$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json) Hash identifier: BouDyDstywnMd8DDkxTSEL7AHvlTUXL17DSfD8Or/1Y= Subject key identifier: 62:0C:18:A5:12:A5:C2:1B:CC:8A:2E:1B:C8:16:36:B8:FD:C8:6F:F6 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584A94D0D06EC48E2C5FF615ECC0 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 21519 IP address blocks: 208.73.28.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d0:6e:c4:8e:2c:5f:f6:15:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=7cd6c2cc-58b6-41ac-b62c-181085a4386c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:49:b4:77:48:97:98:d5:21:cb:fe:fa:98:9e: 78:1a:1f:85:62:ba:02:f7:70:5d:76:94:73:ce:81: 44:47:75:a2:c9:09:8e:51:08:ee:bb:48:3f:c8:04: e4:5f:07:83:d9:ec:7e:ac:b0:91:98:65:84:09:e3: 6b:23:1e:61:89:a3:b3:76:01:11:ef:ee:e5:8a:4c: 04:1a:da:fa:73:b1:90:28:18:ac:d9:80:72:a6:16: 00:9d:2d:d8:69:ee:a1:c4:36:ee:95:d7:b0:b4:8c: 36:e5:23:bc:97:5e:57:c4:4d:dd:e9:ad:4c:c8:c6: 7a:8f:f6:2f:72:78:55:4e:1d:b8:fc:83:27:b7:9b: 8e:5f:28:54:91:9e:38:64:a5:04:27:82:20:f9:d7: 39:f2:f0:44:43:30:37:bf:e5:f5:79:3e:55:21:60: 2d:88:0a:8d:bf:9f:e5:12:0a:cf:c2:48:d1:5f:bd: 0b:0a:e5:2f:44:fe:d0:0e:95:b1:39:bd:e4:4e:bb: c2:bc:36:33:93:df:60:f1:41:5e:e9:ba:51:f2:1b: 77:e1:d0:76:0a:37:e4:ef:fc:93:a8:02:aa:07:a9: 6b:be:30:5a:29:e1:a8:b0:43:73:e2:cc:dd:a0:4b: 1e:74:61:59:af:94:b5:85:0b:f8:7b:30:3f:42:da: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0C:18:A5:12:A5:C2:1B:CC:8A:2E:1B:C8:16:36:B8:FD:C8:6F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 208.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4b:36:5d:aa:c2:82:7e:1d:51:0a:9f:57:d1:f9:54:cc:5d: 95:fb:4e:14:2d:bd:ab:5e:8c:4c:d0:6e:a1:91:48:33:1b:b1: 03:14:c6:7a:5e:69:10:41:61:46:09:91:4d:f7:d8:eb:8e:aa: a9:c2:b6:37:c8:76:ae:a3:00:04:63:2a:da:be:98:06:54:4c: 17:69:2d:16:d5:93:37:c4:6f:ce:d3:23:91:a2:da:72:27:01: b4:c6:6c:4a:9b:ce:4d:b4:4c:11:da:90:5d:3e:41:77:56:cd: 51:b5:40:9a:bb:0e:32:45:b5:20:63:7b:0d:be:e7:ef:35:33: 14:88:ea:8f:15:00:b9:70:d8:83:df:39:e6:1d:d8:f8:50:63: 64:a3:53:31:8b:86:89:f0:09:e0:87:d9:25:15:2a:74:dd:cc: 0d:15:e7:48:1a:99:cb:c9:1a:43:66:1c:bb:78:fc:40:33:c8: 49:a1:89:b1:5f:00:82:6f:0a:5a:20:5c:c5:23:86:6b:af:4d: 12:dd:02:7c:e9:e4:6c:5b:b8:a4:9a:e7:84:52:c1:90:6d:3e: 8a:81:4d:f4:a3:f4:c3:0a:f4:7d:69:47:cc:62:20:10:59:7e: 69:39:7c:25:6e:86:9f:27:93:e8:5c:55:a5:b3:2d:43:44:ec: 7a:d4:49:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NBuxI4sX/YV7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk N2NkNmMyY2MtNThiNi00MWFjLWI2MmMtMTgxMDg1YTQzODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0m0d0iXmNUhy/76mJ54Gh+FYroC93BddpRz zoFER3WiyQmOUQjuu0g/yATkXweD2ex+rLCRmGWECeNrIx5hiaOzdgER7+7likwE Gtr6c7GQKBis2YByphYAnS3Yae6hxDbuldewtIw25SO8l15XxE3d6a1MyMZ6j/Yv cnhVTh24/IMnt5uOXyhUkZ44ZKUEJ4Ig+dc58vBEQzA3v+X1eT5VIWAtiAqNv5/l EgrPwkjRX70LCuUvRP7QDpWxOb3kTrvCvDYzk99g8UFe6bpR8ht34dB2Cjfk7/yT qAKqB6lrvjBaKeGosENz4szdoEsedGFZr5S1hQv4ezA/QtqOnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIMGKUSpcIbzIouG8gWNrj9yG/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDg5OTU2MjUtZDk1Yy0z MmY4LWJkNzktODk5YTVmYzc4ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpLNl2qwoJ+HVEKn1fR+VTMXZX7ThQtvatejEzQbqGRSDMbsQMUxnpe aRBBYUYJkU332OuOqqnCtjfIdq6jAARjKtq+mAZUTBdpLRbVkzfEb87TI5Gi2nIn AbTGbEqbzk20TBHakF0+QXdWzVG1QJq7DjJFtSBjew2+5+81MxSI6o8VALlw2IPf OeYd2PhQY2SjUzGLhonwCeCH2SUVKnTdzA0V50gamcvJGkNmHLt4/EAzyEmhibFf AIJvClogXMUjhmuvTRLdAnzp5GxbuKSa54RSwZBtPoqBTfSj9MMK9H1pR8xiIBBZ fmk5fCVuhp8nk+hcVaWzLUNE7HrUSeQ= -----END CERTIFICATE-----Generated at Tue Jul 22 12:29:55 2025 by rpki-client