$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bad0919-b564-3dee-96a4-a4f26f18891e.roa File: 0bad0919-b564-3dee-96a4-a4f26f18891e.roa (raw, json) Hash identifier: Hzja5XWkYyQy9MKfjxD4NMmE0rBp0QwVbn93QZLwVd0= Subject key identifier: 4D:E5:B5:E3:8D:67:8A:77:2C:40:56:18:F1:71:3E:89:A4:86:69:28 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A84091CC13BE468C7597D0A40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bad0919-b564-3dee-96a4-a4f26f18891e.roa Signing time: Mon 14 Jul 2025 12:45:49 +0000 ROA not before: Mon 14 Jul 2025 12:45:49 +0000 ROA not after: Sun 12 Oct 2025 12:45:49 +0000 asID: 3257 IP address blocks: 216.132.208.0/22 maxlen: 24 216.132.212.0/22 maxlen: 24 216.132.216.0/22 maxlen: 24 216.132.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:09:1c:c1:3b:e4:68:c7:59:7d:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 14 12:45:49 2025 GMT Not After : Oct 12 12:45:49 2025 GMT Subject: CN=b0f00e92-7931-4e7a-9877-3739630bbfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a2:9f:b8:77:cb:bf:0e:5c:ce:d4:3a:a2:9c: 87:ed:50:cb:53:a2:fc:41:f6:9e:f8:eb:df:56:a1: 77:c5:ac:eb:d0:d3:da:78:fc:6a:ae:2f:a8:ab:04: 3b:33:70:24:b8:ae:c0:09:d7:b8:11:39:cc:c9:6c: 61:3c:26:80:ff:15:26:d6:ef:19:e5:ad:22:c0:3f: 0e:69:4a:cf:d6:c3:9d:d4:81:ec:bf:68:56:30:63: 64:bc:b4:89:3c:50:28:01:1e:37:ee:de:ac:b6:63: ad:31:96:32:c3:06:bf:be:90:d0:61:8f:a9:9a:3f: 55:60:19:3e:10:53:e2:b9:75:90:e0:18:e1:e2:b8: df:af:a8:77:7e:60:d8:5d:4e:94:49:26:c3:44:14: c6:16:fc:14:30:b6:0b:4c:c4:41:10:72:27:a0:15: 09:4b:97:12:93:a9:e9:b2:91:c8:4e:15:f1:55:ee: 76:eb:60:62:f9:b7:5d:c2:23:fb:9c:fc:02:16:7a: 4d:69:d1:6a:22:85:32:f7:c0:5a:26:3c:c4:64:55: 7b:11:5d:11:a0:a4:7d:90:14:cd:a7:08:b7:01:9d: 5a:2b:75:59:e7:10:25:2a:78:51:d0:3c:68:3a:ff: c5:ac:11:06:1f:a3:cf:13:a1:b4:96:8e:8e:ea:1e: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E5:B5:E3:8D:67:8A:77:2C:40:56:18:F1:71:3E:89:A4:86:69:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bad0919-b564-3dee-96a4-a4f26f18891e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:f4:26:de:3b:0e:be:30:74:ef:ef:75:20:55:19:0a:68:c1: f9:86:89:af:f4:fe:e8:fb:e9:5e:b6:07:fa:3f:43:b7:21:c6: c7:e0:b8:8b:a3:63:73:23:24:8d:2a:c4:68:da:d6:14:8c:37: 2a:5c:18:4a:19:69:a7:cf:00:87:9b:c3:e6:c5:e1:e9:cd:6e: 3d:83:8d:c8:7f:30:ac:df:5e:dd:9c:9c:5e:91:ce:5e:dd:13: c9:92:3e:39:51:99:e4:bb:f2:a9:c5:b3:e2:fa:ad:52:b8:cd: d1:bd:d2:f2:bc:71:1b:0b:61:c2:c7:a3:e2:3f:24:d5:9e:07: ad:b6:36:d1:3d:7d:3a:f1:23:72:64:0e:0c:ca:be:4b:37:26: ca:a0:1d:36:25:64:2f:9b:53:4a:71:84:ab:17:ad:05:5c:96: 18:c0:2e:ef:30:58:9b:d2:9f:6d:05:0f:98:da:39:17:46:28: 86:0c:a3:95:22:92:d8:ec:a4:7a:2c:9c:2e:15:74:26:0b:0d: ee:df:9d:70:77:ca:f2:d7:6a:d6:70:49:50:34:a3:30:61:d6: 0c:99:57:f8:4c:84:2c:54:fc:b1:77:29:e4:3d:c3:f4:f0:16: 67:67:76:71:b4:b1:c4:82:6b:8f:ff:15:f6:34:60:19:90:ad: 5a:32:6c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqECRzBO+Rox1l9CkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcxNDEyNDU0OVoXDTI1MTAxMjEyNDU0OVowLzEtMCsGA1UEAxMk YjBmMDBlOTItNzkzMS00ZTdhLTk4NzctMzczOTYzMGJiZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6KfuHfLvw5cztQ6opyH7VDLU6L8Qfae+Ovf VqF3xazr0NPaePxqri+oqwQ7M3AkuK7ACde4ETnMyWxhPCaA/xUm1u8Z5a0iwD8O aUrP1sOd1IHsv2hWMGNkvLSJPFAoAR437t6stmOtMZYywwa/vpDQYY+pmj9VYBk+ EFPiuXWQ4Bjh4rjfr6h3fmDYXU6USSbDRBTGFvwUMLYLTMRBEHInoBUJS5cSk6np spHIThXxVe5262Bi+bddwiP7nPwCFnpNadFqIoUy98BaJjzEZFV7EV0RoKR9kBTN pwi3AZ1aK3VZ5xAlKnhR0DxoOv/FrBEGH6PPE6G0lo6O6h72TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3lteONZ4p3LEBWGPFxPomkhmkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGJhZDA5MTktYjU2NC0z ZGVlLTk2YTQtYTRmMjZmMTg4OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ITQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAML0Jt47Dr4wdO/vdSBVGQpowfmGia/0/uj76V62B/o/Q7chxsfguIuj Y3MjJI0qxGja1hSMNypcGEoZaafPAIebw+bF4enNbj2Djch/MKzfXt2cnF6Rzl7d E8mSPjlRmeS78qnFs+L6rVK4zdG90vK8cRsLYcLHo+I/JNWeB622NtE9fTrxI3Jk DgzKvks3JsqgHTYlZC+bU0pxhKsXrQVclhjALu8wWJvSn20FD5jaORdGKIYMo5Ui ktjspHosnC4VdCYLDe7fnXB3yvLXatZwSVA0ozBh1gyZV/hMhCxU/LF3KeQ9w/Tw FmdndnG0scSCa4//FfY0YBmQrVoybMs= -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:31 2025 by rpki-client