$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa File: d9010bb7-b127-300d-8f26-9f8325848a6d.roa (raw, json) Hash identifier: ply+4NQ2tpaEfX6vXANphke3kcwxGT9WIgdF/a5hlxk= Subject key identifier: BC:B9:60:4F:D4:90:78:E5:5A:83:10:15:AD:93:8F:FA:14:7C:A3:C9 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584A90A0C4D966074B00A8C59640 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c4:d9:66:07:4b:00:a8:c5:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=c5b1c374-bc32-420d-b11b-db5f4bb2df26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:fd:0b:50:32:79:bc:03:5d:20:60:9c:70: 9d:1d:25:0b:79:37:58:87:c6:21:a7:35:bc:24:f5: 2c:26:b9:ec:8f:1b:8b:1b:20:31:98:8e:ef:03:b4: ca:bf:e1:cc:dc:c9:b6:29:bb:60:33:1d:5f:2d:d6: 9a:e6:b1:c9:c7:67:39:23:ed:00:fe:bd:fe:aa:06: d0:95:68:4a:f0:a9:2c:4a:25:8b:c9:ce:40:ed:13: a0:8b:fe:fc:de:48:a4:e9:8f:aa:14:bd:72:0a:da: d6:c5:66:a6:f9:7e:cc:86:7f:f5:0e:8e:9c:02:73: 1c:fa:72:17:4a:42:d1:ed:e0:82:68:6f:12:ea:c3: 62:aa:de:b6:17:df:1b:30:75:a1:ed:8f:7e:1c:d6: b6:79:ea:3b:27:b2:7e:b8:27:a5:65:4f:76:21:e4: 8f:1f:2a:e1:eb:a3:0d:18:5f:ad:07:a6:10:60:bd: 0d:c6:29:ff:ce:c3:50:a3:24:72:d9:fa:08:2f:e0: d9:88:47:0c:ba:32:52:37:32:eb:6c:c1:02:5c:92: f8:e4:77:12:f6:b0:96:e4:16:45:7f:74:ae:46:a5: ea:c5:88:95:56:6e:72:99:a4:0e:29:b5:92:3a:7f: 7a:ae:f3:53:c3:a1:8e:fc:19:3f:a5:bf:a5:52:70: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B9:60:4F:D4:90:78:E5:5A:83:10:15:AD:93:8F:FA:14:7C:A3:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7b:e0:1f:4d:0e:a4:f8:56:2a:05:89:80:71:4e:d8:0b:e5: a9:a4:19:a9:91:b6:81:c8:23:ba:19:39:cb:91:8b:06:47:24: d1:15:fe:f4:5e:4d:9d:c6:cd:7e:b1:5d:bf:bb:52:0e:99:53: c5:b7:4d:99:1d:c7:e8:ed:8a:af:aa:c5:c8:4b:01:72:3c:4d: f3:f0:e4:49:25:1b:b8:e1:af:ff:d1:05:a1:5a:af:37:a1:ed: f3:18:15:e8:d7:73:5f:6c:42:7b:77:e1:18:d2:29:be:4f:55: 35:7b:81:d3:e7:36:19:e1:26:b3:aa:43:bd:ab:4a:c0:3b:c2: c1:9f:76:0c:67:e5:80:6e:48:2c:09:bd:3a:fd:cb:93:27:d8: 89:22:fb:d1:a8:bd:66:c6:d8:c6:63:fa:00:15:d4:33:5d:45: af:8f:ae:4c:ab:ec:99:aa:d6:c2:bc:39:ef:ee:d1:08:c8:46: 57:96:d0:4a:51:1e:83:3e:bb:3e:71:99:d3:49:d6:3d:2f:ea: 79:8d:2f:95:e8:cf:12:93:53:2a:55:a9:fd:57:4a:94:88:28: a0:be:9b:03:7f:38:05:50:87:14:42:12:76:ff:fe:a2:46:cb: 4c:e1:66:44:07:0d:27:5b:9a:e0:43:eb:ad:ab:db:b5:d8:18: c8:f1:f0:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMTZZgdLAKjFlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YzViMWMzNzQtYmMzMi00MjBkLWIxMWItZGI1ZjRiYjJkZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH/9C1AyebwDXSBgnHCdHSULeTdYh8YhpzW8 JPUsJrnsjxuLGyAxmI7vA7TKv+HM3Mm2KbtgMx1fLdaa5rHJx2c5I+0A/r3+qgbQ lWhK8KksSiWLyc5A7ROgi/783kik6Y+qFL1yCtrWxWam+X7Mhn/1Do6cAnMc+nIX SkLR7eCCaG8S6sNiqt62F98bMHWh7Y9+HNa2eeo7J7J+uCelZU92IeSPHyrh66MN GF+tB6YQYL0Nxin/zsNQoyRy2foIL+DZiEcMujJSNzLrbMECXJL45HcS9rCW5BZF f3SuRqXqxYiVVm5ymaQOKbWSOn96rvNTw6GO/Bk/pb+lUnAYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy5YE/UkHjlWoMQFa2Tj/oUfKPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvZDkwMTBiYjctYjEyNy0z MDBkLThmMjYtOWY4MzI1ODQ4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp74B9NDqT4VioFiYBxTtgL5amkGamRtoHII7oZOcuRiwZHJNEV/vRe TZ3GzX6xXb+7Ug6ZU8W3TZkdx+jtiq+qxchLAXI8TfPw5EklG7jhr//RBaFarzeh 7fMYFejXc19sQnt34RjSKb5PVTV7gdPnNhnhJrOqQ72rSsA7wsGfdgxn5YBuSCwJ vTr9y5Mn2Iki+9GovWbG2MZj+gAV1DNdRa+Prkyr7Jmq1sK8Oe/u0QjIRleW0EpR HoM+uz5xmdNJ1j0v6nmNL5XozxKTUypVqf1XSpSIKKC+mwN/OAVQhxRCEnb//qJG y0zhZkQHDSdbmuBD662r27XYGMjx8OA= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:40 2025 by rpki-client