$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa File: 350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa (raw, json) Hash identifier: u/HsY0PHhCUQmZP4B1SjHwpM5kofDGx6hV9hGfSPzjc= Subject key identifier: FF:C1:C0:86:A7:D9:18:C7:E4:14:79:93:42:EC:80:A7:90:5E:5F:0B Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584AADF0FE2DA96D8290E892E840 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 6639 IP address blocks: 208.157.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fe:2d:a9:6d:82:90:e8:92:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=f037b1a6-a66a-4614-9d6e-ce50cb9db11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:ec:75:31:84:63:21:42:3f:fa:e7:a1:14: 27:ad:12:bb:ad:d8:ae:c1:41:8c:9e:8c:00:a5:6f: fd:b1:06:7d:c2:22:7e:02:e6:a6:51:d6:16:0b:25: dc:35:3f:65:c3:44:77:d1:37:30:e6:0b:a2:0a:72: d2:48:80:27:c4:9d:4f:a1:a5:ba:fe:cd:bb:2d:66: 7c:03:23:4c:2e:97:82:57:ad:56:a3:27:9a:40:c0: 5c:fd:ac:b5:52:4d:eb:51:5c:f6:73:b8:55:9e:cd: 62:98:1d:7f:b2:55:2b:5a:b6:ca:68:e4:c8:ae:6e: 78:74:ec:4b:58:b6:53:05:a0:f1:61:a3:53:43:11: 2d:d3:c1:37:48:ce:2c:83:6b:1e:00:9c:c1:a8:18: 1c:cf:35:f6:f6:09:c3:ff:3e:e2:bf:c0:3a:e8:5f: 1a:4e:b6:01:cc:d9:fa:80:90:f9:53:a7:b9:bd:ec: 8d:4e:9a:be:f7:26:c0:ac:30:8d:f5:c7:40:99:39: f1:94:6c:02:52:c1:df:b7:91:39:f9:e6:86:09:f1: bb:d8:91:4d:f5:53:d7:8f:47:db:e8:e4:2e:53:cf: 1a:f6:95:f4:36:03:64:78:eb:39:37:cb:8e:2b:59: 39:81:89:b3:00:30:d6:1a:a2:bf:c4:1b:87:7d:6b: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C1:C0:86:A7:D9:18:C7:E4:14:79:93:42:EC:80:A7:90:5E:5F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.157.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:8f:a2:c0:f2:5d:a0:da:7d:a4:13:23:84:91:72:4c:9e:a9: 3d:42:0f:a0:25:a7:a5:e3:93:16:03:2e:6a:51:d7:e0:83:02: 36:62:2e:d9:11:c6:8a:bf:63:c6:9a:d6:85:47:59:16:17:bb: 18:7a:24:8a:0e:b0:49:06:f9:8b:31:d7:1f:5b:a1:b8:10:19: 67:90:cd:ca:db:e5:b0:16:12:82:df:db:40:97:be:9c:61:87: 15:91:b4:68:16:f6:6b:eb:14:22:c6:fc:7e:38:8d:0b:29:63: df:6c:84:69:b0:5e:d2:7e:e0:e1:01:9f:73:7b:aa:57:59:09: 8a:f3:0c:8b:d3:3c:bc:28:9b:b5:05:0c:a6:4c:48:15:5c:67: 16:f0:75:a5:5c:c3:6e:06:9f:b5:c8:f3:99:0c:2c:f0:31:3a: 16:fe:f7:aa:e6:e3:18:67:2a:cf:06:ad:18:ec:40:2a:7f:8c: 06:8c:06:46:2f:dc:42:6e:b7:2d:be:00:5f:ae:2d:a7:69:fe: 8e:7b:9f:45:43:49:73:08:31:5b:b9:c1:8a:bf:d7:d7:79:e1: 09:8d:e4:bf:a0:10:b7:09:ea:c9:05:b9:4f:e1:98:b0:ff:5a: 89:a7:0a:c9:9e:e3:2a:42:60:3d:8c:02:c7:15:f8:e0:1c:fe: 14:70:1a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8P4tqW2CkOiS6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZjAzN2IxYTYtYTY2YS00NjE0LTlkNmUtY2U1MGNiOWRiMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokbsdTGEYyFCP/rnoRQnrRK7rdiuwUGMnowA pW/9sQZ9wiJ+AuamUdYWCyXcNT9lw0R30Tcw5guiCnLSSIAnxJ1PoaW6/s27LWZ8 AyNMLpeCV61WoyeaQMBc/ay1Uk3rUVz2c7hVns1imB1/slUrWrbKaOTIrm54dOxL WLZTBaDxYaNTQxEt08E3SM4sg2seAJzBqBgczzX29gnD/z7iv8A66F8aTrYBzNn6 gJD5U6e5veyNTpq+9ybArDCN9cdAmTnxlGwCUsHft5E5+eaGCfG72JFN9VPXj0fb 6OQuU88a9pX0NgNkeOs5N8uOK1k5gYmzADDWGqK/xBuHfWsDaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/BwIan2RjH5BR5k0LsgKeQXl8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMzUwYTkxODctMjBlNi0z ODU5LWJiZjAtYzVmM2ZhNWQwYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0J2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOPosDyXaDafaQTI4SRckyeqT1CD6Alp6XjkxYDLmpR1+CDAjZiLtkR xoq/Y8aa1oVHWRYXuxh6JIoOsEkG+Ysx1x9bobgQGWeQzcrb5bAWEoLf20CXvpxh hxWRtGgW9mvrFCLG/H44jQspY99shGmwXtJ+4OEBn3N7qldZCYrzDIvTPLwom7UF DKZMSBVcZxbwdaVcw24Gn7XI85kMLPAxOhb+96rm4xhnKs8GrRjsQCp/jAaMBkYv 3EJuty2+AF+uLadp/o57n0VDSXMIMVu5wYq/19d54QmN5L+gELcJ6skFuU/hmLD/ WomnCsme4ypCYD2MAscV+OAc/hRwGkQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:58 2025 by rpki-client