$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa File: 11cff431-9278-3524-bc39-08ba7453130b.roa (raw, json) Hash identifier: Mo+R88UMX5VY3o/Z3D66WY7eh1sqZWn0ZbcEDTXe83Y= Subject key identifier: A7:C4:83:09:4F:CA:26:68:8D:E0:79:1F:C2:0E:FE:DF:C0:C8:A7:61 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584AAB2662594CC92842FFDDC200 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 203724 IP address blocks: 208.81.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:62:59:4c:c9:28:42:ff:dd:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=2b73bbee-bd9c-4189-8e22-ff98710522b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:db:62:7e:1c:b4:48:76:c0:d6:ed:f3:f7:95: 27:8b:96:8c:0f:0b:a2:0c:82:31:70:1f:1c:37:79: 28:49:e0:92:a5:f2:57:37:62:c5:8f:6a:24:0c:07: 20:6b:96:57:42:fc:1a:b9:95:78:ba:ae:a9:ce:da: 05:0d:ff:d4:f8:a1:e6:24:8b:76:99:ca:4b:7d:64: d8:6d:5b:2e:30:cf:93:62:60:9b:22:11:e7:61:ae: 2c:d1:f8:58:2a:05:8f:59:8a:85:0b:78:92:45:93: ec:65:d7:d4:4f:1c:15:bf:c5:1c:d2:3e:58:d5:3d: bd:59:27:a3:8a:cb:e7:ae:f8:b0:11:f2:66:a0:f4: d7:5d:aa:b0:61:4a:cc:e9:bb:6f:82:83:ed:c5:47: d0:87:4e:d0:d3:45:94:2c:c1:b3:b7:30:21:a6:36: 94:16:08:6d:0c:dc:f5:e8:20:d4:5d:cd:42:17:a3: 8b:40:d3:c1:13:e4:90:23:9d:82:03:36:52:17:9a: bb:4b:a5:80:cb:39:11:02:40:6a:b2:c1:db:d7:d2: 60:47:6f:65:ff:f7:1e:e5:de:3e:1f:fb:3c:4c:f1: 73:1d:46:9b:78:c4:34:dd:2e:0f:35:4e:9f:fd:30: 71:f0:1a:0b:29:42:10:95:0f:fc:a7:28:94:aa:e2: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C4:83:09:4F:CA:26:68:8D:E0:79:1F:C2:0E:FE:DF:C0:C8:A7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.81.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:17:52:4d:bc:de:46:bb:6f:39:3a:a9:d2:47:38:a5:9a:23: d1:2a:c3:c5:79:d4:18:12:0d:da:e6:79:60:19:f6:7b:b6:fc: 20:81:89:4d:1f:7d:8f:b9:4c:71:c0:07:5d:63:fa:94:2b:2c: aa:36:61:b4:32:b2:89:f4:55:af:14:86:8f:d6:02:bc:1f:24: 98:0e:b9:0b:78:3e:17:81:72:81:8b:96:35:92:36:1d:2a:21: b7:d3:dc:1b:d8:4d:dc:7f:a8:79:16:8e:09:02:5e:b1:29:22: 9a:4f:80:0f:b3:26:9f:56:3c:81:fc:8c:90:b9:5c:e1:91:ac: 06:04:71:ed:b1:5b:1a:3d:ab:3b:74:7d:60:08:99:98:e3:03: c9:2a:f9:1f:99:ed:0b:96:37:91:79:07:9a:8f:f4:a2:67:e8: 51:40:8f:64:39:65:d2:55:6e:e0:ae:46:88:f7:4c:1a:4a:c3: 2f:67:69:a5:bf:07:d7:ba:29:b0:e7:62:df:8b:67:04:66:c9: 79:6c:34:8c:ef:ed:df:b7:4b:3a:17:16:a3:26:9c:06:47:d7: 37:19:9d:ee:84:85:d5:ab:ba:9e:6b:84:a0:94:38:c1:2d:56: 7d:3e:c4:e1:cf:32:73:74:cd:73:a9:c4:4e:8c:fa:53:17:97: 50:68:4e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmJZTMkoQv/dwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MmI3M2JiZWUtYmQ5Yy00MTg5LThlMjItZmY5ODcxMDUyMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNtifhy0SHbA1u3z95Uni5aMDwuiDIIxcB8c N3koSeCSpfJXN2LFj2okDAcga5ZXQvwauZV4uq6pztoFDf/U+KHmJIt2mcpLfWTY bVsuMM+TYmCbIhHnYa4s0fhYKgWPWYqFC3iSRZPsZdfUTxwVv8Uc0j5Y1T29WSej isvnrviwEfJmoPTXXaqwYUrM6btvgoPtxUfQh07Q00WULMGztzAhpjaUFghtDNz1 6CDUXc1CF6OLQNPBE+SQI52CAzZSF5q7S6WAyzkRAkBqssHb19JgR29l//ce5d4+ H/s8TPFzHUabeMQ03S4PNU6f/TBx8BoLKUIQlQ/8pyiUquKN8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfEgwlPyiZojeB5H8IO/t/AyKdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMTFjZmY0MzEtOTI3OC0z NTI0LWJjMzktMDhiYTc0NTMxMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMXUk283ka7bzk6qdJHOKWaI9Eqw8V51BgSDdrmeWAZ9nu2/CCBiU0f fY+5THHAB11j+pQrLKo2YbQyson0Va8Uho/WArwfJJgOuQt4PheBcoGLljWSNh0q IbfT3BvYTdx/qHkWjgkCXrEpIppPgA+zJp9WPIH8jJC5XOGRrAYEce2xWxo9qzt0 fWAImZjjA8kq+R+Z7QuWN5F5B5qP9KJn6FFAj2Q5ZdJVbuCuRoj3TBpKwy9naaW/ B9e6KbDnYt+LZwRmyXlsNIzv7d+3SzoXFqMmnAZH1zcZne6EhdWrup5rhKCUOMEt Vn0+xOHPMnN0zXOpxE6M+lMXl1BoTh8= -----END CERTIFICATE-----Generated at Wed Aug 6 14:09:56 2025 by rpki-client