWYtNTg3YzExNWFmZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjefOdzTAgNNTklQ9bFZTBW6NTS7amC9JLIhq 34diwlnhRllne0xzHFscU0rxrSwi0pl1GHl0vPJ6yfKYMV6BDCHV1zcALLweEm6n 4P+PwYbU0c1dX6UK1li4/Ye/OQ6w5MQu8nuY2hacZy4gG5cJH5KsrwdByWfqdKMU 22Aq80RoiJajhcYGLo64w9azedO7orj15DL3RCDJsZo3/OwBQ6wtET3Ew/lqk8fT 30iyKkE26h1wF+mH4GLobNLl4iJTXtAg2ObJwM2ZeEH9R3sAQrCauNjNqwyxC2Xd 2+vC3rYhFRphqlkr8ekKId8CB5lYOh9u3hg0gWJI5wQgDgJARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAEq1nsGLNgKdexQjs+ndHy7/sNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDViYjc5ODUtNzY5Mi0z NjM4LWFmMzgtNjQzMDFhYzlhZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHqAt6IH9NneUYxfZdXubE0c4unflAvTn5eeawdTPVdk0kxQteY695Q PZOYui6zG0lYZex1TLT5RcRDBkkDCX8GEHBs5OrkaV6v4LLiwmWQTZcGXoWvIxJI mVjmnRC1S1RXDQXXfD5gD9E/g0pCcdp6KRv23eGY9a6gm9eZKt7TSWu4EIyxx0SV 3c46N/MctmwMaBDaIxg+6pNPzFa3OPSmADhrB6OH5c8P9aj5dqgNTNpBPFLOMdIF AVMPcRTyZw7u3MfSV7za2XZ6jPZJJDbxslmepbeLhoozPW6NcrrsGW16WdKv8Hye +9Zl3cSST2PinHrH1Cp+gOc5OuEoZfg= -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:16 2025 by rpki-client