$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bf38da7e-e47c-3788-9913-85ce498c35d4.roa File: bf38da7e-e47c-3788-9913-85ce498c35d4.roa (raw, json) Hash identifier: VHl6SApzOr9NJ8PiVkDtT2Hs+zm1E9qMvSFvGZmPW/Q= Subject key identifier: D5:07:7E:7A:AA:64:1A:60:D7:B9:A1:44:18:5D:8C:23:DC:8E:DE:67 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A841248395EAB88BDA5246B00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bf38da7e-e47c-3788-9913-85ce498c35d4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 69.80.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:48:39:5e:ab:88:bd:a5:24:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1104d3b3-4728-4ff8-ab77-56be9de7bb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:1d:86:d4:34:78:0f:41:33:a9:03:3b:85: 0e:35:f2:7c:cb:f5:11:ec:c1:c9:a0:42:d2:29:2a: 36:1f:66:36:a3:3d:1b:ea:1b:7d:96:c1:bf:07:76: 94:bb:9a:70:17:f7:e0:db:65:84:e5:f2:d3:f0:41: 62:df:3a:7a:37:02:1d:56:ce:90:8d:f5:4e:1a:5c: f0:89:b1:a7:b9:80:71:7a:5b:e8:13:8b:fb:03:54: 53:fb:da:64:c1:9b:43:6e:1d:f9:b4:f2:fb:8f:34: 0a:37:c7:f0:fb:06:6b:01:d0:a9:39:8b:e3:26:70: 16:16:80:93:78:fe:08:e7:7f:59:b8:b4:d9:f5:3b: bf:ec:a2:e6:cf:55:24:85:59:d9:83:a6:5f:c6:2e: 4e:98:37:83:b1:00:df:6d:45:ac:86:7b:1c:01:84: 79:32:48:e2:ba:5c:52:b2:69:88:fd:7e:7e:80:c5: 90:4e:56:0e:ca:9f:ea:7a:8e:85:12:70:98:2a:1b: c3:8e:01:71:8f:64:08:b3:fb:b6:05:5c:8f:14:2b: 79:0f:2c:1a:d1:e2:dc:76:d6:0b:5a:7c:b5:3a:d5: 71:a1:4e:26:4b:22:ab:a0:7f:33:26:a6:00:0e:15: b6:9e:20:08:0d:df:74:a6:16:8f:14:59:0c:7e:c7: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:07:7E:7A:AA:64:1A:60:D7:B9:A1:44:18:5D:8C:23:DC:8E:DE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bf38da7e-e47c-3788-9913-85ce498c35d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 69.80.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2f:32:4e:4c:8d:ef:0c:63:fb:73:59:89:a9:bc:a8:1a:9c: a8:fb:8c:0f:9c:c0:77:26:25:c3:17:56:67:53:bf:fd:d4:ba: 8a:96:f3:95:63:00:72:59:1a:40:72:72:13:09:1f:28:77:35: 5b:7d:4c:3c:90:b7:92:a2:0c:d8:ad:12:1f:7a:d1:23:cd:7a: f1:fa:86:f9:b2:40:01:00:ac:9d:31:5d:98:71:f1:ae:43:5a: 0b:32:9a:a6:bd:fd:5a:35:e9:78:fd:04:52:6c:61:ae:f4:f2: e3:db:d6:3f:ce:80:48:22:0a:26:e8:4a:ee:ad:c3:cc:3b:b4: 68:e3:98:42:c6:82:fa:ba:b2:60:43:95:55:eb:56:90:df:40: ff:18:68:c6:7d:da:be:d8:9e:1e:a5:c7:1a:36:3a:2d:9f:63: ab:e9:c0:b7:c5:65:a8:b6:91:db:2d:bb:e9:85:a4:3b:16:24: 2b:38:ad:37:6d:f0:f0:68:8c:96:e1:97:e7:4a:86:fe:ea:1a: 52:bd:e4:2c:39:27:88:b0:44:3e:e6:5c:ac:10:0b:07:6e:31: a6:06:11:70:39:3c:79:7f:f0:af:36:e4:69:b5:4d:9f:76:33: 34:55:c2:21:3e:cc:6e:b8:8b:77:ce:5f:f1:1e:71:10:a8:dc: d0:7f:b2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkg5XquIvaUkawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTEwNGQzYjMtNDcyOC00ZmY4LWFiNzctNTZiZTlkZTdiYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4kdhtQ0eA9BM6kDO4UONfJ8y/UR7MHJoELS KSo2H2Y2oz0b6ht9lsG/B3aUu5pwF/fg22WE5fLT8EFi3zp6NwIdVs6QjfVOGlzw ibGnuYBxelvoE4v7A1RT+9pkwZtDbh35tPL7jzQKN8fw+wZrAdCpOYvjJnAWFoCT eP4I539ZuLTZ9Tu/7KLmz1UkhVnZg6Zfxi5OmDeDsQDfbUWshnscAYR5MkjiulxS smmI/X5+gMWQTlYOyp/qeo6FEnCYKhvDjgFxj2QIs/u2BVyPFCt5Dywa0eLcdtYL Wny1OtVxoU4mSyKroH8zJqYADhW2niAIDd90phaPFFkMfsf0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUHfnqqZBpg17mhRBhdjCPcjt5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvYmYzOGRhN2UtZTQ3Yy0z Nzg4LTk5MTMtODVjZTQ5OGMzNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgvMk5Mje8MY/tzWYmpvKganKj7jA+cwHcmJcMXVmdTv/3UuoqW85Vj AHJZGkBychMJHyh3NVt9TDyQt5KiDNitEh960SPNevH6hvmyQAEArJ0xXZhx8a5D Wgsymqa9/Vo16Xj9BFJsYa708uPb1j/OgEgiCiboSu6tw8w7tGjjmELGgvq6smBD lVXrVpDfQP8YaMZ92r7Ynh6lxxo2Oi2fY6vpwLfFZai2kdstu+mFpDsWJCs4rTdt 8PBojJbhl+dKhv7qGlK95Cw5J4iwRD7mXKwQCwduMaYGEXA5PHl/8K825Gm1TZ92 MzRVwiE+zG64i3fOX/EecRCo3NB/soI= -----END CERTIFICATE-----Generated at Sat Jul 26 23:49:59 2025 by rpki-client