$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa File: 339c2a74-2946-3eea-b96c-e0a5daeb337d.roa (raw, json) Hash identifier: UUIT9n6/mn0pEDC00TF8swjd60ze3jzJFFAfc4MiQ0E= Subject key identifier: 28:4D:78:56:B3:8C:43:06:F4:D4:BF:DB:4A:F7:0C:1D:36:65:F9:98 Certificate issuer: /CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee Certificate serial: 010D0C9F4328584AB693CB7B68EF26C49D688980 Authority key identifier: 08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa Signing time: Fri 01 Aug 2025 14:00:28 +0000 ROA not before: Fri 01 Aug 2025 14:00:28 +0000 ROA not after: Thu 30 Oct 2025 14:00:28 +0000 asID: 15830 IP address blocks: 209.196.248.0/24 maxlen: 24 209.196.249.0/24 maxlen: 24 209.196.250.0/24 maxlen: 24 209.196.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:93:cb:7b:68:ef:26:c4:9d:68:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee Validity Not Before: Aug 1 14:00:28 2025 GMT Not After : Oct 30 14:00:28 2025 GMT Subject: CN=0fe0e497-6d9e-4c27-b1dc-edf2136516d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:28:ad:cf:36:08:8c:95:3f:da:1a:a0:0e: 59:0d:76:53:a4:df:58:bb:58:06:06:0d:ce:bd:83: 4d:00:20:ce:96:1e:a1:2d:68:f0:71:45:0d:dc:70: 2f:c9:59:2b:94:ca:d2:36:c0:7b:ea:1e:6c:c8:d8: ac:c6:4c:25:eb:4c:ce:47:e1:b4:d0:b2:72:09:22: ab:bb:72:56:b0:30:f2:58:7e:03:91:8c:d6:21:8f: 68:31:ca:1f:9b:5b:f0:18:28:d4:f9:04:2c:81:58: b0:cb:dc:75:22:b1:39:11:9b:1d:df:75:20:2c:31: 15:39:07:c0:5c:e7:5c:01:e2:e6:77:26:89:72:40: 2d:8b:19:a5:95:e4:16:2b:f1:60:88:00:e0:43:e6: c3:f2:50:4a:5e:0f:48:76:93:85:25:e2:0e:f8:cf: 9d:22:f7:cf:b9:c9:ee:ab:a5:c1:68:f1:08:84:fa: 18:db:35:ba:07:6f:29:4f:54:bd:f9:e8:47:29:32: f1:ee:bc:2a:a7:25:96:34:a1:07:21:05:dc:57:ef: f0:82:99:53:2e:d9:ce:c7:cc:ad:c1:d0:5b:3f:8f: 00:4a:03:da:69:80:04:e5:aa:00:59:27:c2:9f:a9: db:b6:d0:aa:9f:7a:00:0e:95:51:28:04:89:c5:17: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4D:78:56:B3:8C:43:06:F4:D4:BF:DB:4A:F7:0C:1D:36:65:F9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl X509v3 Authority Key Identifier: keyid:08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer sbgp-ipAddrBlock: critical IPv4: 209.196.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3d:73:35:f7:b6:73:00:d9:a7:3c:0c:77:41:89:c0:c4:68: 90:18:5b:0a:a0:40:ec:3b:ce:f8:fc:91:32:86:9a:3d:6c:4e: c7:7f:39:29:7c:7d:a9:0c:82:ba:cd:37:94:a1:a4:80:e8:38: e2:76:3a:45:9b:07:b4:41:3e:6e:06:ea:bf:47:7d:94:21:fd: 70:1a:73:bb:1b:52:a0:67:82:3b:e3:f4:7f:b2:cd:0a:cf:34: 89:34:88:5e:3f:8d:2c:1b:70:36:c5:ed:c0:09:ec:83:25:cd: bf:05:69:03:f4:6a:0f:2f:33:fb:c7:aa:2a:67:a6:b1:af:65: 6f:9c:41:2b:e4:de:83:81:1a:f4:24:33:ae:16:34:74:30:1b: de:fa:18:32:ad:86:95:e5:38:36:98:d2:98:69:b2:76:ef:c2: 1c:1f:53:8e:e8:c3:5f:47:24:dc:df:e1:15:e1:a9:66:86:b1: 23:9d:a2:1b:74:12:cb:a8:49:c8:d5:45:03:bd:09:24:20:b2: 3c:7b:d9:e3:e5:5f:c8:ef:20:e0:5d:a3:5f:de:0f:6e:5a:80: f2:11:91:d4:16:60:15:1e:19:f6:20:d3:e5:c0:04:94:30:4d: 50:7a:30:fa:e8:08:3d:40:bc:20:77:e4:9c:39:62:7f:5d:6f: b3:2f:21:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2k8t7aO8mxJ1oiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM0OTBhZTMtNDFjZC00ZTlhLThkY2UtM2M5YzdmN2Ex MGVlMB4XDTI1MDgwMTE0MDAyOFoXDTI1MTAzMDE0MDAyOFowLzEtMCsGA1UEAxMk MGZlMGU0OTctNmQ5ZS00YzI3LWIxZGMtZWRmMjEzNjUxNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Iorc82CIyVP9oaoA5ZDXZTpN9Yu1gGBg3O vYNNACDOlh6hLWjwcUUN3HAvyVkrlMrSNsB76h5syNisxkwl60zOR+G00LJyCSKr u3JWsDDyWH4DkYzWIY9oMcofm1vwGCjU+QQsgViwy9x1IrE5EZsd33UgLDEVOQfA XOdcAeLmdyaJckAtixmlleQWK/FgiADgQ+bD8lBKXg9IdpOFJeIO+M+dIvfPucnu q6XBaPEIhPoY2zW6B28pT1S9+ehHKTLx7rwqpyWWNKEHIQXcV+/wgplTLtnOx8yt wdBbP48ASgPaaYAE5aoAWSfCn6nbttCqn3oADpVRKASJxRfp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChNeFazjEMG9NS/20r3DB02ZfmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMzQ5 MGFlMy00MWNkLTRlOWEtOGRjZS0zYzljN2Y3YTEwZWUvMzM5YzJhNzQtMjk0Ni0z ZWVhLWI5NmMtZTBhNWRhZWIzMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDM0OTBhZTMtNDFjZC00ZTlhLThk Y2UtM2M5YzdmN2ExMGVlLzAzNDkwYWUzLTQxY2QtNGU5YS04ZGNlLTNjOWM3Zjdh MTBlZS5jcmwwHwYDVR0jBBgwFoAUCMgdkTMaTG77iXh1OLCvLiuV+wswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wMzQ5MGFlMy00MWNkLTRlOWEtOGRjZS0zYzlj N2Y3YTEwZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0cT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc9czX3tnMA2ac8DHdBicDEaJAYWwqgQOw7zvj8kTKGmj1sTsd/OSl8 fakMgrrNN5ShpIDoOOJ2OkWbB7RBPm4G6r9HfZQh/XAac7sbUqBngjvj9H+yzQrP NIk0iF4/jSwbcDbF7cAJ7IMlzb8FaQP0ag8vM/vHqipnprGvZW+cQSvk3oOBGvQk M64WNHQwG976GDKthpXlODaY0phpsnbvwhwfU47ow19HJNzf4RXhqWaGsSOdoht0 EsuoScjVRQO9CSQgsjx72ePlX8jvIOBdo1/eD25agPIRkdQWYBUeGfYg0+XABJQw TVB6MProCD1AvCB35Jw5Yn9db7MvIfc= -----END CERTIFICATE-----Generated at Wed Aug 6 04:06:01 2025 by rpki-client