$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa File: 19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa (raw, json) Hash identifier: 9bRiwJlwSbgxXGhjuz/WoOCkg1XFTDesfT79w+8ZWrs= Subject key identifier: EC:95:2A:85:E9:3E:92:EC:DB:F3:FB:27:70:F2:E6:87:27:96:A6:91 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A778083F9B307D6F2D9A6DD00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 10397 IP address blocks: 209.209.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:83:f9:b3:07:d6:f2:d9:a6:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=1ec00633-9494-48b0-9e60-f23aaa7a4fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:b2:66:98:15:f6:cd:30:6f:b0:be:31:64: 3d:e3:f3:7f:86:34:b2:a7:d6:e3:f2:24:88:43:33: 46:aa:73:6d:1f:9a:a4:43:89:e9:90:96:44:42:22: 3d:60:25:1f:83:d0:1b:1b:60:0b:7e:8a:cc:6b:fc: a3:0b:17:31:4d:a2:a3:61:c5:43:27:b3:f2:f7:28: 53:d8:42:b3:71:b8:37:e4:9e:a4:de:f1:2f:c2:64: b8:30:20:98:c7:32:e8:2f:eb:75:ec:59:af:41:26: 05:2c:c9:67:f0:45:23:be:1c:bf:15:28:5e:e6:aa: 26:6f:fb:78:97:ae:c2:ba:95:f1:8e:a5:b5:18:8d: 99:72:41:3f:ea:57:37:41:9a:9f:cb:48:0e:69:f8: 1c:5c:d6:b9:4d:95:3a:69:a2:48:a6:df:7f:b8:4c: 25:a9:08:59:58:b8:dc:30:58:f1:03:c3:cb:64:62: be:5c:45:a9:dc:cc:7e:2e:e6:e2:09:c9:3d:c2:66: c3:b5:4f:32:5f:8d:97:cf:7b:ef:76:80:fb:de:6c: 96:af:e0:18:84:73:cd:28:62:aa:0f:76:85:c9:fd: 6d:ea:b0:29:1f:0c:63:1b:96:c4:d8:f6:fc:cc:3e: 67:ce:29:94:1a:00:ff:3e:55:7f:61:8d:30:42:37: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:95:2A:85:E9:3E:92:EC:DB:F3:FB:27:70:F2:E6:87:27:96:A6:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:92:f5:2d:d7:01:cc:ef:f4:1f:b6:53:bc:1d:70:93:22:b9: 04:ca:4a:32:85:24:47:f0:8f:f4:10:27:ec:d2:d6:af:6f:f6: ab:02:72:15:99:48:df:36:a1:b7:dd:ce:ea:ff:eb:61:3b:bf: b7:4a:68:2a:94:f9:15:be:10:59:25:67:be:89:95:c4:1c:9d: 23:68:83:d4:19:3a:3c:c7:69:32:49:87:54:94:d4:4c:d5:b1: c2:5a:3d:5a:fb:f2:4e:34:d6:81:4b:48:0e:a5:82:85:cf:60: a4:4b:04:87:6d:29:40:a9:30:c8:a6:e0:cb:a5:8e:c7:7c:57: 2d:9d:27:ea:59:fe:b8:00:5c:1d:39:18:c0:e9:80:3c:e3:17: 7b:49:d2:50:6a:11:a1:d1:44:62:5c:d8:a3:12:b3:3a:40:82: 2a:79:e8:43:12:bd:f2:b5:73:4e:a8:a6:2a:9c:c4:35:e6:46: 71:67:42:b8:33:46:d1:49:3b:91:d8:fe:a5:10:3e:e8:6e:5f: 2e:2c:33:bc:0f:fe:89:1e:32:a1:40:a5:8f:78:d9:39:4b:82: 6b:16:14:35:0a:c5:d3:14:02:2a:cd:93:f4:5c:fc:ae:1f:6b: 49:43:fa:55:24:b5:ef:f0:d6:ef:97:7a:fd:f7:9d:18:3a:88: fa:c0:12:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIP5swfW8tmm3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MWVjMDA2MzMtOTQ5NC00OGIwLTllNjAtZjIzYWFhN2E0ZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkGyZpgV9s0wb7C+MWQ94/N/hjSyp9bj8iSI QzNGqnNtH5qkQ4npkJZEQiI9YCUfg9AbG2ALforMa/yjCxcxTaKjYcVDJ7Py9yhT 2EKzcbg35J6k3vEvwmS4MCCYxzLoL+t17FmvQSYFLMln8EUjvhy/FShe5qomb/t4 l67CupXxjqW1GI2ZckE/6lc3QZqfy0gOafgcXNa5TZU6aaJIpt9/uEwlqQhZWLjc MFjxA8PLZGK+XEWp3Mx+LubiCck9wmbDtU8yX42Xz3vvdoD73myWr+AYhHPNKGKq D3aFyf1t6rApHwxjG5bE2Pb8zD5nzimUGgD/PlV/YY0wQjfKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyVKoXpPpLs2/P7J3Dy5ocnlqaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTliNGU4ZTItNmQzNC0z ZWE1LTkxYjUtOGZiMzkxOGE2YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqS9S3XAczv9B+2U7wdcJMiuQTKSjKFJEfwj/QQJ+zS1q9v9qsCchWZ SN82obfdzur/62E7v7dKaCqU+RW+EFklZ76JlcQcnSNog9QZOjzHaTJJh1SU1EzV scJaPVr78k401oFLSA6lgoXPYKRLBIdtKUCpMMim4Muljsd8Vy2dJ+pZ/rgAXB05 GMDpgDzjF3tJ0lBqEaHRRGJc2KMSszpAgip56EMSvfK1c06opiqcxDXmRnFnQrgz RtFJO5HY/qUQPuhuXy4sM7wP/okeMqFApY942TlLgmsWFDUKxdMUAirNk/Rc/K4f a0lD+lUkte/w1u+Xev33nRg6iPrAEpQ= -----END CERTIFICATE-----Generated at Sat Aug 2 13:53:22 2025 by rpki-client