$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa File: a98302e0-6fdd-34c6-ae18-5ecfece042af.roa (raw, json) Hash identifier: yHHTgycBSnmrRvQT1vnBpr0rrVOfvFWyysFr1487KPc= Subject key identifier: 92:B1:04:8D:3A:19:67:DF:97:04:4C:84:8B:B7:7D:27:0C:17:70:D9 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584AADF1035CBD37053377E21AC0 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7782 IP address blocks: 204.17.139.0/24 maxlen: 24 204.17.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:03:5c:bd:37:05:33:77:e2:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=5d02efbf-9d98-4e4d-be12-0ed673ecd8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:02:34:21:97:a3:b1:5d:2c:1c:d2:b1:a3: 9a:39:26:1c:7e:17:2e:f2:d6:74:54:78:b5:d3:a1: 22:d7:7b:0c:54:da:56:0a:22:a5:18:78:9b:c5:0f: 3c:2c:b6:08:a4:75:29:ae:ea:8b:ea:35:63:ce:12: 24:df:fb:16:5b:1b:19:2e:23:f1:67:51:cd:44:79: 0f:08:95:43:0e:a0:2b:c1:65:b6:1c:55:d5:49:6b: c3:6a:25:c1:0a:b3:42:f5:5c:eb:cb:98:7c:62:d8: a2:b1:d4:da:29:33:89:68:cc:e7:3d:8b:2c:cf:54: b0:5f:47:49:8a:0a:5b:75:6a:59:d1:41:82:85:56: b5:60:3d:30:69:45:a7:8b:b8:a8:95:83:bc:36:78: db:f7:fd:b2:d5:3d:5b:d0:43:3d:0e:65:89:36:d5: 39:fe:e8:26:5d:a8:38:51:9d:cf:5d:f7:0f:1b:21: 13:d1:0a:e9:06:ed:60:ca:8d:b6:7b:95:20:1c:8c: 6c:19:80:49:5a:a7:f8:05:48:00:47:5a:5e:93:77: a7:33:87:d6:a6:77:08:f7:75:9b:43:56:a3:36:a7: 1e:2c:1c:7c:46:44:30:08:04:19:84:06:f2:64:b7: be:7c:93:4f:9a:64:db:f6:2b:2d:cd:13:28:80:af: 24:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:04:8D:3A:19:67:DF:97:04:4C:84:8B:B7:7D:27:0C:17:70:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 204.17.139.0-204.17.140.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f3:a9:1a:d2:bc:32:01:4c:67:c7:1e:c4:68:05:aa:86:6f: fd:6a:b8:01:53:82:08:9d:49:2c:3e:03:d8:70:d7:ac:c8:88: 5c:35:2e:80:d3:e8:a1:66:d5:91:66:44:76:64:7c:a9:6b:79: 9d:3c:38:ed:c2:0e:5a:8b:78:f7:3b:ba:75:40:4b:09:62:f3: d6:67:87:22:0f:40:69:d6:0b:7e:a1:d1:dc:f5:57:70:6b:77: 08:93:64:c8:4a:85:f8:b6:c8:cc:a5:cd:6a:70:df:b3:bf:76: 72:5e:43:dd:09:4f:74:50:02:24:81:b6:98:77:b0:c0:90:cc: ae:52:d0:a2:6e:2a:85:e4:1e:37:7c:c2:e2:fb:c1:d9:9c:63: 93:10:a4:b9:c7:ad:e9:f9:01:1d:98:47:bd:7b:3e:ef:b5:a6: f8:b6:7f:9e:cd:2f:bc:af:a3:4f:ef:e8:46:a3:a7:6c:fb:a9: 9b:d8:30:e3:11:c2:d4:45:97:58:fa:16:48:78:17:7d:d7:86: 81:29:48:7c:a2:6a:05:15:82:bf:6a:75:21:11:8b:86:9c:b7: 5f:a3:73:d0:79:0a:83:b8:17:99:ac:96:f0:16:34:8d:08:7f: b0:c0:a9:5e:60:6d:4f:88:36:c8:1a:48:81:9a:d8:27:2c:f0: 5e:49:24:a8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqt8QNcvTcFM3fiGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NWQwMmVmYmYtOWQ5OC00ZTRkLWJlMTItMGVkNjczZWNkOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1MCNCGXo7FdLBzSsaOaOSYcfhcu8tZ0VHi1 06Ei13sMVNpWCiKlGHibxQ88LLYIpHUpruqL6jVjzhIk3/sWWxsZLiPxZ1HNRHkP CJVDDqArwWW2HFXVSWvDaiXBCrNC9Vzry5h8YtiisdTaKTOJaMznPYssz1SwX0dJ igpbdWpZ0UGChVa1YD0waUWni7iolYO8Nnjb9/2y1T1b0EM9DmWJNtU5/ugmXag4 UZ3PXfcPGyET0QrpBu1gyo22e5UgHIxsGYBJWqf4BUgAR1pek3enM4fWpncI93Wb Q1ajNqceLBx8RkQwCAQZhAbyZLe+fJNPmmTb9istzRMogK8kNQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJKxBI06GWfflwRMhIu3fScMF3DZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYTk4MzAyZTAtNmZkZC0z NGM2LWFlMTgtNWVjZmVjZTA0MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMEYsD BADMEYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJ/OpGtK8MgFMZ8cexGgFqoZv/Wq4AVOCCJ1JLD4D2HDX rMiIXDUugNPooWbVkWZEdmR8qWt5nTw47cIOWot49zu6dUBLCWLz1meHIg9AadYL fqHR3PVXcGt3CJNkyEqF+LbIzKXNanDfs792cl5D3QlPdFACJIG2mHewwJDMrlLQ om4qheQeN3zC4vvB2ZxjkxCkucet6fkBHZhHvXs+77Wm+LZ/ns0vvK+jT+/oRqOn bPupm9gw4xHC1EWXWPoWSHgXfdeGgSlIfKJqBRWCv2p1IRGLhpy3X6Nz0HkKg7gX mayW8BY0jQh/sMCpXmBtT4g2yBpIgZrYJyzwXkkkqA== -----END CERTIFICATE-----Generated at Tue Aug 5 20:08:37 2025 by rpki-client