$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa File: 40d3479d-bb5f-3869-8420-fee0194d4e25.roa (raw, json) Hash identifier: Rb9suSnknVQqGbSvfuThsJrupDIsCIYDeBsWCDNTwj4= Subject key identifier: A5:80:A4:9B:D5:DE:9A:7D:A0:D6:1F:11:8D:0C:1D:94:18:16:19:8F Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584A6C55CD9FDBF0507436817540 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 30610 IP address blocks: 209.166.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cd:9f:db:f0:50:74:36:81:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=8baab900-3967-4946-9ff8-60091d517bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:fb:a6:f7:eb:c1:65:74:27:f7:f4:64:b0: c8:1a:bf:a7:59:32:a2:2d:c5:cd:d7:81:0e:58:45: a5:5d:3a:4b:8b:8d:21:a4:e4:f7:66:c0:a7:cd:ff: 39:53:6c:42:b9:f5:39:3b:bf:ec:ad:19:5f:a2:36: a1:a8:4f:93:0b:8c:3c:e7:9a:5c:ac:08:89:35:8e: c6:2b:d7:c2:e7:06:7d:20:c5:71:81:ec:8e:2e:bb: 1b:af:34:51:a4:a2:c3:6e:c7:83:56:50:26:94:2e: 13:fe:b5:66:b0:ea:c5:26:fe:af:ec:4b:1d:51:0f: 66:30:d7:f1:2b:b4:3e:1d:43:16:ed:1d:6f:7b:08: 49:e3:6e:0c:d3:78:06:14:ba:38:6f:d4:84:fb:80: 8c:30:e5:2e:2c:81:63:96:be:50:f5:87:e6:31:4e: 8c:dc:24:5c:d2:f6:56:c4:7c:30:46:ee:ca:0e:34: df:20:79:89:f0:2f:d3:fa:5d:7c:93:92:1a:35:23: 2a:3c:19:39:5c:90:14:61:3e:df:63:43:bd:24:80: 31:08:fe:f4:73:ec:36:fd:2e:73:63:e7:10:3e:7d: 6b:8c:0e:06:94:aa:73:d7:8e:1b:30:2c:10:dc:5e: c0:7d:09:4c:f0:b0:78:a7:47:b9:23:db:f0:a3:e9: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:A4:9B:D5:DE:9A:7D:A0:D6:1F:11:8D:0C:1D:94:18:16:19:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b2:2f:fc:8f:74:f6:84:65:a3:c4:af:37:a5:71:3e:2f:35: 6e:3a:d2:60:ad:22:49:7c:ea:bf:a2:e2:7f:3f:9c:83:87:23: 9a:ed:45:91:b2:40:69:46:83:35:92:02:32:f2:9a:b4:8b:64: fb:48:14:d8:d2:2e:92:a1:03:e5:68:1d:20:70:d1:a7:0c:83: 64:e1:27:fa:76:95:43:5b:ee:b6:23:f1:e3:a0:63:16:47:da: 43:56:35:85:22:91:5d:7d:29:4a:74:77:68:5e:6a:7d:04:6e: 36:aa:ed:ba:1b:7e:ec:18:bd:57:10:eb:ab:bb:25:25:74:00: 6c:23:6a:21:5b:0b:33:f6:26:ba:b4:69:8e:df:4a:b6:fd:0a: b0:9a:a3:48:c4:df:d1:63:17:6c:6d:97:5b:09:30:6f:c8:81: 89:34:59:8d:20:80:02:81:ea:88:65:bc:a6:08:1a:ba:b6:40: de:f8:20:a4:fa:fa:a7:ee:50:c4:bc:cd:da:13:25:00:20:40: ac:33:89:b9:5c:3a:8a:cb:03:9b:29:7b:18:06:24:61:c6:22: 00:cd:cd:18:1d:05:59:82:e2:2d:d2:d5:cf:ad:3c:32:5f:8e: da:bd:a6:ac:d1:93:57:c9:46:1d:93:78:3d:1e:87:86:ba:f7: f8:ca:b3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVc2f2/BQdDaBdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OGJhYWI5MDAtMzk2Ny00OTQ2LTlmZjgtNjAwOTFkNTE3YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKD7pvfrwWV0J/f0ZLDIGr+nWTKiLcXN14EO WEWlXTpLi40hpOT3ZsCnzf85U2xCufU5O7/srRlfojahqE+TC4w855pcrAiJNY7G K9fC5wZ9IMVxgeyOLrsbrzRRpKLDbseDVlAmlC4T/rVmsOrFJv6v7EsdUQ9mMNfx K7Q+HUMW7R1vewhJ424M03gGFLo4b9SE+4CMMOUuLIFjlr5Q9YfmMU6M3CRc0vZW xHwwRu7KDjTfIHmJ8C/T+l18k5IaNSMqPBk5XJAUYT7fY0O9JIAxCP70c+w2/S5z Y+cQPn1rjA4GlKpz144bMCwQ3F7AfQlM8LB4p0e5I9vwo+nCawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWApJvV3pp9oNYfEY0MHZQYFhmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNDBkMzQ3OWQtYmI1Zi0z ODY5LTg0MjAtZmVlMDE5NGQ0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKyL/yPdPaEZaPErzelcT4vNW460mCtIkl86r+i4n8/nIOHI5rtRZGy QGlGgzWSAjLymrSLZPtIFNjSLpKhA+VoHSBw0acMg2ThJ/p2lUNb7rYj8eOgYxZH 2kNWNYUikV19KUp0d2hean0Ebjaq7bobfuwYvVcQ66u7JSV0AGwjaiFbCzP2Jrq0 aY7fSrb9CrCao0jE39FjF2xtl1sJMG/IgYk0WY0ggAKB6ohlvKYIGrq2QN74IKT6 +qfuUMS8zdoTJQAgQKwziblcOorLA5spexgGJGHGIgDNzRgdBVmC4i3S1c+tPDJf jtq9pqzRk1fJRh2TeD0eh4a69/jKs3A= -----END CERTIFICATE-----Generated at Sat Jul 12 05:47:59 2025 by rpki-client