$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa File: d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa (raw, json) Hash identifier: eQITkdsgdIjFoFj1YWbCsmgZnRypKV56LfSi5mQO9cE= Subject key identifier: F8:9D:89:8C:AD:7C:F4:96:15:FF:C7:B2:5C:A8:9A:08:8C:0E:30:49 Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584A71EB20CA010F44EFF064BB80 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 14618 IP address blocks: 192.28.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:20:ca:01:0f:44:ef:f0:64:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=f0ff8998-df50-45e7-8b07-435850113be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d2:4c:79:fb:26:d2:b9:17:20:a7:d3:dc:5b: 61:20:c6:2c:16:66:c9:8d:5a:48:76:3a:a7:e1:6a: 16:f3:79:60:d9:8e:db:26:70:9a:12:5f:33:31:7a: fb:68:ce:11:71:fc:e6:e9:97:0d:5f:b7:63:f8:ae: 3d:25:59:f0:85:76:d8:1c:90:9d:f1:6b:ba:a5:95: 6a:2e:72:aa:45:e2:9c:a3:20:bb:88:76:d5:bd:49: 35:59:f5:6e:f4:19:5a:2e:c7:40:f8:4a:3f:84:dd: 37:8d:c5:e6:7e:c4:90:a3:48:6d:6c:dc:0b:f3:4c: 61:da:73:d6:a8:ac:6f:8d:ae:8c:58:78:8d:c3:7b: 33:13:23:95:7e:85:8d:b7:c8:9d:d0:1b:87:06:8c: 4f:7f:7a:4c:09:75:51:56:af:bb:bb:e8:0c:d4:62: 67:7e:fb:c0:ef:66:51:0f:28:ef:56:a3:fd:da:52: 72:cb:51:53:a3:15:a6:0a:7d:78:5c:0d:8c:2a:79: 78:3d:12:cf:b8:07:b4:88:df:f6:01:73:4c:02:30: 21:60:e8:19:f8:7f:31:4e:bc:f7:0d:ed:38:cf:c9: d5:96:7b:96:4d:91:87:04:1f:00:fe:dc:07:f6:d1: f9:0c:4f:62:cb:84:f3:10:58:c6:99:8a:2b:73:c5: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:89:8C:AD:7C:F4:96:15:FF:C7:B2:5C:A8:9A:08:8C:0E:30:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: 192.28.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:68:f0:90:ac:03:1f:96:b8:c4:17:e5:94:27:d8:e2:ae:19: 0e:6b:f4:cf:f0:ec:86:4a:c2:d8:26:93:3b:13:6c:02:10:ff: 15:6f:f1:ea:d5:71:5e:60:63:b4:3a:98:81:fd:f9:7b:c7:a4: 22:43:41:9f:b0:15:e5:01:3b:0e:33:e2:ee:3d:a4:2c:41:ac: b7:c3:81:51:71:5f:67:da:89:ec:f9:d5:fe:b1:87:e5:9c:09: 0f:d1:85:a4:51:25:57:6d:4c:9a:f0:2a:db:4d:dc:ba:df:be: 3d:d5:df:0a:d2:d2:fb:7f:55:93:73:c5:28:e5:87:7f:1a:e3: 64:3f:53:05:0c:46:af:66:5e:16:bc:7e:47:30:0f:74:ef:75: 26:a0:d8:5c:e8:f6:42:df:cf:91:12:a3:be:b7:b9:3b:18:88: fe:12:23:c7:24:9f:9d:05:ed:98:d8:73:4a:29:f5:78:ba:c1: b7:ab:16:9e:b3:a6:eb:2b:d0:20:22:e7:88:67:43:28:ff:71: c0:0f:20:cf:5c:81:76:cf:fa:5d:14:de:ea:03:4f:b5:3c:e5: b9:55:50:49:50:c3:75:74:6a:41:bb:73:e2:91:33:3a:fa:85: 36:1b:93:c0:fa:e9:f6:d3:cb:e4:b0:84:a1:43:85:62:f9:1e: 25:25:d8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6yDKAQ9E7/Bku4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZjBmZjg5OTgtZGY1MC00NWU3LThiMDctNDM1ODUwMTEzYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tJMefsm0rkXIKfT3FthIMYsFmbJjVpIdjqn 4WoW83lg2Y7bJnCaEl8zMXr7aM4Rcfzm6ZcNX7dj+K49JVnwhXbYHJCd8Wu6pZVq LnKqReKcoyC7iHbVvUk1WfVu9BlaLsdA+Eo/hN03jcXmfsSQo0htbNwL80xh2nPW qKxvja6MWHiNw3szEyOVfoWNt8id0BuHBoxPf3pMCXVRVq+7u+gM1GJnfvvA72ZR DyjvVqP92lJyy1FToxWmCn14XA2MKnl4PRLPuAe0iN/2AXNMAjAhYOgZ+H8xTrz3 De04z8nVlnuWTZGHBB8A/twH9tH5DE9iy4TzEFjGmYorc8WfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPidiYytfPSWFf/HslyomgiMDjBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZDk0YzY2NmMtYWI1Ni0z Yjk0LThkM2EtMWM0MWVmYTM0OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1o8JCsAx+WuMQX5ZQn2OKuGQ5r9M/w7IZKwtgmkzsTbAIQ/xVv8erV cV5gY7Q6mIH9+XvHpCJDQZ+wFeUBOw4z4u49pCxBrLfDgVFxX2faiez51f6xh+Wc CQ/RhaRRJVdtTJrwKttN3Lrfvj3V3wrS0vt/VZNzxSjlh38a42Q/UwUMRq9mXha8 fkcwD3TvdSag2Fzo9kLfz5ESo763uTsYiP4SI8ckn50F7ZjYc0op9Xi6wberFp6z pusr0CAi54hnQyj/ccAPIM9cgXbP+l0U3uoDT7U85blVUElQw3V0akG7c+KRMzr6 hTYbk8D66fbTy+SwhKFDhWL5HiUl2NY= -----END CERTIFICATE-----Generated at Wed Jul 9 22:44:22 2025 by rpki-client