$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa File: 279b99c7-6717-3c8a-974d-137532afc328.roa (raw, json) Hash identifier: 5KLFrYjnqZpb0GRwn6yE/5ipFKuV0t9OBNYZzW8f2D0= Subject key identifier: EF:F7:2E:50:D5:18:F5:24:DE:EC:E2:CC:9C:7A:BC:9C:BC:13:3F:25 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A9BCB7025FF3A79662BF0AB00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 10397 IP address blocks: 208.85.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:70:25:ff:3a:79:66:2b:f0:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=d417965d-ddd7-45c1-a81d-d42ed1e53d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:a1:49:a8:ae:22:f9:d0:6b:67:1b:b8:67: e7:e7:e3:33:53:34:35:b0:81:a9:2b:0e:17:f5:4a: 9e:e5:2c:69:95:2d:a0:bf:dc:70:ca:e5:a6:dc:cc: 2e:eb:73:2c:e1:18:67:2b:d3:03:5a:af:de:ca:81: 87:98:1f:e3:4a:f3:46:54:08:b0:6d:5b:80:8d:e7: ca:aa:fe:e9:8b:23:0a:8f:25:80:b5:da:ee:38:0c: c2:96:78:d0:41:91:6a:e6:39:16:6d:ae:fd:e3:41: 30:9c:54:65:82:f4:01:6f:b8:6c:77:f7:53:fd:ab: 49:3c:1d:38:6f:5c:b9:db:ec:8d:df:14:84:7d:4e: 5b:2e:b1:4e:9f:53:d7:6e:02:02:f0:6e:3e:9f:fb: 3a:eb:b3:5e:9e:12:24:e1:17:64:9d:69:a2:3a:23: b9:11:99:0c:84:86:41:99:0f:7a:c5:63:fb:35:7d: 11:30:51:d0:3b:f6:04:5c:15:79:c9:9a:f0:69:7e: a7:8f:96:e3:17:31:34:d2:de:dd:e2:ce:5a:64:4c: 3e:f4:cf:5f:1f:0a:49:fd:4b:af:58:24:4a:dc:94: ac:fd:da:cf:3c:20:ad:d5:96:46:db:63:65:03:c3: d2:9c:27:7e:ba:89:ab:dc:b7:bc:db:6c:c5:27:af: cf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F7:2E:50:D5:18:F5:24:DE:EC:E2:CC:9C:7A:BC:9C:BC:13:3F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 208.85.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9d:7d:f1:5e:97:e6:4c:86:fc:be:8f:ad:01:f7:91:9f:18: 6a:a9:4f:ba:d7:0a:1e:bc:16:11:cc:ed:05:40:2b:91:ce:16: bc:f5:cf:2b:6a:12:0c:aa:9e:cc:44:03:1e:dc:9c:68:9d:ef: 91:e5:4f:5c:c9:f0:49:78:dc:87:03:04:af:d7:35:3c:02:8a: 87:da:a1:09:47:6c:cf:69:96:57:da:1c:95:44:db:d6:cd:72: e6:27:f6:d8:fb:a4:3d:53:64:ea:bd:38:ef:7d:01:0b:e5:ac: 69:ab:fd:44:87:5e:13:a4:86:48:cb:4c:8b:4b:4b:28:38:d8: 33:10:bd:20:8b:fd:8c:50:ff:d9:33:1f:91:35:dd:7e:e5:0a: 3a:89:a8:c7:00:72:ae:98:16:f6:63:57:6e:e3:f9:75:c3:77: f0:cc:28:44:e9:a4:3d:23:48:1d:10:4e:6f:ab:4b:7f:30:78: a1:8b:34:7e:b2:be:34:c7:5f:5a:ca:c3:d6:34:44:11:22:9e: 7a:98:dc:30:6d:48:2a:76:5a:50:de:ba:59:d9:f9:c7:f5:82: 0c:a5:d7:c5:eb:d0:be:fc:25:09:21:1f:99:e9:97:45:2e:61: b7:98:ab:17:fc:c4:9a:c5:df:4c:fa:78:cb:56:5d:00:06:9e: 4f:06:36:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby3Al/zp5ZivwqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk ZDQxNzk2NWQtZGRkNy00NWMxLWE4MWQtZDQyZWQxZTUzZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OqhSaiuIvnQa2cbuGfn5+MzUzQ1sIGpKw4X 9Uqe5SxplS2gv9xwyuWm3Mwu63Ms4RhnK9MDWq/eyoGHmB/jSvNGVAiwbVuAjefK qv7piyMKjyWAtdruOAzClnjQQZFq5jkWba7940EwnFRlgvQBb7hsd/dT/atJPB04 b1y52+yN3xSEfU5bLrFOn1PXbgIC8G4+n/s667NenhIk4RdknWmiOiO5EZkMhIZB mQ96xWP7NX0RMFHQO/YEXBV5yZrwaX6nj5bjFzE00t7d4s5aZEw+9M9fHwpJ/Uuv WCRK3JSs/drPPCCt1ZZG22NlA8PSnCd+uomr3Le822zFJ6/P3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/3LlDVGPUk3uzizJx6vJy8Ez8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMjc5Yjk5YzctNjcxNy0z YzhhLTk3NGQtMTM3NTMyYWZjMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOdffFel+ZMhvy+j60B95GfGGqpT7rXCh68FhHM7QVAK5HOFrz1zytq EgyqnsxEAx7cnGid75HlT1zJ8El43IcDBK/XNTwCiofaoQlHbM9pllfaHJVE29bN cuYn9tj7pD1TZOq9OO99AQvlrGmr/USHXhOkhkjLTItLSyg42DMQvSCL/YxQ/9kz H5E13X7lCjqJqMcAcq6YFvZjV27j+XXDd/DMKETppD0jSB0QTm+rS38weKGLNH6y vjTHX1rKw9Y0RBEinnqY3DBtSCp2WlDeulnZ+cf1ggyl18Xr0L78JQkhH5npl0Uu YbeYqxf8xJrF30z6eMtWXQAGnk8GNlg= -----END CERTIFICATE-----Generated at Sat Aug 2 14:01:45 2025 by rpki-client