$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa File: 2de5309f-2941-3cb8-9d7b-3d214fc87564.roa (raw, json) Hash identifier: yflAquQ2012vC0Fn5FkOfo3HvhljQG+CVT7nYVLlemo= Subject key identifier: 2C:E6:07:7B:6A:FE:BC:56:54:A5:58:C0:94:74:11:4C:5B:18:13:86 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584AA85BB8322149E07E60307E80 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 27203 IP address blocks: 216.68.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b8:32:21:49:e0:7e:60:30:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=2bcc3158-1fad-4e85-a6d1-a0f9606e116b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:24:45:85:01:08:79:61:13:1a:9f:42:ef: 1a:de:cf:d2:13:b2:81:0f:e8:88:d9:0d:8b:88:b4: 1c:09:12:d5:4f:cd:3d:6f:8f:4c:c0:b4:ab:1a:b2: cf:55:45:41:87:4e:59:14:b6:a7:99:7f:c8:79:4e: 79:3b:b4:e9:77:0c:a6:f3:a5:b5:a0:25:1c:58:4a: 01:ba:ae:d2:7c:5e:12:dd:9b:32:fd:33:c6:73:af: 91:20:20:e5:92:34:76:69:a4:48:3e:a1:28:fe:16: db:7c:88:1e:3a:2a:f0:40:e2:79:31:88:9c:da:a0: c6:21:83:13:3c:90:61:71:a9:6e:f6:d2:97:64:3f: b7:6c:8d:ee:02:e6:e7:b8:e1:f5:98:7f:a2:74:83: a4:f9:ac:03:43:17:d7:7c:f9:76:73:9c:9d:1e:6d: 11:c8:48:41:c0:62:57:b8:3a:ae:8a:38:07:ae:ae: 91:ad:68:6d:30:51:70:ae:1a:a0:d7:f4:78:23:61: 51:cd:8d:00:c9:86:1d:a5:75:0b:d4:f0:92:9f:29: 5e:d1:40:eb:cb:51:02:65:a8:6e:e8:47:7c:33:b5: cc:77:79:ef:cd:36:36:b7:2f:fc:02:28:82:b6:19: 2d:ea:41:02:67:6e:e1:02:f3:db:98:bb:6d:bb:c7: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E6:07:7B:6A:FE:BC:56:54:A5:58:C0:94:74:11:4C:5B:18:13:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2de5309f-2941-3cb8-9d7b-3d214fc87564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b9:97:bc:96:74:f1:df:11:15:2b:9e:ab:cb:a6:46:54:28: c6:5f:f9:da:df:49:c3:a1:c9:22:ea:c5:ed:aa:14:ae:5e:e5: 5f:a9:be:d2:e9:5f:f2:72:03:dd:3a:20:4a:ce:93:1c:77:7e: b6:7e:d8:62:37:04:2d:1e:68:25:4c:28:7e:e7:46:d8:00:12: cf:6a:51:a2:8b:fe:e9:6d:b2:fb:12:c1:44:80:3a:96:54:dd: f1:80:a6:f9:a4:2d:b9:2e:65:5a:37:9b:1c:d5:1d:c8:13:50: e4:8d:af:41:2f:e5:11:e5:de:18:6d:6d:ea:6d:9f:bf:35:09: cd:9c:b7:fc:9a:ee:f1:66:7d:68:73:64:b0:37:b0:80:cf:da: 32:ae:f0:a1:2e:d8:d6:e3:4c:67:7a:90:1d:7f:bb:84:c4:f7: c6:3b:bd:73:45:28:e5:33:8c:e7:b2:cd:87:08:d5:d7:56:1e: 86:a5:b5:61:0b:a8:14:b5:d1:7e:c6:c9:c2:83:75:14:e9:4f: d3:ef:44:73:5e:15:2e:75:53:fc:86:52:f4:10:4d:75:38:23: b3:76:65:92:61:92:76:dc:a6:2c:55:76:7f:02:1e:5c:46:d4: d8:ae:3a:c3:ff:89:36:a7:8a:7d:5b:20:54:57:3c:3d:0a:82: fe:e4:49:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7gyIUngfmAwfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MmJjYzMxNTgtMWZhZC00ZTg1LWE2ZDEtYTBmOTYwNmUxMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqegkRYUBCHlhExqfQu8a3s/SE7KBD+iI2Q2L iLQcCRLVT809b49MwLSrGrLPVUVBh05ZFLanmX/IeU55O7Tpdwym86W1oCUcWEoB uq7SfF4S3Zsy/TPGc6+RICDlkjR2aaRIPqEo/hbbfIgeOirwQOJ5MYic2qDGIYMT PJBhcalu9tKXZD+3bI3uAubnuOH1mH+idIOk+awDQxfXfPl2c5ydHm0RyEhBwGJX uDquijgHrq6RrWhtMFFwrhqg1/R4I2FRzY0AyYYdpXUL1PCSnyle0UDry1ECZahu 6Ed8M7XMd3nvzTY2ty/8AiiCthkt6kECZ27hAvPbmLttu8dqLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzmB3tq/rxWVKVYwJR0EUxbGBOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMmRlNTMwOWYtMjk0MS0z Y2I4LTlkN2ItM2QyMTRmYzg3NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu5l7yWdPHfERUrnqvLpkZUKMZf+drfScOhySLqxe2qFK5e5V+pvtLp X/JyA906IErOkxx3frZ+2GI3BC0eaCVMKH7nRtgAEs9qUaKL/ultsvsSwUSAOpZU 3fGApvmkLbkuZVo3mxzVHcgTUOSNr0Ev5RHl3hhtbeptn781Cc2ct/ya7vFmfWhz ZLA3sIDP2jKu8KEu2NbjTGd6kB1/u4TE98Y7vXNFKOUzjOeyzYcI1ddWHoaltWEL qBS10X7GycKDdRTpT9PvRHNeFS51U/yGUvQQTXU4I7N2ZZJhknbcpixVdn8CHlxG 1NiuOsP/iTanin1bIFRXPD0Kgv7kSbA= -----END CERTIFICATE-----Generated at Wed Jul 30 13:19:54 2025 by rpki-client