$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa File: 73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa (raw, json) Hash identifier: +Y4Fbh5swO355Ji2qxJZpKpkqbt8M69KSA5hKz3j64k= Subject key identifier: AE:66:4E:1E:E4:44:01:B2:E9:53:DF:70:4B:DA:01:6D:C1:32:C4:A7 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584AFAB67FA9E92FA3FC52DCFAC0 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 998 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:7f:a9:e9:2f:a3:fc:52:dc:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=a0cf300b-ff77-4d7d-af92-ba074f761f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:aa:a6:4b:16:9b:da:2c:5c:62:c0:51:dd: 77:ca:ec:88:77:08:90:ee:6e:27:08:f1:b7:41:64: 04:68:e7:05:1c:b5:c7:16:f9:27:f0:63:a4:d6:06: a1:73:25:5e:e8:db:cf:5a:e1:34:0b:6e:66:24:d2: 85:be:5c:21:2a:2b:cc:17:84:ac:f8:3c:0c:ec:52: e1:ac:aa:66:ec:bb:a1:25:bc:89:cd:88:7b:c5:e5: 46:90:86:22:eb:14:67:fd:71:c8:83:6d:77:43:aa: 8b:5e:ef:62:1b:25:cf:d7:59:ba:ed:9e:3b:1c:52: c0:e6:eb:e5:7f:e4:73:dc:fe:61:ac:65:b1:37:0a: ee:bc:27:0a:5f:39:01:b4:b5:87:a0:b2:26:af:db: 76:9c:e4:3b:1c:3d:42:be:cd:e1:47:11:3a:44:c9: 17:47:d3:7a:a3:98:50:ea:1d:bf:80:2c:d4:36:f8: 01:17:6f:26:72:90:8c:bb:55:59:22:59:42:58:e5: 71:9e:4f:38:87:d6:c2:57:d9:e8:eb:70:18:b5:5f: 08:4f:81:cc:5b:d7:d9:c7:77:c0:da:39:75:7e:39: af:ad:3d:e3:bf:de:f4:58:d1:26:bf:20:d4:81:d9: cd:3e:2d:45:7e:ad:35:04:30:7c:4a:e7:e9:67:53: c4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:66:4E:1E:E4:44:01:B2:E9:53:DF:70:4B:DA:01:6D:C1:32:C4:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1c:41:d1:61:ff:cd:29:18:f7:6b:6b:e5:b1:ec:e2:35:ca: b6:64:41:1a:39:59:a2:51:1f:a8:86:62:8c:01:ec:d8:5d:e8: c8:ca:a7:ce:b8:6d:c8:f0:65:66:8c:7e:e4:af:50:f2:9c:c9: 84:93:23:bd:79:ea:5a:5a:f1:e4:a0:a1:bb:5c:2d:0d:62:01: 03:c2:e0:52:09:30:ef:ec:41:70:ba:c5:31:57:2b:b4:6e:da: 79:a9:0c:1f:64:90:44:c2:f9:cb:d4:41:b2:9a:77:3e:1c:7f: c1:e1:6c:44:28:57:ec:c2:d0:98:ea:9b:bc:52:e7:1d:da:3b: 3d:0e:43:06:85:92:d1:c4:97:c5:c9:73:8e:4b:3a:ec:5b:92: 99:b0:51:7d:4a:90:63:1c:fd:fd:99:a5:bc:d4:36:9c:32:66: f3:62:33:8c:75:f1:4e:c3:4e:6a:7f:c3:3c:cf:d0:b7:52:b2: 8d:87:05:c9:a3:c3:dd:49:a9:ab:d9:99:47:51:2b:02:cf:d6: af:45:d7:e7:0c:b3:b6:0a:a0:b0:22:61:1f:32:72:f0:97:74: e3:2f:cb:f1:47:45:f0:b6:4f:60:f0:0e:00:06:38:1e:eb:d3: 39:ee:09:84:c1:7d:ec:88:c3:bf:f5:1a:5a:ad:71:a8:00:68: 82:05:95:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6tn+p6S+j/FLc+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk YTBjZjMwMGItZmY3Ny00ZDdkLWFmOTItYmEwNzRmNzYxZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySuqpksWm9osXGLAUd13yuyIdwiQ7m4nCPG3 QWQEaOcFHLXHFvkn8GOk1gahcyVe6NvPWuE0C25mJNKFvlwhKivMF4Ss+DwM7FLh rKpm7LuhJbyJzYh7xeVGkIYi6xRn/XHIg213Q6qLXu9iGyXP11m67Z47HFLA5uvl f+Rz3P5hrGWxNwruvCcKXzkBtLWHoLImr9t2nOQ7HD1Cvs3hRxE6RMkXR9N6o5hQ 6h2/gCzUNvgBF28mcpCMu1VZIllCWOVxnk84h9bCV9no63AYtV8IT4HMW9fZx3fA 2jl1fjmvrT3jv970WNEmvyDUgdnNPi1Ffq01BDB8SufpZ1PEKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5mTh7kRAGy6VPfcEvaAW3BMsSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvNzNhYzI3MDQtYjIxMy0z OGJjLWE4ZTAtZmYxMDJiNWJhNWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0cQdFh/80pGPdra+Wx7OI1yrZkQRo5WaJRH6iGYowB7Nhd6MjKp864 bcjwZWaMfuSvUPKcyYSTI7156lpa8eSgobtcLQ1iAQPC4FIJMO/sQXC6xTFXK7Ru 2nmpDB9kkETC+cvUQbKadz4cf8HhbEQoV+zC0Jjqm7xS5x3aOz0OQwaFktHEl8XJ c45LOuxbkpmwUX1KkGMc/f2ZpbzUNpwyZvNiM4x18U7DTmp/wzzP0LdSso2HBcmj w91JqavZmUdRKwLP1q9F1+cMs7YKoLAiYR8ycvCXdOMvy/FHRfC2T2DwDgAGOB7r 0znuCYTBfeyIw7/1GlqtcagAaIIFld8= -----END CERTIFICATE-----Generated at Tue Sep 9 14:53:25 2025 by rpki-client