$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa File: d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa (raw, json) Hash identifier: CfyaLSjErABG9iGF5spDe0IbgVOtSCNfpWE3DyolqDI= Subject key identifier: B1:85:2A:57:46:BF:91:05:EB:4E:4C:32:E6:DA:66:73:E9:05:85:77 Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584AA85BA3906772A062315FE130 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 208.71.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a3:90:67:72:a0:62:31:5f:e1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=a1c3ae45-1a10-44d9-af0f-5e459e6ae5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:43:8c:2d:47:40:7b:6e:5e:45:8f:83:e2: 6a:91:f1:a4:d6:ee:44:20:dc:a0:34:5e:55:28:fc: f4:d5:40:5f:7b:31:ab:c1:10:15:d0:52:60:b7:b5: 5f:86:ee:e2:a7:65:7e:8a:62:5e:91:ce:71:85:f4: 60:74:c3:a4:8f:e2:7c:2c:24:e7:74:b7:98:35:c1: 54:70:ff:0a:fb:10:19:d3:5c:b3:c1:db:66:4e:6a: 96:64:6e:0a:5c:4a:ab:4e:42:4f:13:5f:06:d9:54: 98:27:86:3b:bc:0f:fe:87:e6:83:d7:58:bf:56:3d: 9a:a5:e5:9c:6f:25:ce:c4:b6:d5:39:ce:65:c3:1f: f4:33:cb:7f:55:a2:93:e4:2a:ed:7a:a3:93:fb:b2: 62:d9:67:9d:21:f7:12:a1:e0:f0:a2:6e:7a:5a:23: e0:ab:c2:73:3a:99:b7:ad:b6:7c:f5:a8:06:71:9e: db:c3:43:5e:57:69:f9:8a:1f:9c:d3:c6:b1:92:cd: bc:99:f9:0f:c6:af:8a:fe:10:d2:66:f9:9b:93:0e: 6f:c8:a3:23:1f:5f:90:6c:ea:e4:bd:43:49:e5:e3: 2b:44:58:a6:3b:ee:48:7f:11:19:32:43:cb:f9:43: 88:51:24:59:fa:c8:64:64:eb:a0:fd:e1:24:85:42: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:85:2A:57:46:BF:91:05:EB:4E:4C:32:E6:DA:66:73:E9:05:85:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:fc:62:7a:7e:0f:dd:2e:7f:e3:65:6d:a3:f3:de:ab:fd:6d: 80:b4:d0:b2:3e:90:f9:ce:45:87:5d:6e:07:9f:77:8a:cc:40: 89:2a:72:0e:6c:f1:b1:c9:7e:4a:fa:cc:2b:5f:89:1c:0c:7b: f1:29:11:84:50:c4:e8:a6:7f:c7:14:7f:3f:11:d4:81:eb:3f: 2b:78:0c:e9:84:54:4b:ac:fd:03:70:83:59:db:bc:98:6c:e8: 13:0a:94:e0:3d:b4:71:cc:42:a1:be:aa:de:4d:2b:f9:f0:1e: 78:cd:fc:b1:1a:c1:63:f2:69:30:1c:bc:f1:62:4d:d2:ff:3c: 86:83:04:33:9d:d1:81:ec:47:ab:1e:cd:28:cc:49:1f:f5:1b: 7b:ae:da:a1:1d:a4:66:ee:31:ad:b9:0f:4d:08:e3:f6:a2:b7: 8e:3f:7c:47:63:6e:31:a3:5a:2d:29:97:d7:7e:f8:06:ff:09: 42:cd:bc:e1:0b:04:e2:da:b9:d3:bc:ba:22:58:d4:ef:57:67: 3c:5a:8f:7f:47:1e:51:6e:a1:5e:26:97:f8:86:27:bd:f0:e0: 79:35:13:3c:90:ed:d0:d6:17:e4:65:44:60:b3:72:07:bb:fe: bc:f6:b4:29:0d:aa:27:fc:ca:82:f9:97:d9:2d:f0:47:11:6d: de:76:15:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6OQZ3KgYjFf4TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YTFjM2FlNDUtMWExMC00NGQ5LWFmMGYtNWU0NTllNmFlNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGtDjC1HQHtuXkWPg+JqkfGk1u5EINygNF5V KPz01UBfezGrwRAV0FJgt7Vfhu7ip2V+imJekc5xhfRgdMOkj+J8LCTndLeYNcFU cP8K+xAZ01yzwdtmTmqWZG4KXEqrTkJPE18G2VSYJ4Y7vA/+h+aD11i/Vj2apeWc byXOxLbVOc5lwx/0M8t/VaKT5CrteqOT+7Ji2WedIfcSoeDwom56WiPgq8JzOpm3 rbZ89agGcZ7bw0NeV2n5ih+c08axks28mfkPxq+K/hDSZvmbkw5vyKMjH1+QbOrk vUNJ5eMrRFimO+5IfxEZMkPL+UOIUSRZ+shkZOug/eEkhUJBWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGFKldGv5EF605MMubaZnPpBYV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvZDA1YmNiYWUtOWI2NC0z MGVlLWI2YjUtOTM0NmEzZTJmZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMH8Ynp+D90uf+NlbaPz3qv9bYC00LI+kPnORYddbgefd4rMQIkqcg5s 8bHJfkr6zCtfiRwMe/EpEYRQxOimf8cUfz8R1IHrPyt4DOmEVEus/QNwg1nbvJhs 6BMKlOA9tHHMQqG+qt5NK/nwHnjN/LEawWPyaTAcvPFiTdL/PIaDBDOd0YHsR6se zSjMSR/1G3uu2qEdpGbuMa25D00I4/ait44/fEdjbjGjWi0pl9d++Ab/CULNvOEL BOLaudO8uiJY1O9XZzxaj39HHlFuoV4ml/iGJ73w4Hk1EzyQ7dDWF+RlRGCzcge7 /rz2tCkNqif8yoL5l9kt8EcRbd52FS0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:59 2025 by rpki-client