$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa File: 528a072d-fb5e-3209-b0b6-eff453de4aaf.roa (raw, json) Hash identifier: oyae5bqSlxiIJOgJ+iGPeopbNB9oSNAH5Jx8F9qANl0= Subject key identifier: 7A:8E:D4:1D:8F:91:BD:67:8F:50:05:43:24:48:CC:55:03:08:95:2B Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584AADF0FE3D6DB417B408E88D00 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 6639 IP address blocks: 208.168.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fe:3d:6d:b4:17:b4:08:e8:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=1e7247b0-8807-45e8-9539-bd1dbd761668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:cd:f1:a8:cf:c9:7f:ca:bd:20:9a:03:50: 4f:07:b9:18:71:ca:8d:83:47:aa:32:cd:fb:c2:e8: fe:31:0f:9f:83:79:79:da:a2:19:d6:a8:ac:7e:fb: 58:f6:65:c6:5b:4b:85:6a:ac:bf:bf:78:2a:b0:6f: 3a:44:98:9c:40:09:f3:16:13:7f:bf:5d:c9:64:78: 2c:9b:c2:a8:5f:e3:28:61:42:28:54:1f:1b:12:d3: 39:00:43:14:82:39:27:7d:c7:56:75:32:15:cf:f6: 76:24:55:48:99:55:66:81:53:e1:8f:45:a8:2d:88: 2d:09:e2:e6:09:f0:96:3e:be:b1:2f:b1:a3:82:e0: ec:82:64:9a:07:92:8a:34:d4:b6:85:f3:3b:4c:53: 7a:b7:58:a8:eb:14:30:c4:e4:32:88:39:ff:d8:c8: 40:82:1d:6d:51:34:d8:ae:7d:c5:45:81:f3:59:c1: bc:88:1f:63:de:cf:e3:39:b3:8b:b8:54:b5:91:0a: 6e:a1:9f:f7:a5:d2:b1:70:bd:b3:62:f3:7c:96:8b: 57:e7:dd:09:c7:5b:7f:7f:4a:5d:38:ce:6d:7a:a1: 5f:08:72:da:67:fe:21:21:cf:ff:55:f0:b3:f6:3b: 79:43:66:99:27:46:4b:05:85:4d:47:cd:96:fb:b4: 32:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8E:D4:1D:8F:91:BD:67:8F:50:05:43:24:48:CC:55:03:08:95:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.168.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:bc:c9:9a:a4:ef:0a:05:0c:23:27:bf:1b:ba:48:49:25:b5: d4:01:38:59:47:9d:c2:2c:9f:c8:d9:50:26:ff:80:95:44:45: 42:1f:e5:02:56:d1:e4:a3:1a:e7:81:3b:e9:4d:c4:d1:0e:ad: 01:46:38:99:b2:f8:bc:55:2d:2b:d5:a0:bb:29:09:53:d2:3c: b5:88:84:f2:14:3c:8b:fb:73:a2:f1:4f:b7:7f:62:44:d8:6f: fc:4c:bc:b9:e9:d9:d1:60:a5:19:bd:d6:13:35:5c:71:37:f6: cc:c6:08:51:01:f4:d0:af:da:32:d5:cc:a3:23:30:88:4f:7b: 49:39:c2:c5:91:d0:10:1b:16:d7:30:f7:65:f6:45:1e:2c:89: 37:1b:b5:de:74:80:c4:26:4f:6a:b6:2f:fc:8d:de:30:81:59: 33:89:f9:e9:7a:0f:42:ef:71:db:96:66:17:f3:f5:0c:9e:8f: d2:4f:69:1a:7f:c5:a5:8e:93:56:0c:a1:88:b5:16:19:62:d6: de:44:04:05:e6:bc:03:ad:77:7c:25:5e:18:49:a9:45:d6:8a: f9:26:28:69:82:47:ae:2e:50:a3:14:96:2b:10:b7:10:09:ac: e2:5b:28:52:14:7c:94:e7:bd:36:fe:da:9a:6a:6a:93:52:57: 2f:1a:c2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8P49bbQXtAjojQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MWU3MjQ3YjAtODgwNy00NWU4LTk1MzktYmQxZGJkNzYxNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTLN8ajPyX/KvSCaA1BPB7kYccqNg0eqMs37 wuj+MQ+fg3l52qIZ1qisfvtY9mXGW0uFaqy/v3gqsG86RJicQAnzFhN/v13JZHgs m8KoX+MoYUIoVB8bEtM5AEMUgjknfcdWdTIVz/Z2JFVImVVmgVPhj0WoLYgtCeLm CfCWPr6xL7GjguDsgmSaB5KKNNS2hfM7TFN6t1io6xQwxOQyiDn/2MhAgh1tUTTY rn3FRYHzWcG8iB9j3s/jObOLuFS1kQpuoZ/3pdKxcL2zYvN8lotX590Jx1t/f0pd OM5teqFfCHLaZ/4hIc//VfCz9jt5Q2aZJ0ZLBYVNR82W+7QyCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqO1B2Pkb1nj1AFQyRIzFUDCJUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvNTI4YTA3MmQtZmI1ZS0z MjA5LWIwYjYtZWZmNDUzZGU0YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0KjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK8yZqk7woFDCMnvxu6SEkltdQBOFlHncIsn8jZUCb/gJVERUIf5QJW 0eSjGueBO+lNxNEOrQFGOJmy+LxVLSvVoLspCVPSPLWIhPIUPIv7c6LxT7d/YkTY b/xMvLnp2dFgpRm91hM1XHE39szGCFEB9NCv2jLVzKMjMIhPe0k5wsWR0BAbFtcw 92X2RR4siTcbtd50gMQmT2q2L/yN3jCBWTOJ+el6D0LvcduWZhfz9Qyej9JPaRp/ xaWOk1YMoYi1Fhli1t5EBAXmvAOtd3wlXhhJqUXWivkmKGmCR64uUKMUlisQtxAJ rOJbKFIUfJTnvTb+2ppqapNSVy8awjk= -----END CERTIFICATE-----Generated at Wed Aug 6 10:06:57 2025 by rpki-client