$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa File: 2c227bfd-f08b-398c-9969-3fff99fa4025.roa (raw, json) Hash identifier: g1X2p+9uX8CMCYoJtDNFcTVDVrCZYGPxLPAGHEf7tlQ= Subject key identifier: BC:CC:64:A9:5D:A5:F2:F9:8F:BE:BB:DD:08:61:82:7E:83:2C:00:9F Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F4328584ABD4B8C3FBFCC9160690F9280 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 397444 IP address blocks: 208.68.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:8c:3f:bf:cc:91:60:69:0f:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=d67e2084-acbb-4700-9a42-d2150ef5bbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:ae:db:aa:f2:7b:9d:07:f6:e9:c8:ea:a8: d5:4c:bf:db:4b:5d:39:f0:5c:e5:cf:b9:40:50:f3: c6:bf:b8:0c:d4:b2:88:12:71:cb:63:59:c7:dc:20: 0d:f5:fc:02:ea:49:36:80:33:00:98:3d:8c:55:ac: 76:b1:4b:c1:f1:29:90:4e:99:d8:38:a3:a1:68:4c: 88:c1:11:26:66:5e:9f:90:8e:73:4a:a7:16:e3:9e: 9c:4f:30:fc:e0:75:4f:b1:dd:cc:0e:6b:9a:04:8e: 51:bc:a7:08:aa:4e:c2:65:fd:87:ad:07:98:68:22: 0f:f1:4d:cc:1a:50:8e:60:e0:8f:c6:d2:3c:6e:fc: 9c:d3:27:72:03:1e:11:15:95:f9:53:13:90:34:19: 75:e8:be:52:c2:fc:91:6f:8f:e5:35:e1:a9:11:2e: e8:32:cd:ca:7e:09:3a:b4:9f:9a:1c:86:40:ca:aa: 29:45:ef:d2:54:3d:86:94:73:04:e4:b6:59:d5:7c: 72:04:d0:41:e9:45:1c:19:f5:cf:e0:e9:88:45:b8: 92:f8:46:ca:6b:68:b7:6a:22:e5:12:c8:d0:c5:8c: ca:62:8e:97:3e:75:85:de:97:ba:2b:92:1b:dc:23: 3f:f1:5d:e6:f6:ae:87:29:96:c9:05:ed:a5:ea:8a: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CC:64:A9:5D:A5:F2:F9:8F:BE:BB:DD:08:61:82:7E:83:2C:00:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e8:9f:53:4b:8e:72:cc:0c:30:93:c2:3d:5c:bf:53:02:f3: 50:f9:05:c9:a9:39:36:0b:53:ed:85:d7:d9:87:94:b2:12:e8: c3:25:a5:c3:89:b7:85:81:66:14:8e:a6:37:7d:c9:80:07:30: ea:c6:5e:26:7c:05:6d:26:8d:7f:43:82:d1:2b:2e:ed:5a:52: 8b:f1:f2:2a:67:d6:3b:a7:2b:f0:eb:4f:13:01:06:51:12:88: 6c:a8:b5:e6:16:5f:a0:06:1a:2f:78:05:df:44:8a:e5:af:e2: f2:09:9a:58:0d:b3:81:f2:68:c7:2b:6c:1e:3c:4b:ad:58:00: 9d:a2:9c:86:05:99:c6:e3:a2:ad:18:48:2f:ac:3e:68:c7:2a: ee:e5:74:18:6e:d5:22:6b:a7:8c:88:e8:17:97:ff:55:e9:f5: a6:97:c1:89:67:08:29:6f:56:4f:12:ea:0f:22:f1:cb:2e:5b: 50:bd:5d:a1:20:ee:78:08:f0:c6:48:1d:2b:dd:3e:bd:6b:9b: 26:45:b4:70:fc:2c:cb:42:cd:20:42:e0:25:4d:db:29:9c:95: 41:a1:50:8f:f8:f6:78:f0:7c:25:56:14:02:7e:e5:df:87:4f: 1e:ee:b6:ec:97:74:89:8f:8b:69:81:b3:9a:14:b6:f0:d7:80: 84:92:f8:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S4w/v8yRYGkPkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZDY3ZTIwODQtYWNiYi00NzAwLTlhNDItZDIxNTBlZjViYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwau26rye50H9unI6qjVTL/bS1058Fzlz7lA UPPGv7gM1LKIEnHLY1nH3CAN9fwC6kk2gDMAmD2MVax2sUvB8SmQTpnYOKOhaEyI wREmZl6fkI5zSqcW456cTzD84HVPsd3MDmuaBI5RvKcIqk7CZf2HrQeYaCIP8U3M GlCOYOCPxtI8bvyc0ydyAx4RFZX5UxOQNBl16L5SwvyRb4/lNeGpES7oMs3Kfgk6 tJ+aHIZAyqopRe/SVD2GlHME5LZZ1XxyBNBB6UUcGfXP4OmIRbiS+EbKa2i3aiLl EsjQxYzKYo6XPnWF3pe6K5Ib3CM/8V3m9q6HKZbJBe2l6orvXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzMZKldpfL5j7673Qhhgn6DLACfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvMmMyMjdiZmQtZjA4Yi0z OThjLTk5NjktM2ZmZjk5ZmE0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EQGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3on1NLjnLMDDCTwj1cv1MC81D5BcmpOTYLU+2F19mHlLIS6MMlpcOJ t4WBZhSOpjd9yYAHMOrGXiZ8BW0mjX9DgtErLu1aUovx8ipn1junK/DrTxMBBlES iGyoteYWX6AGGi94Bd9EiuWv4vIJmlgNs4HyaMcrbB48S61YAJ2inIYFmcbjoq0Y SC+sPmjHKu7ldBhu1SJrp4yI6BeX/1Xp9aaXwYlnCClvVk8S6g8i8csuW1C9XaEg 7ngI8MZIHSvdPr1rmyZFtHD8LMtCzSBC4CVN2ymclUGhUI/49njwfCVWFAJ+5d+H Tx7utuyXdImPi2mBs5oUtvDXgISS+As= -----END CERTIFICATE-----Generated at Mon Aug 4 18:23:40 2025 by rpki-client