$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa File: 4789457a-e489-338a-acab-d987ad29a7a6.roa (raw, json) Hash identifier: bX6WoaQSxJHsxSS/4aDms/61yP0CUBchIECLO2wlVa0= Subject key identifier: 8E:F7:77:E6:77:39:04:A8:0E:74:EF:EF:CF:E2:D6:37:54:24:DB:F9 Certificate issuer: /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b Certificate serial: 010D0C9F4328584A9900C6136D5338221C603280 Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 32146 IP address blocks: 208.94.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c6:13:6d:53:38:22:1c:60:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=5b1334e1-6be4-4596-ad86-563d357d8a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:2b:19:33:2a:ae:30:32:56:1f:dc:8b:21: 99:8f:8e:00:9a:7f:d0:c3:fa:9d:67:d1:42:cc:9c: e7:04:f9:46:68:e0:01:d0:9b:32:d2:99:eb:ff:4c: 16:7f:13:5d:c0:73:00:63:bf:79:06:40:83:e2:85: 9f:a8:7c:b6:50:46:07:c4:1b:d3:53:5d:60:54:8c: 93:9e:92:c0:aa:63:65:cb:e3:25:35:45:4f:91:c9: 1b:83:6f:2c:d6:a3:5e:89:fc:a9:76:f0:98:00:cf: d9:56:32:cd:07:4a:d7:5e:e1:81:62:76:e6:b6:c4: 57:85:1d:05:34:8a:61:18:40:bd:3d:88:c5:a6:be: 9a:6c:01:33:20:9e:08:54:14:99:2a:0e:67:2e:0a: a6:c7:15:24:9d:ad:51:6b:d2:5a:80:6d:a2:6b:c4: e7:6e:09:ef:d2:a5:86:ff:5f:f4:7d:97:47:aa:ee: d6:6f:73:e1:49:73:64:49:9a:ee:ab:70:42:a9:0b: 6b:79:3c:7b:97:48:a2:b5:70:31:32:6a:c6:83:e0: f7:ab:3b:99:c3:e0:7d:37:49:3c:dd:8e:d7:f3:25: 4a:09:2a:7a:45:d6:fa:f9:05:14:55:3c:b7:3c:a2: 6a:aa:f3:db:9f:c7:14:20:17:d8:4e:a6:cb:43:a7: f4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F7:77:E6:77:39:04:A8:0E:74:EF:EF:CF:E2:D6:37:54:24:DB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl X509v3 Authority Key Identifier: keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer sbgp-ipAddrBlock: critical IPv4: 208.94.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:54:8f:d7:dd:4a:9d:e2:b7:31:dc:6e:6e:ff:62:ac:56:dd: 0b:2c:2c:18:0e:20:08:ae:f6:46:84:36:da:15:c9:43:e0:bd: 54:47:86:81:ad:d2:4c:6b:50:da:b2:54:3f:58:7d:63:f6:39: 42:7d:15:c3:b7:64:65:bf:82:18:cd:f6:f0:c8:9d:0e:bc:8b: 87:2d:98:11:b2:ca:88:04:eb:1e:e1:da:85:82:f6:a5:00:a7: 3f:0a:42:0f:82:7a:fe:10:68:62:a6:87:34:33:d8:33:6d:30: b8:9d:57:20:7e:3e:7c:85:af:98:f4:a3:ec:56:b7:8b:f1:01: 35:54:e8:5c:fd:f4:c2:40:8b:72:42:15:da:bd:34:50:f9:18: 02:03:76:35:a9:20:88:76:3c:72:b2:4b:22:03:fd:4a:7e:3f: 20:00:a2:b1:4d:16:4d:a2:ac:09:12:58:92:af:a6:6f:55:13: 73:37:f5:a8:c2:57:58:c0:0e:4f:04:e6:f1:4c:7c:20:7e:95: ae:01:4b:dc:06:a9:77:bf:7c:9e:f4:fc:c6:ed:20:0b:8a:ab: 53:45:0d:d2:73:37:70:fe:fc:5d:e2:c1:33:bf:c6:07:d3:6b: 37:86:8b:fa:3b:6d:37:16:d4:03:e2:17:f9:31:37:d2:cc:3f: d8:3f:63:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMYTbVM4IhxgMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNDE1MTMtODY5Yy00MWYyLTkzMTktMTFkMWU4Yjk1 ZTJiMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NWIxMzM0ZTEtNmJlNC00NTk2LWFkODYtNTYzZDM1N2Q4YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaYrGTMqrjAyVh/ciyGZj44Amn/Qw/qdZ9FC zJznBPlGaOAB0Jsy0pnr/0wWfxNdwHMAY795BkCD4oWfqHy2UEYHxBvTU11gVIyT npLAqmNly+MlNUVPkckbg28s1qNeifypdvCYAM/ZVjLNB0rXXuGBYnbmtsRXhR0F NIphGEC9PYjFpr6abAEzIJ4IVBSZKg5nLgqmxxUkna1Ra9JagG2ia8Tnbgnv0qWG /1/0fZdHqu7Wb3PhSXNkSZruq3BCqQtreTx7l0iitXAxMmrGg+D3qzuZw+B9N0k8 3Y7X8yVKCSp6Rdb6+QUUVTy3PKJqqvPbn8cUIBfYTqbLQ6f0awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI73d+Z3OQSoDnTv78/i1jdUJNv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0 MTUxMy04NjljLTQxZjItOTMxOS0xMWQxZThiOTVlMmIvNDc4OTQ1N2EtZTQ4OS0z MzhhLWFjYWItZDk4N2FkMjlhN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDZkNDE1MTMtODY5Yy00MWYyLTkz MTktMTFkMWU4Yjk1ZTJiL2Q2ZDQxNTEzLTg2OWMtNDFmMi05MzE5LTExZDFlOGI5 NWUyYi5jcmwwHwYDVR0jBBgwFoAUtCkCM9+TvJn+B+Gn0hP6wrmoQE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0MTUxMy04NjljLTQxZjItOTMxOS0xMWQx ZThiOTVlMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBUj9fdSp3itzHcbm7/YqxW3QssLBgOIAiu9kaENtoVyUPgvVRHhoGt 0kxrUNqyVD9YfWP2OUJ9FcO3ZGW/ghjN9vDInQ68i4ctmBGyyogE6x7h2oWC9qUA pz8KQg+Cev4QaGKmhzQz2DNtMLidVyB+PnyFr5j0o+xWt4vxATVU6Fz99MJAi3JC Fdq9NFD5GAIDdjWpIIh2PHKySyID/Up+PyAAorFNFk2irAkSWJKvpm9VE3M39ajC V1jADk8E5vFMfCB+la4BS9wGqXe/fJ70/MbtIAuKq1NFDdJzN3D+/F3iwTO/xgfT azeGi/o7bTcW1APiF/kxN9LMP9g/Y8s= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:45 2025 by rpki-client