$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa File: f96003a4-5e6a-3408-ad84-035ada29fedc.roa (raw, json) Hash identifier: erjBYL5KAyNI372EfJYVjg4cthgD3LGX6fBRCzYfMwA= Subject key identifier: F4:C4:62:95:25:DE:AE:0F:2C:98:5F:AA:6D:9F:D5:C5:36:44:A2:F8 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584A6C55D3FAB868AB79DCB4E380 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 399635 IP address blocks: 209.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d3:fa:b8:68:ab:79:dc:b4:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=2b257f55-f770-49d6-9883-ab15ecbdae96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:ed:ee:de:9b:ca:bb:52:06:9c:c7:e7:37: 08:8c:b5:97:17:27:24:58:f1:08:12:b9:f4:a7:2b: df:2b:4b:18:20:d6:58:e3:1f:e1:a0:17:c0:b2:67: 3c:73:39:c9:f0:f7:3f:71:c6:bb:de:73:6e:63:92: 95:c5:21:ef:52:23:79:36:55:fd:c3:df:76:62:71: 25:33:40:a4:67:db:68:6b:46:08:12:88:9c:8e:10: c2:c0:8f:ee:b0:6a:2b:0c:8b:8b:54:61:8f:cc:77: 24:84:eb:c4:ba:a6:74:f0:c3:d5:95:36:da:d1:62: a3:0b:bf:8f:d3:78:13:6a:32:f3:30:dc:a7:c7:cf: 37:12:a5:8c:cd:34:9c:82:4a:4d:ad:73:6e:96:1a: 05:3d:4c:41:e4:ef:9b:55:16:97:9e:35:31:02:70: 08:e4:3f:b7:f5:53:72:96:e3:b3:b7:25:09:1a:99: b5:6e:c5:f6:84:55:97:20:db:c5:d1:0f:61:65:9a: 59:ed:54:98:72:f2:da:b0:7b:1d:eb:16:ab:74:66: 58:e5:c3:d9:dc:1b:dc:73:e3:ca:52:1d:cf:d9:7c: a9:57:89:a5:c2:bc:7d:3c:5c:01:c6:71:65:8f:ad: 73:f5:52:94:5c:46:0e:2b:0c:20:d9:a2:22:13:f1: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C4:62:95:25:DE:AE:0F:2C:98:5F:AA:6D:9F:D5:C5:36:44:A2:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:75:4e:f6:12:a6:36:00:a7:53:1b:36:98:26:9d:dd:e0:59: 39:57:48:00:e5:db:35:8e:00:c2:68:27:d1:d0:c0:50:fa:f9: d1:ec:9c:e5:c9:1a:57:d5:d6:a2:46:6e:ae:3c:4f:ba:4b:10: 02:a9:95:cf:7f:c5:1a:24:94:e4:a5:ea:08:f4:5f:77:6d:94: 4e:b0:7e:1b:ae:6e:ff:26:9c:ba:41:f4:50:2b:b4:a5:55:b0: ff:aa:d9:4e:41:f6:f5:6d:9c:29:35:95:c1:81:0a:af:c8:ca: 9a:42:f7:c1:01:2b:62:2b:54:07:9d:84:c5:b4:c1:3b:5f:7a: 88:38:e1:3c:8c:ef:41:b4:69:0c:48:95:66:cc:2c:55:6a:90: 88:f6:8a:d3:19:fe:fe:a0:75:4d:72:1d:d5:e3:67:37:db:16: f3:1a:83:34:df:07:76:55:3d:3d:6b:68:3a:01:c0:4e:ba:5c: c9:7b:87:3a:8b:e0:b4:70:2c:da:52:25:28:fe:c0:c0:6c:f5: c6:5f:7d:01:a4:cb:eb:ad:5c:7f:37:d9:e2:42:78:b3:86:c7: 76:f8:47:21:6d:e7:36:b2:eb:54:f6:a3:8c:fb:92:ff:be:4f: 9d:f4:c1:48:da:ae:6c:08:ea:5e:15:81:72:bf:b0:64:fb:7f: ad:4f:88:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdP6uGiredy044AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk MmIyNTdmNTUtZjc3MC00OWQ2LTk4ODMtYWIxNWVjYmRhZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYjt7t6byrtSBpzH5zcIjLWXFyckWPEIErn0 pyvfK0sYINZY4x/hoBfAsmc8cznJ8Pc/cca73nNuY5KVxSHvUiN5NlX9w992YnEl M0CkZ9toa0YIEoicjhDCwI/usGorDIuLVGGPzHckhOvEuqZ08MPVlTba0WKjC7+P 03gTajLzMNynx883EqWMzTScgkpNrXNulhoFPUxB5O+bVRaXnjUxAnAI5D+39VNy luOztyUJGpm1bsX2hFWXINvF0Q9hZZpZ7VSYcvLasHsd6xardGZY5cPZ3Bvcc+PK Uh3P2XypV4mlwrx9PFwBxnFlj61z9VKUXEYOKwwg2aIiE/HkawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTEYpUl3q4PLJhfqm2f1cU2RKL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZjk2MDAzYTQtNWU2YS0z NDA4LWFkODQtMDM1YWRhMjlmZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp1TvYSpjYAp1MbNpgmnd3gWTlXSADl2zWOAMJoJ9HQwFD6+dHsnOXJ GlfV1qJGbq48T7pLEAKplc9/xRoklOSl6gj0X3dtlE6wfhuubv8mnLpB9FArtKVV sP+q2U5B9vVtnCk1lcGBCq/IyppC98EBK2IrVAedhMW0wTtfeog44TyM70G0aQxI lWbMLFVqkIj2itMZ/v6gdU1yHdXjZzfbFvMagzTfB3ZVPT1raDoBwE66XMl7hzqL 4LRwLNpSJSj+wMBs9cZffQGky+utXH832eJCeLOGx3b4RyFt5zay61T2o4z7kv++ T530wUjarmwI6l4VgXK/sGT7f61PiG0= -----END CERTIFICATE-----Generated at Sat Jul 12 05:10:58 2025 by rpki-client