$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa File: c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa (raw, json) Hash identifier: oIWFVbEraiuKmLMyNBmOOYE32VgvMkWaw9KvM0IWzc4= Subject key identifier: 9B:1F:25:ED:A5:DA:56:26:E3:5D:2B:FD:EC:3D:C3:E0:33:30:82:B7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55CF32A76D6145908C2A00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 21723 IP address blocks: 209.89.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cf:32:a7:6d:61:45:90:8c:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=caba7de3-b0b8-4c81-b4f5-81dd836de4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:03:c5:7c:63:5e:ce:bb:7c:b7:af:9f:b8:3d: 6f:1b:89:48:6b:4f:6c:7c:b4:4d:f4:30:73:b0:e8: 83:46:ed:a1:f6:83:25:bf:e2:5e:69:7e:1e:77:66: 30:d9:ea:d7:be:de:d4:5c:cb:8f:25:69:fb:ef:cb: e2:b6:38:b2:0c:4f:9d:44:57:e2:3d:a3:db:d7:1a: 0f:4d:bf:36:38:20:de:3f:81:60:5a:83:4d:2e:f0: 42:3e:97:90:3a:f6:a8:51:2a:fc:dc:e6:e8:dd:24: e6:3e:a6:96:78:cc:ec:6f:d1:37:ce:82:4a:76:de: 06:c1:5e:17:1f:82:d4:01:38:f9:b8:8c:97:c2:16: 8c:fb:00:03:90:fd:5d:d1:df:30:f8:cd:21:85:e9: 80:bb:ef:14:45:71:f1:c6:49:d2:04:4e:5b:e8:49: 4a:7b:8b:ae:3f:fe:88:83:ed:c1:b8:95:93:c9:a9: 5a:ee:93:9d:95:47:45:f9:cd:c0:5f:e4:a3:e5:d5: d0:06:b3:b2:92:fa:6b:99:7b:87:98:fa:a2:35:52: e7:ba:1e:59:d9:26:e9:f6:09:83:c6:de:4f:b4:d7: d4:97:91:d3:3f:61:3e:8b:03:96:2d:8f:8d:a7:8f: cc:33:71:72:be:32:01:10:f1:1f:1e:63:df:74:1a: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1F:25:ED:A5:DA:56:26:E3:5D:2B:FD:EC:3D:C3:E0:33:30:82:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:d0:1a:0f:04:fb:9b:37:0d:e4:f1:93:41:65:f4:0b:e9:ec: 6d:6f:ca:26:cd:b9:4c:c7:44:79:bb:ab:6e:bb:6b:b6:e8:e8: ce:14:02:fa:fb:bd:99:11:39:17:33:5e:9c:1a:89:5f:ab:5d: 42:ce:52:29:8c:31:8d:19:21:1b:0e:1a:10:9a:e8:2d:c5:35: 4e:af:25:45:2c:6e:58:12:10:74:b5:6d:4f:4c:4f:da:c8:7b: 6c:3f:7d:e2:3d:72:ee:26:72:22:74:ec:8a:0c:b4:ec:0e:48: ee:90:d4:67:cf:6f:8e:01:ab:f2:9e:34:df:03:2a:84:2a:3b: 10:4a:2f:e6:3c:0f:37:3b:ef:22:b2:94:ef:da:17:1e:1c:f8: 68:22:cb:78:4c:55:a1:b3:05:b1:e7:64:27:a7:f8:5b:b3:be: 5f:9d:8a:22:62:7a:be:43:11:45:b3:26:b7:00:66:ce:49:fb: 81:b2:ee:56:03:5e:52:fc:3d:3d:72:27:81:b7:aa:3e:13:c1: fc:c2:cc:27:3d:dd:d3:71:1c:84:a8:3d:db:e9:76:1e:43:2f: 8a:1c:56:cd:40:0b:7e:f9:57:d8:09:4f:35:33:b5:e1:de:bf: 7a:51:5b:33:79:6f:c7:26:80:ce:4c:6d:e9:b8:ed:5a:0d:3f: 33:90:97:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVc8yp21hRZCMKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk Y2FiYTdkZTMtYjBiOC00YzgxLWI0ZjUtODFkZDgzNmRlNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAPFfGNezrt8t6+fuD1vG4lIa09sfLRN9DBz sOiDRu2h9oMlv+JeaX4ed2Yw2erXvt7UXMuPJWn778vitjiyDE+dRFfiPaPb1xoP Tb82OCDeP4FgWoNNLvBCPpeQOvaoUSr83Obo3STmPqaWeMzsb9E3zoJKdt4GwV4X H4LUATj5uIyXwhaM+wADkP1d0d8w+M0hhemAu+8URXHxxknSBE5b6ElKe4uuP/6I g+3BuJWTyala7pOdlUdF+c3AX+Sj5dXQBrOykvprmXuHmPqiNVLnuh5Z2Sbp9gmD xt5PtNfUl5HTP2E+iwOWLY+Np4/MM3FyvjIBEPEfHmPfdBp5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsfJe2l2lYm410r/ew9w+AzMIK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzJhYTk4YWUtYTk4Mi0z ZjQyLTg0M2EtOGMwY2IyYmM5YWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvQGg8E+5s3DeTxk0Fl9Avp7G1vyibNuUzHRHm7q267a7bo6M4UAvr7 vZkRORczXpwaiV+rXULOUimMMY0ZIRsOGhCa6C3FNU6vJUUsblgSEHS1bU9MT9rI e2w/feI9cu4mciJ07IoMtOwOSO6Q1GfPb44Bq/KeNN8DKoQqOxBKL+Y8Dzc77yKy lO/aFx4c+Ggiy3hMVaGzBbHnZCen+Fuzvl+diiJier5DEUWzJrcAZs5J+4Gy7lYD XlL8PT1yJ4G3qj4TwfzCzCc93dNxHISoPdvpdh5DL4ocVs1AC375V9gJTzUzteHe v3pRWzN5b8cmgM5Mbem47VoNPzOQlzo= -----END CERTIFICATE-----Generated at Fri Jul 25 19:19:45 2025 by rpki-client