$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa File: 3668a37b-a50d-3732-b77d-a313fa326510.roa (raw, json) Hash identifier: 9NXCy8Zi+J0PzgYv5tZx/qeZIe3yXGZ6T17EAYkZurg= Subject key identifier: E8:74:08:D7:14:9E:C4:91:0A:29:DF:17:A7:9B:09:C0:F9:15:70:3E Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Certificate serial: 010D0C9F4328584AF7EBD3A30090D07439EEE980 Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 208.70.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d3:a3:00:90:d0:74:39:ee:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=6d0c68cc-9ead-449b-90a5-ed12b87ce359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:6b:a0:4a:97:17:ec:15:37:f8:72:7e:cd: b9:e4:55:76:28:87:94:b1:e1:f8:35:66:79:02:0c: ce:19:01:07:38:b4:87:8b:8d:59:93:a8:8f:1d:a6: 91:e1:43:4e:6a:b2:a1:b5:e2:5b:35:bd:e7:a0:a9: 36:3c:6d:47:71:ae:6c:c9:e9:3c:c5:8c:c8:f7:11: 96:c5:fb:89:1c:19:43:30:ed:c4:b8:e3:34:7b:e1: be:73:e3:d3:d7:3f:5d:95:61:22:ee:a1:6e:97:bd: 30:ae:25:93:af:19:f8:66:a7:f4:be:19:83:47:01: 44:52:0d:dd:36:39:b7:b9:43:90:32:58:58:fb:9c: 56:58:f6:bf:eb:07:cf:d4:51:c4:22:e5:9e:a8:f4: b8:f6:c3:68:cc:9a:4a:58:36:1e:26:91:30:5d:a9: f7:f4:b7:f0:ca:80:38:39:a9:65:51:ef:70:e4:e8: 4b:61:8e:7b:8f:68:eb:ec:ba:4b:da:a1:0c:3a:98: f6:ea:d6:29:ab:34:de:40:ed:9c:77:1f:de:3c:ec: 64:db:2d:17:86:a6:bc:07:e8:0f:0a:77:94:9d:40: ee:5f:27:dc:6e:a6:3e:ca:1a:70:45:8e:2f:0d:b4: 48:6f:6f:85:de:44:c3:54:dc:83:e8:7a:58:4b:0b: da:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:74:08:D7:14:9E:C4:91:0A:29:DF:17:A7:9B:09:C0:F9:15:70:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl X509v3 Authority Key Identifier: keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer sbgp-ipAddrBlock: critical IPv4: 208.70.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:97:20:a7:10:4a:ce:bf:45:3d:db:58:b8:73:ab:0d:5e:2e: ca:a0:ad:5c:02:c4:af:78:8d:b2:b5:39:47:fb:c8:df:f0:d7: 21:e6:d6:6d:d9:1e:82:74:6c:18:27:7a:06:07:48:18:f8:04: a5:77:6d:f3:b9:a9:4b:41:81:93:f4:cd:43:64:83:b7:2b:0a: 11:c7:71:af:53:b2:61:dc:59:97:af:e7:c2:13:7c:df:2b:b3: 70:0d:6c:d5:3a:3f:23:1d:12:51:5c:9e:c7:8f:4b:a4:61:e1: 26:c0:6a:f3:87:13:36:41:4f:f8:97:d9:23:26:9e:0a:f8:35: 62:2e:ce:a7:e9:28:62:73:b4:32:f7:2b:f0:75:84:d7:89:f6: f6:50:4e:97:b2:df:cc:24:c3:50:ba:ab:75:4f:bd:7d:df:12: 97:21:44:ba:dd:fa:f5:be:f5:f8:b5:dd:42:18:9a:31:e8:46: fe:53:82:b4:d6:94:05:1e:11:d2:b2:0b:07:0a:aa:09:ad:ae: 54:55:39:f7:06:d5:51:75:ff:2b:d9:fa:a1:f5:a0:33:68:00: 1f:79:0f:dd:02:73:1b:a7:6f:e5:08:65:44:49:5f:56:4b:b9: 63:53:5c:e9:94:40:dd:c5:44:a2:cc:3a:7a:38:1f:23:59:70: 3c:78:7e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369OjAJDQdDnu6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk ZjEzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NmQwYzY4Y2MtOWVhZC00NDliLTkwYTUtZWQxMmI4N2NlMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1blroEqXF+wVN/hyfs255FV2KIeUseH4NWZ5 AgzOGQEHOLSHi41Zk6iPHaaR4UNOarKhteJbNb3noKk2PG1Hca5syek8xYzI9xGW xfuJHBlDMO3EuOM0e+G+c+PT1z9dlWEi7qFul70wriWTrxn4Zqf0vhmDRwFEUg3d Njm3uUOQMlhY+5xWWPa/6wfP1FHEIuWeqPS49sNozJpKWDYeJpEwXan39LfwyoA4 OallUe9w5OhLYY57j2jr7LpL2qEMOpj26tYpqzTeQO2cdx/ePOxk2y0Xhqa8B+gP CneUnUDuXyfcbqY+yhpwRY4vDbRIb2+F3kTDVNyD6HpYSwvatwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh0CNcUnsSRCinfF6ebCcD5FXA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvMzY2OGEzN2ItYTUwZC0z NzMyLWI3N2QtYTMxM2ZhMzI2NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0 ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0 YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+XIKcQSs6/RT3bWLhzqw1eLsqgrVwCxK94jbK1OUf7yN/w1yHm1m3Z HoJ0bBgnegYHSBj4BKV3bfO5qUtBgZP0zUNkg7crChHHca9TsmHcWZev58ITfN8r s3ANbNU6PyMdElFcnsePS6Rh4SbAavOHEzZBT/iX2SMmngr4NWIuzqfpKGJztDL3 K/B1hNeJ9vZQTpey38wkw1C6q3VPvX3fEpchRLrd+vW+9fi13UIYmjHoRv5TgrTW lAUeEdKyCwcKqgmtrlRVOfcG1VF1/yvZ+qH1oDNoAB95D90Ccxunb+UIZURJX1ZL uWNTXOmUQN3FRKLMOno4HyNZcDx4foI= -----END CERTIFICATE-----Generated at Mon Aug 25 14:42:19 2025 by rpki-client