$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9802dda9-f341-3f6c-b874-a50094f59d5b.roa File: 9802dda9-f341-3f6c-b874-a50094f59d5b.roa (raw, json) Hash identifier: gyjDtaHhbWHLWKAWET5kxTws0WVKtHSRqFarf993enM= Subject key identifier: C6:7C:21:B9:9A:6B:1F:1E:C0:50:65:47:A9:6F:BC:CE:68:9B:86:B0 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584AB4EB6E999E9F2C4AEE5E3A00 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9802dda9-f341-3f6c-b874-a50094f59d5b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 25649 IP address blocks: 208.74.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6e:99:9e:9f:2c:4a:ee:5e:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=43038164-95f5-4984-a1a4-d72def9eeec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:82:15:4b:01:b3:cd:48:2a:3c:65:59:10: 70:39:f5:9f:e7:0b:54:0d:13:70:1c:70:81:a5:98: 46:10:5a:d3:a5:b0:09:92:2b:91:36:2c:c0:38:5e: 4c:20:1d:3e:ff:45:b0:29:6a:8f:a1:d6:65:c4:27: 7e:68:50:21:d6:a6:45:a2:1c:c8:ad:4c:c6:29:16: 97:19:51:0f:a0:44:28:06:f6:01:d2:35:44:d3:eb: 69:bd:ba:ca:e9:72:bb:15:ea:f4:74:16:92:d5:1f: 04:d4:48:ca:62:00:4b:df:ef:44:2c:9b:cd:b2:34: 5f:00:fa:ed:d9:2c:2e:25:f1:4e:4e:68:56:cc:0d: fc:3f:92:88:e6:d7:4f:bd:a3:50:70:a2:de:3b:f7: de:77:f1:48:f9:58:6a:fc:55:c6:68:c6:b1:68:35: cf:a7:2f:34:de:27:db:16:d2:ef:8d:c7:35:47:51: 1a:2f:a0:33:be:b5:26:6d:54:7c:b1:08:ff:2c:30: ca:ca:ab:16:92:9d:c5:88:dc:ef:e1:07:de:fe:61: 29:d1:22:e2:39:f3:ae:ee:70:b5:53:37:e3:45:ae: 9a:d4:0f:86:6b:ca:c6:20:95:30:78:0e:e0:0e:78: b7:6e:0a:bf:20:34:2e:2f:e9:28:51:a8:6e:f2:e5: 66:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:21:B9:9A:6B:1F:1E:C0:50:65:47:A9:6F:BC:CE:68:9B:86:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9802dda9-f341-3f6c-b874-a50094f59d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.74.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c8:5b:19:e7:48:5b:65:7c:c8:63:7f:6c:88:ec:12:f7:1f: 83:da:d4:a6:f4:95:2c:c1:ee:db:f6:c6:53:f9:e1:09:df:1a: f3:e4:44:46:c4:01:2c:68:56:05:9e:25:4a:1e:d4:1b:ac:f5: 75:86:64:e7:98:71:26:dc:cc:9f:4b:96:34:69:47:38:5b:c0: 8c:44:b6:99:43:b8:c6:18:1d:f2:af:6b:81:1f:20:80:08:e7: e9:09:20:71:26:c4:d3:a7:4f:4b:4f:1c:a4:7a:4f:52:a7:51: ec:6f:b2:bd:81:29:94:36:fa:90:15:fc:80:17:26:f7:3c:3c: 4a:5a:3d:43:30:82:0f:31:0e:1a:e5:41:7d:67:e8:4a:9e:82: 0d:bb:c1:0e:44:08:d5:99:13:de:c9:35:c7:39:40:85:a7:98: c1:43:e0:c7:d5:43:a0:72:f3:81:ca:09:fc:8c:5b:51:aa:df: d8:ea:5b:b3:f4:e8:15:e3:eb:d5:a0:62:b8:97:9c:c9:4f:60: 30:da:1c:e2:ec:09:0b:64:36:7b:3f:17:0e:6e:86:78:bb:c1: 97:5c:80:55:0a:88:ed:d6:25:25:d8:2f:03:2e:90:34:2e:b8: 1c:41:c3:3e:5b:d7:44:f8:0c:5b:f4:31:a9:0a:8f:ec:30:75: 3c:46:cc:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0626Znp8sSu5eOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDMwMzgxNjQtOTVmNS00OTg0LWExYTQtZDcyZGVmOWVlZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3heCFUsBs81IKjxlWRBwOfWf5wtUDRNwHHCB pZhGEFrTpbAJkiuRNizAOF5MIB0+/0WwKWqPodZlxCd+aFAh1qZFohzIrUzGKRaX GVEPoEQoBvYB0jVE0+tpvbrK6XK7Fer0dBaS1R8E1EjKYgBL3+9ELJvNsjRfAPrt 2SwuJfFOTmhWzA38P5KI5tdPvaNQcKLeO/fed/FI+Vhq/FXGaMaxaDXPpy803ifb FtLvjcc1R1EaL6AzvrUmbVR8sQj/LDDKyqsWkp3FiNzv4Qfe/mEp0SLiOfOu7nC1 UzfjRa6a1A+Ga8rGIJUweA7gDni3bgq/IDQuL+koUahu8uVmIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ8Ibmaax8ewFBlR6lvvM5om4awMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvOTgwMmRkYTktZjM0MS0z ZjZjLWI4NzQtYTUwMDk0ZjU5ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EoIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXIWxnnSFtlfMhjf2yI7BL3H4Pa1Kb0lSzB7tv2xlP54QnfGvPkREbE ASxoVgWeJUoe1Bus9XWGZOeYcSbczJ9LljRpRzhbwIxEtplDuMYYHfKva4EfIIAI 5+kJIHEmxNOnT0tPHKR6T1KnUexvsr2BKZQ2+pAV/IAXJvc8PEpaPUMwgg8xDhrl QX1n6Eqegg27wQ5ECNWZE97JNcc5QIWnmMFD4MfVQ6By84HKCfyMW1Gq39jqW7P0 6BXj69WgYriXnMlPYDDaHOLsCQtkNns/Fw5uhni7wZdcgFUKiO3WJSXYLwMukDQu uBxBwz5b10T4DFv0MakKj+wwdTxGzGQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:06:53 2025 by rpki-client