$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa File: 1da5043e-166b-3b4e-9f88-d7e917854fc5.roa (raw, json) Hash identifier: w2NYVl7o6EnrmDo8pUS7ex9sPLnHNIYbyrtiyn3drUw= Subject key identifier: B3:6C:A0:19:CF:27:8D:63:1C:17:54:3B:83:BE:29:32:CD:12:31:A8 Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F4328584AA42B82619FD7694B5C4E61C0 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 40513 IP address blocks: 167.206.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:82:61:9f:d7:69:4b:5c:4e:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=ba344f70-8dca-47ee-995c-e599f3e1b7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4e:4f:c7:e0:87:01:7b:8c:9f:a9:ae:11:eb: 64:df:47:66:af:2c:57:ca:96:a1:4c:50:fb:83:a2: 90:9b:ba:eb:60:89:21:71:8a:2f:0e:c1:c5:f8:00: b7:d1:c6:d5:bf:dd:df:9e:aa:20:fb:d9:46:41:63: b4:a6:f1:28:58:3a:f6:33:3b:49:8f:a6:c8:f7:3b: b1:76:be:0c:3f:7e:86:a9:7e:bb:a2:aa:ec:e2:0b: 24:bc:2f:c6:1f:a7:1d:53:e9:57:a5:5d:cd:57:45: 56:d1:9f:7f:64:51:3b:46:4f:dd:22:f6:06:56:db: f8:0b:24:80:c6:05:d1:a3:cf:40:49:ea:86:41:ff: f1:3a:53:02:ee:bb:e8:11:6b:03:b1:a3:dc:67:00: ad:b5:2b:c6:7e:6e:8d:9d:a5:60:a8:08:36:40:a6: 8d:44:0a:97:3a:06:cf:0f:a6:03:dc:c5:64:cd:4f: 24:df:4c:5d:07:31:53:35:d9:ae:98:ae:b6:6d:1f: bf:98:c2:aa:8c:4f:66:04:ab:38:ae:52:bb:cd:f1: 3d:14:6e:75:3d:8f:b1:46:9d:5e:7f:be:59:90:b2: 60:2b:4d:b2:0b:26:37:04:bc:ba:83:56:41:7d:c6: 8d:44:5e:f5:33:aa:eb:fe:b0:21:19:87:f1:ed:cc: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6C:A0:19:CF:27:8D:63:1C:17:54:3B:83:BE:29:32:CD:12:31:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:57:19:95:df:20:8c:ef:63:c5:6a:ef:4e:80:e3:10:4a:15: fa:1a:a0:68:8a:41:60:b0:81:0c:41:76:91:27:e0:b8:f3:1c: bb:66:c2:4a:b3:f6:a8:6e:06:d7:39:0b:c0:eb:17:c9:09:9d: 4a:8b:8a:97:4d:aa:5b:2f:53:3d:2d:20:0c:14:5c:36:cf:26: e6:61:c6:27:bf:5e:4b:fa:4b:d2:8e:66:fe:47:83:28:d7:89: a5:77:4b:47:c7:70:c0:13:18:b6:cf:0c:c2:df:32:36:ff:41: cf:4e:ff:f8:a2:de:8f:a5:e6:d7:e4:1d:4c:8e:de:33:fa:47: 0b:21:f0:a5:24:1f:89:68:99:a4:f6:35:5a:96:65:38:aa:91: 72:fc:af:b9:ed:80:c9:ea:92:11:eb:ea:45:26:57:f3:c3:4c: 84:81:42:18:d8:93:b0:3f:e3:0c:a8:5f:41:9e:2d:d9:bd:e8: f6:d7:10:3a:19:f9:46:0f:04:7b:b6:b7:9b:66:1b:ef:c6:6e: 97:93:e2:c2:0c:77:c9:82:5a:d7:ec:86:60:27:ae:08:56:83: 02:63:d0:2a:23:22:84:e1:0a:47:49:7c:f6:dc:9b:6c:95:14: 41:f7:6f:ff:d3:72:8d:dc:53:7d:07:be:61:81:9b:9c:39:11: f3:06:ba:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4Jhn9dpS1xOYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YmEzNDRmNzAtOGRjYS00N2VlLTk5NWMtZTU5OWYzZTFiN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU5Px+CHAXuMn6muEetk30dmryxXypahTFD7 g6KQm7rrYIkhcYovDsHF+AC30cbVv93fnqog+9lGQWO0pvEoWDr2MztJj6bI9zux dr4MP36GqX67oqrs4gskvC/GH6cdU+lXpV3NV0VW0Z9/ZFE7Rk/dIvYGVtv4CySA xgXRo89ASeqGQf/xOlMC7rvoEWsDsaPcZwCttSvGfm6NnaVgqAg2QKaNRAqXOgbP D6YD3MVkzU8k30xdBzFTNdmumK62bR+/mMKqjE9mBKs4rlK7zfE9FG51PY+xRp1e f75ZkLJgK02yCyY3BLy6g1ZBfcaNRF71M6rr/rAhGYfx7czAZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNsoBnPJ41jHBdUO4O+KTLNEjGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvMWRhNTA0M2UtMTY2Yi0z YjRlLTlmODgtZDdlOTE3ODU0ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp87RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtXGZXfIIzvY8Vq706A4xBKFfoaoGiKQWCwgQxBdpEn4LjzHLtmwkqz 9qhuBtc5C8DrF8kJnUqLipdNqlsvUz0tIAwUXDbPJuZhxie/Xkv6S9KOZv5HgyjX iaV3S0fHcMATGLbPDMLfMjb/Qc9O//ii3o+l5tfkHUyO3jP6Rwsh8KUkH4lomaT2 NVqWZTiqkXL8r7ntgMnqkhHr6kUmV/PDTISBQhjYk7A/4wyoX0GeLdm96PbXEDoZ +UYPBHu2t5tmG+/GbpeT4sIMd8mCWtfshmAnrghWgwJj0CojIoThCkdJfPbcm2yV FEH3b//Tco3cU30HvmGBm5w5EfMGuhI= -----END CERTIFICATE-----Generated at Tue Jul 29 18:57:38 2025 by rpki-client