$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa File: 1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (raw, json) Hash identifier: BL6XT+8ezQETtwW+Hs52u01WrwZ6T2t6mh5h5YWi8dQ= Subject key identifier: 42:18:5D:1C:BD:C0:48:D0:33:39:B8:6D:0F:59:25:66:38:D7:8C:76 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584A7D15FF79CB587CFABAA7CB80 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 8075 IP address blocks: 208.64.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:ff:79:cb:58:7c:fa:ba:a7:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=95b2ea9a-32ac-4683-b7e6-057a72c7d66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:95:50:f8:27:28:c5:db:d8:af:9e:69:25:71: 20:c2:8f:de:37:bc:d3:4e:2a:0e:51:79:4e:c9:96: 71:16:8b:78:8d:9e:a5:f7:73:31:71:da:6e:10:e2: 3f:d6:fd:37:c4:be:f6:68:14:99:86:6c:ca:49:1e: 5a:3e:28:28:49:45:5f:45:6a:25:54:b1:b3:63:27: e1:0d:31:2e:97:9f:a0:37:94:ba:f4:d9:1e:07:5a: d0:61:c9:87:d3:9e:ff:78:be:4a:0a:04:74:23:20: 84:9d:b8:45:2a:5d:3c:67:fb:c9:f5:0d:c8:27:60: 75:17:c4:16:34:f3:36:f1:55:32:b3:c0:46:f0:67: 00:60:fd:25:bd:ec:6f:df:c4:11:46:93:3e:b8:71: 10:f8:7b:31:e4:73:8d:41:4d:18:b0:78:51:bb:ae: 72:02:9a:9c:af:e7:03:b0:83:15:59:ea:81:5c:e7: 8f:eb:92:1a:1a:72:d2:8d:a3:c4:5c:c5:56:da:d2: f5:a3:ea:e7:8d:7f:45:d6:0e:eb:54:8d:78:37:3e: 93:c7:6c:ef:4c:01:97:cf:3e:8e:fc:2c:08:a4:36: 0c:ab:e4:e3:55:f4:ab:8d:be:33:42:76:a6:c0:3b: 99:d0:c8:87:da:0d:6f:6a:30:d0:c3:f3:d8:5e:e7: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:18:5D:1C:BD:C0:48:D0:33:39:B8:6D:0F:59:25:66:38:D7:8C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:82:5b:0f:7c:40:59:84:e0:44:c7:98:60:f0:4b:37:38:99: 8d:72:ca:c0:8b:45:84:a1:e6:0d:b4:b0:cd:0d:79:2f:b5:43: ff:b8:57:52:2c:90:d4:51:0a:b9:db:66:aa:87:96:62:cb:ef: 8c:31:74:66:17:53:6f:88:92:c5:c6:7e:0c:0b:70:bb:5b:50: 70:c2:5e:85:76:98:85:8a:cd:5b:0a:70:46:6f:19:d2:46:67: e0:ef:c6:07:29:e3:ac:6b:fe:f5:e1:4b:56:25:f1:e8:74:91: 57:87:61:94:64:1a:c2:f4:5b:72:ef:95:b4:58:4f:75:17:a9: 6b:5e:33:80:45:f6:7c:92:00:1e:4b:43:3f:c7:a1:16:20:8c: e9:51:b7:f2:67:e3:91:82:c2:87:c5:a9:b6:6f:4c:54:ce:0c: 19:11:7e:8d:82:a6:a1:79:77:1a:af:88:f4:9e:78:c0:35:2d: b2:1f:f6:1d:08:60:15:56:e8:c1:da:96:f8:df:33:56:33:16: 5e:fe:49:62:f1:b1:7b:b7:c6:64:97:e3:5c:67:3a:fc:56:0b: 85:9e:78:10:2f:93:ec:46:53:6f:18:72:88:ff:3a:c5:df:2f: 7b:40:4c:a2:69:e2:64:d9:b0:75:ed:45:59:61:d9:74:6b:4b: 9f:19:41:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Ff95y1h8+rqny4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk OTViMmVhOWEtMzJhYy00NjgzLWI3ZTYtMDU3YTcyYzdkNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJVQ+CcoxdvYr55pJXEgwo/eN7zTTioOUXlO yZZxFot4jZ6l93MxcdpuEOI/1v03xL72aBSZhmzKSR5aPigoSUVfRWolVLGzYyfh DTEul5+gN5S69NkeB1rQYcmH057/eL5KCgR0IyCEnbhFKl08Z/vJ9Q3IJ2B1F8QW NPM28VUys8BG8GcAYP0lvexv38QRRpM+uHEQ+Hsx5HONQU0YsHhRu65yApqcr+cD sIMVWeqBXOeP65IaGnLSjaPEXMVW2tL1o+rnjX9F1g7rVI14Nz6Tx2zvTAGXzz6O /CwIpDYMq+TjVfSrjb4zQnamwDuZ0MiH2g1vajDQw/PYXudEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIYXRy9wEjQMzm4bQ9ZJWY414x2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvMWMyZDc2OWUtYjIxMC0z ZTZiLTkwOTUtZjA2NmI5Y2IzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmCWw98QFmE4ETHmGDwSzc4mY1yysCLRYSh5g20sM0NeS+1Q/+4V1Is kNRRCrnbZqqHlmLL74wxdGYXU2+IksXGfgwLcLtbUHDCXoV2mIWKzVsKcEZvGdJG Z+Dvxgcp46xr/vXhS1Yl8eh0kVeHYZRkGsL0W3LvlbRYT3UXqWteM4BF9nySAB5L Qz/HoRYgjOlRt/Jn45GCwofFqbZvTFTODBkRfo2CpqF5dxqviPSeeMA1LbIf9h0I YBVW6MHalvjfM1YzFl7+SWLxsXu3xmSX41xnOvxWC4WeeBAvk+xGU28Ycoj/OsXf L3tATKJp4mTZsHXtRVlh2XRrS58ZQXo= -----END CERTIFICATE-----Generated at Sun Jul 20 09:20:16 2025 by rpki-client