$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa File: 301685f9-eb30-346d-a98c-6f6531412033.roa (raw, json) Hash identifier: SbfGllz1NWi/kF10hEPw0bXCNbdAxvzzIUNw1cggKhk= Subject key identifier: 4E:2A:61:F7:5E:27:36:98:D2:D7:0F:07:49:C7:A8:B6:EB:87:58:B2 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584AA85BB74AA257CC41C5AF49C0 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 209.114.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b7:4a:a2:57:cc:41:c5:af:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=1a680d17-748e-4a26-8e2e-db9476b98d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:7b:50:c1:5c:ea:54:52:58:c0:0f:38:1d: 51:28:37:ba:cf:5e:6e:eb:df:df:7f:56:22:ba:52: ae:d5:08:f3:d8:2d:82:52:16:30:0f:f9:67:73:c8: ab:0e:4d:ee:80:0b:3e:e6:d9:bf:2f:d8:ed:93:c9: d1:99:96:99:d1:88:39:ac:5f:05:32:9d:38:15:ba: 63:1d:8d:7d:31:f9:0e:47:f0:7c:72:f2:96:2d:3a: 5d:c8:78:12:ba:af:1f:33:1d:5e:cb:6c:0d:b3:b3: d7:d8:99:bb:e6:c7:19:53:92:12:0f:44:e4:d2:f7: 1f:7c:01:92:eb:85:5e:2e:3d:b5:66:6e:35:94:b9: b0:c4:14:48:ab:e7:58:c6:f5:91:df:7b:29:c9:53: 08:de:a8:12:4e:46:8a:a4:28:a2:cc:2c:6d:80:d2: eb:4c:fc:3d:4e:64:61:37:f5:b4:eb:37:78:61:72: 52:26:d3:fa:53:b1:98:68:cf:bb:56:2f:e1:8b:9d: 83:aa:ed:58:5f:22:15:50:c3:51:27:df:4c:69:9d: 03:90:23:99:59:ae:72:7c:2c:a7:70:e0:0a:c6:c0: 74:35:d0:41:72:7b:95:06:80:4f:36:6f:7b:f2:d9: 20:77:a3:32:40:3a:8e:8f:da:23:7c:b7:db:28:42: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2A:61:F7:5E:27:36:98:D2:D7:0F:07:49:C7:A8:B6:EB:87:58:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ca:ac:6e:4c:11:1b:52:a8:23:5e:81:77:43:7a:f9:43:81: bd:65:0b:f0:f5:a9:88:40:23:81:54:12:71:c7:04:05:18:36: 70:f1:6e:82:a7:1c:06:51:b5:bb:71:3a:0b:93:14:cc:71:00: 28:47:92:69:c0:d0:11:a3:7f:e6:6b:4c:7c:48:0e:5d:4b:f4: 73:32:09:47:52:63:47:90:9b:e0:3b:f5:71:33:f6:9e:56:25: 4f:0d:8a:85:c9:ff:f7:72:ba:93:3f:22:2f:f0:83:0e:b8:08: bf:41:d8:fd:2c:83:8f:a9:60:d1:88:c0:ab:e7:88:a1:42:15: 7b:ad:d6:81:19:c6:c2:22:61:4c:d7:19:ef:2a:6a:8b:d3:91: 0e:92:6a:f9:7c:51:b8:02:a1:6b:01:74:e2:00:fd:64:fa:d8: 2f:16:cd:22:28:87:f9:77:76:d2:63:0e:b7:b5:61:12:03:e2: e2:2a:b4:94:ec:e2:86:87:c3:7e:5d:65:a2:74:69:9b:ab:82: 62:11:8a:6d:6f:a7:72:86:01:eb:f4:fe:d5:5f:7c:2f:b5:99: 85:59:d9:a1:68:f8:cb:03:b4:28:51:50:6d:a8:fb:a5:cb:eb: 85:95:b8:b7:e8:98:2d:7e:9c:2c:39:6b:6c:f6:9c:c4:9e:5c: 2f:86:ea:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7dKolfMQcWvScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MWE2ODBkMTctNzQ4ZS00YTI2LThlMmUtZGI5NDc2Yjk4ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv17UMFc6lRSWMAPOB1RKDe6z15u69/ff1Yi ulKu1Qjz2C2CUhYwD/lnc8irDk3ugAs+5tm/L9jtk8nRmZaZ0Yg5rF8FMp04Fbpj HY19MfkOR/B8cvKWLTpdyHgSuq8fMx1ey2wNs7PX2Jm75scZU5ISD0Tk0vcffAGS 64VeLj21Zm41lLmwxBRIq+dYxvWR33spyVMI3qgSTkaKpCiizCxtgNLrTPw9TmRh N/W06zd4YXJSJtP6U7GYaM+7Vi/hi52Dqu1YXyIVUMNRJ99MaZ0DkCOZWa5yfCyn cOAKxsB0NdBBcnuVBoBPNm978tkgd6MyQDqOj9ojfLfbKEI2DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4qYfdeJzaY0tcPB0nHqLbrh1iyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMzAxNjg1ZjktZWIzMC0z NDZkLWE5OGMtNmY2NTMxNDEyMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjKrG5MERtSqCNegXdDevlDgb1lC/D1qYhAI4FUEnHHBAUYNnDxboKn HAZRtbtxOguTFMxxAChHkmnA0BGjf+ZrTHxIDl1L9HMyCUdSY0eQm+A79XEz9p5W JU8NioXJ//dyupM/Ii/wgw64CL9B2P0sg4+pYNGIwKvniKFCFXut1oEZxsIiYUzX Ge8qaovTkQ6Savl8UbgCoWsBdOIA/WT62C8WzSIoh/l3dtJjDre1YRID4uIqtJTs 4oaHw35dZaJ0aZurgmIRim1vp3KGAev0/tVffC+1mYVZ2aFo+MsDtChRUG2o+6XL 64WVuLfomC1+nCw5a2z2nMSeXC+G6ig= -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:04 2025 by rpki-client