$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/796b4941-aa08-3956-8f46-1013460cc63e.roa File: 796b4941-aa08-3956-8f46-1013460cc63e.roa (raw, json) Hash identifier: I6HCoFMVNmgX6DTixNcXMHLbqgGsGzAPbm/NxRxKVn0= Subject key identifier: 20:8A:C2:73:7F:E7:55:88:97:2E:7B:06:15:CB:FD:C2:9C:F8:3E:B5 Certificate issuer: /CN=9a177b81-3741-4833-baba-1629081ec54f Certificate serial: 010D0C9F4328584AA85BAD7DCEA26F9E84FC0D80 Authority key identifier: B5:3E:B4:D4:0D:C1:0C:C7:5B:3C:6A:DB:E6:16:69:1B:9E:41:F0:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/796b4941-aa08-3956-8f46-1013460cc63e.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 11187 IP address blocks: 208.74.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ad:7d:ce:a2:6f:9e:84:fc:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a177b81-3741-4833-baba-1629081ec54f Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=d8d8c9d0-756f-413c-9d48-06f8304b054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:e7:3c:e6:46:58:14:8c:33:9a:0b:35:d5: 94:59:c2:a7:34:dc:28:03:c8:7a:31:52:36:c7:42: a5:e0:60:42:6a:19:6b:f6:29:41:fc:7a:8e:f7:c1: eb:a6:96:6e:65:8d:f6:1a:ab:af:c6:26:81:03:6c: ca:42:94:6c:12:4a:98:31:9a:44:b1:16:73:81:cc: 9b:1b:14:c7:c7:59:1d:1e:a1:ec:24:70:20:7c:d5: b4:75:42:9e:9e:81:31:d2:15:e1:ca:9c:22:12:91: 9d:84:07:aa:00:e2:c8:71:cf:f5:60:dd:91:64:79: ed:56:12:fb:99:cf:58:2e:0c:90:84:b2:ab:dd:f8: 87:18:58:a1:05:a4:c1:cf:9d:31:2e:ef:9f:54:e9: 4f:78:5d:82:93:ef:ae:8a:26:b1:78:d5:6f:31:03: d2:0f:1a:f6:14:1c:2d:0d:6d:21:4e:14:80:86:8e: af:b1:32:d7:64:03:53:a7:fc:aa:fc:0a:e6:1c:1b: 2c:75:5c:64:69:20:f4:37:16:fe:29:92:b9:e4:f0: 98:aa:01:50:de:03:f9:b0:20:06:53:d4:0e:14:96: f1:e2:c5:8f:5a:97:8f:c3:a4:ae:5f:b2:61:e1:88: 0b:03:75:41:55:75:f6:c5:6b:12:65:38:ef:69:e2: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:C2:73:7F:E7:55:88:97:2E:7B:06:15:CB:FD:C2:9C:F8:3E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/796b4941-aa08-3956-8f46-1013460cc63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.crl X509v3 Authority Key Identifier: keyid:B5:3E:B4:D4:0D:C1:0C:C7:5B:3C:6A:DB:E6:16:69:1B:9E:41:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f.cer sbgp-ipAddrBlock: critical IPv4: 208.74.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:53:ee:99:a1:dc:c3:60:2f:2c:94:56:d6:01:20:65:9c:fd: 61:bd:89:9c:bb:d3:3a:4c:13:1c:05:37:8b:5d:b7:99:b1:88: 5b:12:3b:25:2b:b2:c0:8c:cb:38:bf:81:b2:f5:c5:fd:7e:81: e5:95:67:e6:7b:d9:ab:7b:5c:bc:ec:ba:24:64:e3:4f:72:43: 20:81:e6:5b:dc:dc:a0:b7:e8:20:bb:a5:cd:c3:a0:67:7f:49: b7:82:30:c6:26:fb:df:99:dc:10:9e:7a:e8:2a:53:00:ee:7b: 48:ba:bf:0b:e2:a6:3e:4f:d4:88:4f:f8:e3:d0:5d:aa:c6:5c: 89:a8:ac:c1:1b:e5:1e:dd:36:e4:ed:f8:bb:02:3e:fb:a5:e0: 47:ac:8d:57:a3:8a:29:47:fd:7c:33:16:7a:82:24:6a:8a:dc: 3d:cd:3d:ed:b4:b5:39:54:1d:30:62:e2:0a:91:52:9f:de:33: 1b:bc:9e:53:6c:da:86:ff:c4:74:b5:f2:8c:29:0b:a4:66:a5: 1a:29:bb:51:48:52:9b:39:c8:e0:e9:1c:d5:e5:f7:88:74:f4: 3d:e2:6f:a4:28:0c:11:ed:a3:6e:95:82:ca:a1:bc:8c:95:26: c0:8d:bf:74:63:b9:7a:79:b3:5c:63:60:be:b3:bb:bd:46:c0: 4b:20:3b:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW619zqJvnoT8DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWExNzdiODEtMzc0MS00ODMzLWJhYmEtMTYyOTA4MWVj NTRmMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ZDhkOGM5ZDAtNzU2Zi00MTNjLTlkNDgtMDZmODMwNGIwNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbjnPOZGWBSMM5oLNdWUWcKnNNwoA8h6MVI2 x0Kl4GBCahlr9ilB/HqO98HrppZuZY32GquvxiaBA2zKQpRsEkqYMZpEsRZzgcyb GxTHx1kdHqHsJHAgfNW0dUKenoEx0hXhypwiEpGdhAeqAOLIcc/1YN2RZHntVhL7 mc9YLgyQhLKr3fiHGFihBaTBz50xLu+fVOlPeF2Ck++uiiaxeNVvMQPSDxr2FBwt DW0hThSAho6vsTLXZANTp/yq/ArmHBssdVxkaSD0Nxb+KZK55PCYqgFQ3gP5sCAG U9QOFJbx4sWPWpePw6SuX7Jh4YgLA3VBVXX2xWsSZTjvaeKV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCKwnN/51WIly57BhXL/cKc+D61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YTE3 N2I4MS0zNzQxLTQ4MzMtYmFiYS0xNjI5MDgxZWM1NGYvNzk2YjQ5NDEtYWEwOC0z OTU2LThmNDYtMTAxMzQ2MGNjNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWExNzdiODEtMzc0MS00ODMzLWJh YmEtMTYyOTA4MWVjNTRmLzlhMTc3YjgxLTM3NDEtNDgzMy1iYWJhLTE2MjkwODFl YzU0Zi5jcmwwHwYDVR0jBBgwFoAUtT601A3BDMdbPGrb5hZpG55B8GUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YTE3N2I4MS0zNzQxLTQ4MzMtYmFiYS0xNjI5 MDgxZWM1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EpQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxT7pmh3MNgLyyUVtYBIGWc/WG9iZy70zpMExwFN4tdt5mxiFsSOyUr ssCMyzi/gbL1xf1+geWVZ+Z72at7XLzsuiRk409yQyCB5lvc3KC36CC7pc3DoGd/ SbeCMMYm+9+Z3BCeeugqUwDue0i6vwvipj5P1IhP+OPQXarGXImorMEb5R7dNuTt +LsCPvul4EesjVejiilH/XwzFnqCJGqK3D3NPe20tTlUHTBi4gqRUp/eMxu8nlNs 2ob/xHS18owpC6RmpRopu1FIUps5yODpHNXl94h09D3ib6QoDBHto26VgsqhvIyV JsCNv3RjuXp5s1xjYL6zu71GwEsgO8E= -----END CERTIFICATE-----Generated at Sun Aug 10 13:47:48 2025 by rpki-client