$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/dc0a95d6-af35-384c-b09b-f04705928384.roa File: dc0a95d6-af35-384c-b09b-f04705928384.roa (raw, json) Hash identifier: 1aQl6ubgt3DDMoabd5z/TuX40aYr3fNP3OpiNiopi6Q= Subject key identifier: 0C:D1:B8:A6:FE:2F:F2:07:3F:22:E4:D8:DB:3B:AB:27:AA:32:57:38 Certificate issuer: /CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Certificate serial: 010D0C9F4328584AAB2658E924B04A2CE6099040 Authority key identifier: 92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/dc0a95d6-af35-384c-b09b-f04705928384.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 1299 IP address blocks: 209.170.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:58:e9:24:b0:4a:2c:e6:09:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=7efdef53-6115-4984-92c5-9cb00155c226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:3a:17:10:c0:91:9f:9c:f7:6f:d3:52:03: ec:d2:54:bc:56:e0:2b:fb:76:ee:1f:d5:c9:42:55: 9f:11:ef:48:40:af:85:88:d0:64:42:8d:65:36:7e: 89:f6:2b:aa:13:31:34:4b:27:8e:58:e5:64:a5:6b: 30:24:ad:60:1d:38:53:a2:56:c6:7a:2c:71:b0:58: 1a:0d:c6:2e:55:a8:f4:cd:65:fc:e0:13:ac:dc:df: 2c:ba:04:aa:f0:37:46:f9:c9:86:d4:9b:18:29:cf: 21:de:be:1a:4b:20:71:32:25:fb:e6:49:b2:d9:db: db:95:41:81:d6:b4:b9:eb:f3:f4:1f:30:1a:6e:ae: 4d:df:82:7a:fc:d8:c0:6a:6d:a3:1e:81:06:bf:a7: 3e:ef:61:17:f9:33:e2:09:dd:c7:c7:55:67:1f:9e: c6:e1:74:a6:55:c8:b1:39:bd:0d:c2:16:f0:b2:cc: b7:6a:c0:eb:73:a1:50:16:a9:bf:24:88:a3:25:b9: d2:f2:14:6c:92:8d:10:5b:6a:04:08:4d:82:1c:07: bf:4a:b9:88:7e:9e:05:63:04:a8:2a:c7:e9:9e:48: 51:e5:32:81:96:cb:68:7d:6e:ab:17:f4:30:7c:48: 22:4b:17:35:bf:60:90:4d:73:b5:f9:98:11:30:6b: ca:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D1:B8:A6:FE:2F:F2:07:3F:22:E4:D8:DB:3B:AB:27:AA:32:57:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/dc0a95d6-af35-384c-b09b-f04705928384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl X509v3 Authority Key Identifier: keyid:92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer sbgp-ipAddrBlock: critical IPv4: 209.170.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:16:aa:4e:04:e6:d5:2b:93:2c:b1:af:e7:7f:40:da:54:54: 8c:bc:22:02:dd:be:11:a1:ee:4f:8a:b0:95:88:d7:3b:e6:84: 55:d7:bb:d6:5a:a9:f8:db:da:36:7b:62:de:47:e7:da:3c:65: 1f:8b:f1:d2:c2:38:b0:e1:d8:e8:0c:6e:2a:d4:e5:75:e6:30: 31:cc:d6:10:f2:fa:19:af:e5:59:00:89:e1:37:7e:2a:1d:ec: 00:c7:08:0d:25:c7:11:19:18:62:a5:c9:47:52:c1:9c:66:8e: c8:6f:40:15:f7:10:c6:6c:86:02:f8:de:10:d0:0c:35:f9:1d: 08:f2:49:95:f8:d3:55:a0:da:e4:a1:7c:4c:37:1e:b1:f3:53: 25:fc:3e:32:3a:9a:bf:57:ee:4b:15:d9:61:97:5d:83:b8:36: 60:ef:05:33:64:f6:16:9d:30:57:45:37:bc:a9:7b:5e:a6:f7: 99:08:1e:fc:62:e6:1d:51:ba:45:07:b9:7e:48:cc:b2:6b:0c: 00:ce:c4:ee:9d:3a:83:9a:c1:08:69:17:29:af:28:09:7b:78: b4:40:f1:06:f9:1f:45:d2:37:89:13:06:7a:90:40:92:4b:9a: f8:07:ef:17:fe:ab:20:16:94:84:5b:4b:90:07:6a:9e:fc:39: a0:45:8b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJljpJLBKLOYJkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiMjliNDQtOGY1Yy00NDYyLWJiMTMtZDcyYjRlMTVl MjBkMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk N2VmZGVmNTMtNjExNS00OTg0LTkyYzUtOWNiMDAxNTVjMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0U6FxDAkZ+c92/TUgPs0lS8VuAr+3buH9XJ QlWfEe9IQK+FiNBkQo1lNn6J9iuqEzE0SyeOWOVkpWswJK1gHThTolbGeixxsFga DcYuVaj0zWX84BOs3N8sugSq8DdG+cmG1JsYKc8h3r4aSyBxMiX75kmy2dvblUGB 1rS56/P0HzAabq5N34J6/NjAam2jHoEGv6c+72EX+TPiCd3Hx1VnH57G4XSmVcix Ob0Nwhbwssy3asDrc6FQFqm/JIijJbnS8hRsko0QW2oECE2CHAe/SrmIfp4FYwSo KsfpnkhR5TKBlstofW6rF/QwfEgiSxc1v2CQTXO1+ZgRMGvKSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzRuKb+L/IHPyLk2Ns7qyeqMlc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Y2Iy OWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJiNGUxNWUyMGQvZGMwYTk1ZDYtYWYzNS0z ODRjLWIwOWItZjA0NzA1OTI4Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGNiMjliNDQtOGY1Yy00NDYyLWJi MTMtZDcyYjRlMTVlMjBkLzhjYjI5YjQ0LThmNWMtNDQ2Mi1iYjEzLWQ3MmI0ZTE1 ZTIwZC5jcmwwHwYDVR0jBBgwFoAUkt30C92YmGTsWtzg9MAgG7Bke3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Y2IyOWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJi NGUxNWUyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0apAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoWqk4E5tUrkyyxr+d/QNpUVIy8IgLdvhGh7k+KsJWI1zvmhFXXu9Za qfjb2jZ7Yt5H59o8ZR+L8dLCOLDh2OgMbirU5XXmMDHM1hDy+hmv5VkAieE3fiod 7ADHCA0lxxEZGGKlyUdSwZxmjshvQBX3EMZshgL43hDQDDX5HQjySZX401Wg2uSh fEw3HrHzUyX8PjI6mr9X7ksV2WGXXYO4NmDvBTNk9hadMFdFN7ype16m95kIHvxi 5h1RukUHuX5IzLJrDADOxO6dOoOawQhpFymvKAl7eLRA8Qb5H0XSN4kTBnqQQJJL mvgH7xf+qyAWlIRbS5AHap78OaBFi9I= -----END CERTIFICATE-----Generated at Mon Aug 4 14:16:38 2025 by rpki-client