$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa File: 0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa (raw, json) Hash identifier: emD1V/LIikPUZERRos+jkWxr3wk5OpTTxsC6RC2yo+Q= Subject key identifier: 42:28:4F:19:68:CD:31:9A:7D:00:1F:BC:ED:02:3F:B9:2A:70:5B:EA Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584AADF1235A3F642ED32DAA1C40 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 174 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:23:5a:3f:64:2e:d3:2d:aa:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=a2f988de-6510-4b50-82ae-bc3eba514407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:c4:20:1c:09:e2:90:bf:af:9d:74:0f:8a: ae:97:f0:9e:ee:a2:72:04:1c:39:00:50:3e:db:ec: 8f:10:40:df:a7:4b:79:68:03:58:4b:3c:e0:1e:bf: 33:ee:b5:73:80:56:b1:00:62:c1:d8:a4:51:2d:a1: 9f:63:4c:5c:db:8c:ce:3d:ec:58:92:4b:21:32:f3: 3b:8f:84:76:b7:ea:50:b7:7a:5d:49:db:ea:c6:ee: e6:93:5a:f5:95:05:ff:8d:c1:a0:8b:6b:f6:8d:96: 83:00:fd:08:6c:d0:7a:fa:27:e1:60:34:9f:20:b3: e6:ea:7a:62:e8:1e:4c:9d:74:16:d6:8b:e2:23:fa: 7f:fe:32:b2:4f:4e:23:c5:54:79:fc:c5:15:94:d1: 67:b9:3d:20:01:13:2c:39:1e:82:6f:e2:ca:d0:e9: 0a:c6:bb:dc:0a:11:da:e6:9b:f5:e4:6b:a4:44:c0: 21:a5:5c:4e:29:d1:1c:3b:b4:c6:71:23:81:16:68: 3a:98:c6:b2:87:20:bc:e4:04:e0:a6:ba:8c:bb:92: 3b:f7:11:5c:9c:5f:a8:fa:fc:23:01:8b:a6:71:f4: 17:a4:df:8d:1f:bc:1c:b6:43:3b:67:2d:d1:5e:c3: 64:53:4f:ab:19:51:ca:e2:24:9b:5e:19:54:25:63: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:28:4F:19:68:CD:31:9A:7D:00:1F:BC:ED:02:3F:B9:2A:70:5B:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:23:56:58:80:28:4f:ea:6a:25:2b:94:c2:69:dc:3f:6d:56: 90:59:12:09:d0:b9:19:89:00:d8:55:49:75:c1:27:22:f4:be: 89:7d:7a:0f:5b:24:b7:d9:b1:6e:03:37:92:09:7d:14:d1:20: f4:ac:ba:79:4f:2a:25:38:b8:a3:d1:3e:cb:f0:c3:fa:af:ef: 9f:e8:9a:9b:85:c2:4e:cd:ac:ff:57:ae:d1:8a:a2:80:62:2d: cc:01:a9:ff:e6:28:3f:df:44:bc:76:24:32:0a:76:22:c1:3e: e6:5f:17:13:c1:af:95:9a:02:c8:48:2f:08:8a:d0:c9:c2:a8: 1b:31:c8:cf:f8:c3:bf:45:05:f5:11:0b:5a:ea:32:82:51:64: 1a:ba:c7:7c:8b:46:61:33:03:5c:0f:46:6d:fb:cf:e0:74:59: cf:20:59:d6:33:c1:41:3f:8f:15:9c:7a:82:b4:1d:7f:5f:1c: bb:bc:a2:82:25:97:55:fc:f6:73:a0:64:28:15:1f:c5:79:8f: 14:3a:12:9d:17:22:87:30:74:0d:75:46:14:2f:da:48:83:9a: 14:ad:6b:1a:59:55:09:c3:fc:23:53:cf:22:62:85:73:6c:52: 9e:cb:05:30:90:51:bf:34:31:ee:06:63:36:ad:b5:c2:97:61: 25:39:ee:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SNaP2Qu0y2qHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YTJmOTg4ZGUtNjUxMC00YjUwLTgyYWUtYmMzZWJhNTE0NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnvEIBwJ4pC/r510D4qul/Ce7qJyBBw5AFA+ 2+yPEEDfp0t5aANYSzzgHr8z7rVzgFaxAGLB2KRRLaGfY0xc24zOPexYkkshMvM7 j4R2t+pQt3pdSdvqxu7mk1r1lQX/jcGgi2v2jZaDAP0IbNB6+ifhYDSfILPm6npi 6B5MnXQW1oviI/p//jKyT04jxVR5/MUVlNFnuT0gARMsOR6Cb+LK0OkKxrvcChHa 5pv15GukRMAhpVxOKdEcO7TGcSOBFmg6mMayhyC85ATgprqMu5I79xFcnF+o+vwj AYumcfQXpN+NH7wctkM7Zy3RXsNkU0+rGVHK4iSbXhlUJWNbOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIoTxlozTGafQAfvO0CP7kqcFvqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMGY3YTViY2YtY2RjMy0z YzgzLTg1NTQtMTJlM2Q1MWUzNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0jVliAKE/qaiUrlMJp3D9tVpBZEgnQuRmJANhVSXXBJyL0vol9eg9b JLfZsW4DN5IJfRTRIPSsunlPKiU4uKPRPsvww/qv75/ompuFwk7NrP9XrtGKooBi LcwBqf/mKD/fRLx2JDIKdiLBPuZfFxPBr5WaAshILwiK0MnCqBsxyM/4w79FBfUR C1rqMoJRZBq6x3yLRmEzA1wPRm37z+B0Wc8gWdYzwUE/jxWceoK0HX9fHLu8ooIl l1X89nOgZCgVH8V5jxQ6Ep0XIocwdA11RhQv2kiDmhStaxpZVQnD/CNTzyJihXNs Up7LBTCQUb80Me4GYzattcKXYSU57vY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:55 2025 by rpki-client