$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/950aef02-b8e7-356d-b6d5-602b99c82b29.roa File: 950aef02-b8e7-356d-b6d5-602b99c82b29.roa (raw, json) Hash identifier: 39l4DaIn5tIf1Xd3sLdpxlsIbAOrEU2LGIkIkobvxMM= Subject key identifier: EE:70:A4:83:E1:DD:0A:81:EC:D9:A5:E9:F0:6F:4F:6E:30:18:8A:01 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584A841237E7EB9C11CBFF53E900 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/950aef02-b8e7-356d-b6d5-602b99c82b29.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 208.117.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:37:e7:eb:9c:11:cb:ff:53:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=86ee0f18-b66f-40bc-9fc1-72f4911646c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:df:22:bf:ab:8b:12:e5:1f:01:04:eb:c8: 87:b6:1f:57:55:d9:90:02:56:c3:f7:33:94:8c:84: 97:63:db:64:f2:ad:33:62:38:58:67:73:db:a1:20: 18:9e:ab:d6:fe:c6:f3:a9:59:5a:83:d4:5c:31:71: e1:76:41:5b:bd:6b:a4:62:3d:98:69:7b:42:97:e4: f4:42:93:02:8a:6b:89:8f:25:90:51:1d:61:2e:ac: 84:4e:a2:30:14:3b:34:f8:fb:56:4d:44:70:18:96: ee:0e:bd:ed:81:41:d0:6b:d5:99:69:c0:bf:3f:ee: 3d:ce:ef:d2:96:b8:45:d6:68:94:b4:ac:72:12:fd: 61:85:35:77:0e:2e:d8:6e:a0:34:e3:71:1a:35:24: 1a:ab:dd:78:ae:ff:b4:e7:c9:89:34:d8:ce:c4:9e: cc:57:fa:d3:d6:5a:42:2c:30:97:b9:ab:70:e3:f9: 3a:81:39:b8:bd:9f:e6:93:4a:48:7c:9a:05:c0:5b: c4:5f:61:79:d3:7c:a5:b1:11:5f:92:74:45:b1:71: c1:32:26:8b:ae:95:63:42:67:b4:b9:e1:04:32:6f: 1a:32:66:fe:24:a1:1a:21:8b:4a:1e:26:eb:02:27: 88:33:dc:fc:4c:2a:bd:5e:d7:fb:2f:3d:a9:a9:25: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:70:A4:83:E1:DD:0A:81:EC:D9:A5:E9:F0:6F:4F:6E:30:18:8A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/950aef02-b8e7-356d-b6d5-602b99c82b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c6:cf:e0:97:5a:43:0a:24:7f:c2:6e:b7:2b:53:63:e0:8f: 90:b1:8b:a2:e6:09:3d:5e:ae:19:0b:e5:22:f8:91:57:61:ed: e3:bb:6b:cd:38:82:f6:1e:2f:1c:95:e5:72:ef:88:48:50:f9: d6:64:e3:8b:ad:b5:ff:5b:f1:a0:dc:d3:9c:9b:5a:c9:c1:3f: af:4d:bb:c1:9b:fa:01:ae:1c:2a:fc:12:d3:a0:12:32:fe:d4: ec:3f:e5:ee:a2:61:4d:15:48:8d:60:c4:01:75:da:f6:34:d6: c1:64:a3:9c:c5:21:a3:fe:89:5d:b0:5f:fd:8d:2f:8e:18:a5: 96:59:7f:0b:5b:09:5a:fb:cd:93:36:40:3c:cc:d4:45:13:fb: fe:aa:7e:0d:5e:88:da:0f:bd:bf:dc:33:ec:1b:9d:47:10:3d: ef:0f:62:c9:70:1a:76:29:0a:50:92:9b:96:4d:0e:4d:98:25: 45:db:00:ad:ac:69:b5:98:7d:a0:9f:9f:b0:68:b4:69:c2:50: c6:cf:c8:68:6d:86:15:81:dd:2d:17:12:b7:07:82:3f:1c:c0: 59:27:aa:52:87:01:7d:58:fc:cf:c8:e7:55:15:90:72:e5:19: ec:c2:da:aa:ba:ff:40:be:24:31:13:33:c6:63:55:ee:ca:37: f7:b0:ee:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjfn65wRy/9T6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODZlZTBmMTgtYjY2Zi00MGJjLTlmYzEtNzJmNDkxMTY0NmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOTfIr+rixLlHwEE68iHth9XVdmQAlbD9zOU jISXY9tk8q0zYjhYZ3PboSAYnqvW/sbzqVlag9RcMXHhdkFbvWukYj2YaXtCl+T0 QpMCimuJjyWQUR1hLqyETqIwFDs0+PtWTURwGJbuDr3tgUHQa9WZacC/P+49zu/S lrhF1miUtKxyEv1hhTV3Di7YbqA043EaNSQaq914rv+058mJNNjOxJ7MV/rT1lpC LDCXuatw4/k6gTm4vZ/mk0pIfJoFwFvEX2F503ylsRFfknRFsXHBMiaLrpVjQme0 ueEEMm8aMmb+JKEaIYtKHibrAieIM9z8TCq9Xtf7Lz2pqSUboQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5wpIPh3QqB7Nml6fBvT24wGIoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOTUwYWVmMDItYjhlNy0z NTZkLWI2ZDUtNjAyYjk5YzgyYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0HX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDGz+CXWkMKJH/CbrcrU2Pgj5Cxi6LmCT1erhkL5SL4kVdh7eO7a804 gvYeLxyV5XLviEhQ+dZk44uttf9b8aDc05ybWsnBP69Nu8Gb+gGuHCr8EtOgEjL+ 1Ow/5e6iYU0VSI1gxAF12vY01sFko5zFIaP+iV2wX/2NL44YpZZZfwtbCVr7zZM2 QDzM1EUT+/6qfg1eiNoPvb/cM+wbnUcQPe8PYslwGnYpClCSm5ZNDk2YJUXbAK2s abWYfaCfn7BotGnCUMbPyGhthhWB3S0XErcHgj8cwFknqlKHAX1Y/M/I51UVkHLl GezC2qq6/0C+JDETM8ZjVe7KN/ew7vU= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:37 2025 by rpki-client