$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa File: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (raw, json) Hash identifier: hpZFSh6yo0iattRsElkOfpVzTUAAAqUu2H6IYY21jOo= Subject key identifier: CB:E4:AE:AA:23:BF:24:74:D7:B4:3B:9D:A8:37:97:25:F1:A9:9B:F5 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584A5CFB330B9CDA58129583AC00 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:33:0b:9c:da:58:12:95:83:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=401757ba-f626-4f77-830b-a52c00325255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:ef:6d:bb:c5:62:b5:dc:a9:50:b8:89:27: f5:fc:b6:31:22:8c:85:e4:38:ff:84:62:39:96:e4: 0a:8b:ac:cc:d7:1a:a1:11:4b:2c:b8:71:a9:f2:dd: 09:f1:ad:2f:24:ba:e2:de:a2:37:4b:00:f5:c4:c4: d1:15:40:a3:2e:44:25:0b:cb:d7:51:2b:99:f5:d3: bd:5f:10:79:91:b8:cd:87:b8:6c:21:bf:bf:1e:84: ef:89:ad:90:ba:ac:c1:aa:89:bc:12:d1:72:bd:17: fa:49:dd:9a:48:8f:2c:08:95:ea:02:6d:39:13:c7: 2d:4f:9f:33:97:40:b1:8b:71:4e:fe:8f:2d:75:dd: 2e:c2:b5:6d:37:98:f0:8f:db:f8:9e:c4:78:6f:c5: d9:17:85:43:d6:ba:62:c9:15:58:55:8d:7c:48:a6: 00:ea:dc:ca:f7:4f:23:3b:ae:fa:71:82:15:f7:87: d4:2e:bf:64:a8:77:1c:ed:fb:63:b1:b7:dc:1f:30: 4e:42:07:ac:fa:76:43:82:5d:63:e1:f1:e6:2c:26: d9:ac:32:0f:91:c1:be:7c:c8:94:4c:2e:00:c9:3c: 8f:a2:72:42:d7:85:81:a9:e3:25:da:83:25:dc:ea: 43:d3:9a:81:02:d0:49:e5:37:e2:b9:02:17:af:8a: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E4:AE:AA:23:BF:24:74:D7:B4:3B:9D:A8:37:97:25:F1:A9:9B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:01:50:cc:63:95:42:a9:0f:58:1e:96:8a:26:16:95:92:ab: f3:5b:57:47:6a:f6:bb:5d:2c:a2:25:c9:c5:64:a0:8e:37:b8: b2:64:3b:6c:64:90:42:d8:e6:54:6d:da:f2:1a:a6:d9:9c:61: 4b:72:8f:13:db:36:a3:bb:b6:87:31:94:f8:c9:5c:14:bd:d0: 26:90:4a:18:05:1f:80:1f:d2:cf:94:b9:90:6b:d5:f9:b9:c7: 95:b3:5c:4c:19:1b:33:c3:7f:35:87:b8:fd:8e:a0:9a:1c:1f: 5b:1d:59:c7:72:21:13:de:44:17:b8:77:69:39:5d:0b:da:b2: 43:37:6d:95:0a:3a:f8:c5:d1:06:ca:0e:38:d0:81:bd:3e:66: 08:6d:f8:d2:4c:38:ef:b8:e8:d3:bc:cb:fb:c7:ed:11:ae:ca: a8:8f:b5:67:54:56:7f:09:ca:b4:73:b7:43:9c:da:b6:01:f7: 8c:2d:a0:85:1c:25:d4:43:fc:61:d8:5d:a8:00:ba:28:38:cf: 17:ec:84:a3:47:7f:4a:f5:cc:5a:84:9d:6d:c9:17:07:0e:8c: 1b:93:e8:54:56:89:0a:e1:c5:b8:d6:3a:61:c0:ff:14:84:7c: a5:4d:37:a3:69:c1:af:a8:8c:ce:d7:84:bf:e6:ed:5c:c7:44: 39:65:ce:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zMLnNpYEpWDrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NDAxNzU3YmEtZjYyNi00Zjc3LTgzMGItYTUyYzAwMzI1MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdDvbbvFYrXcqVC4iSf1/LYxIoyF5Dj/hGI5 luQKi6zM1xqhEUssuHGp8t0J8a0vJLri3qI3SwD1xMTRFUCjLkQlC8vXUSuZ9dO9 XxB5kbjNh7hsIb+/HoTvia2QuqzBqom8EtFyvRf6Sd2aSI8sCJXqAm05E8ctT58z l0Cxi3FO/o8tdd0uwrVtN5jwj9v4nsR4b8XZF4VD1rpiyRVYVY18SKYA6tzK908j O676cYIV94fULr9kqHcc7ftjsbfcHzBOQges+nZDgl1j4fHmLCbZrDIPkcG+fMiU TC4AyTyPonJC14WBqeMl2oMl3OpD05qBAtBJ5TfiuQIXr4pDjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvkrqojvyR017Q7nag3lyXxqZv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvNTAzZTNhZWEtN2ZmNy0z ZTM3LTk2MTEtMmZhNjVlZTBkNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYBUMxjlUKpD1geloomFpWSq/NbV0dq9rtdLKIlycVkoI43uLJkO2xk kELY5lRt2vIaptmcYUtyjxPbNqO7tocxlPjJXBS90CaQShgFH4Af0s+UuZBr1fm5 x5WzXEwZGzPDfzWHuP2OoJocH1sdWcdyIRPeRBe4d2k5XQvaskM3bZUKOvjF0QbK DjjQgb0+Zght+NJMOO+46NO8y/vH7RGuyqiPtWdUVn8JyrRzt0Oc2rYB94wtoIUc JdRD/GHYXagAuig4zxfshKNHf0r1zFqEnW3JFwcOjBuT6FRWiQrhxbjWOmHA/xSE fKVNN6Npwa+ojM7XhL/m7VzHRDllzls= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:23 2025 by rpki-client