$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa File: ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa (raw, json) Hash identifier: Oky1PVHvv92UTyupBTB/mH6a+afY2DvcnYqPnxrNUsA= Subject key identifier: B9:EA:D0:7F:BE:4F:D7:35:87:CE:17:0E:59:12:5F:9F:9F:F6:CA:19 Certificate issuer: /CN=e2135eb7-dbed-4351-942d-90483acb1b22 Certificate serial: 010D0C9F4328584AD0D6456F92245FD76C5ED100 Authority key identifier: 2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 174 IP address blocks: 208.64.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:45:6f:92:24:5f:d7:6c:5e:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2135eb7-dbed-4351-942d-90483acb1b22 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=3df7db50-55ca-4594-b905-ffc7cb1b003a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:86:3c:36:88:fe:26:f5:1c:93:56:cd:6d: fc:16:ca:42:33:98:01:c9:84:9a:c1:eb:9d:2c:2a: 1f:bf:71:96:d6:1e:31:68:8c:d7:1f:14:e9:28:f4: 1c:33:69:f1:40:2f:4f:3a:8c:26:21:87:18:dd:96: 35:48:5c:31:c5:0a:62:54:1a:82:0a:38:53:1b:17: ec:34:7b:e6:09:6e:46:82:fa:3f:15:9f:cb:43:25: d6:a7:08:9d:1d:f8:21:c4:c3:e3:28:fd:d9:cc:bd: 08:f4:81:64:32:01:2a:65:b3:01:4e:a3:19:2b:ed: 41:46:29:a2:16:d1:5e:f8:6c:04:e0:9d:00:1e:1c: 70:a9:a5:94:ed:6e:6d:32:ac:e4:2b:82:fb:66:76: be:54:d8:fb:55:12:cc:38:04:59:fb:44:69:e7:9a: 82:ec:9b:a9:9e:c2:28:f5:dd:46:09:be:07:7c:b6: 33:f0:7d:24:8a:b8:a4:25:6c:a6:cc:b0:06:27:7d: be:12:75:0c:21:41:60:d7:3e:6a:91:47:8b:a4:b9: bd:7b:25:e6:7b:a9:02:12:98:70:32:82:ed:50:bb: b0:00:0b:ca:d3:e5:c8:23:ea:ea:6b:40:ee:27:6a: 03:49:ea:38:ac:aa:c7:d7:74:64:d8:a5:9f:8e:12: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EA:D0:7F:BE:4F:D7:35:87:CE:17:0E:59:12:5F:9F:9F:F6:CA:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl X509v3 Authority Key Identifier: keyid:2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer sbgp-ipAddrBlock: critical IPv4: 208.64.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:07:c0:aa:e0:84:62:1d:4a:5f:4b:e7:52:b0:68:db:51:1d: 12:a8:27:2d:d3:de:a5:3a:cd:28:29:5a:5e:52:c8:c6:8a:ba: 09:16:91:40:03:f7:c2:f2:9c:63:c2:99:fe:12:24:eb:a4:9a: cd:77:bd:49:01:51:e2:09:b3:ac:2f:fa:5e:87:43:a1:bb:13: 45:7a:07:c9:ad:f6:3c:97:7d:02:ac:8b:4a:69:30:a3:e7:bf: f6:94:38:d7:67:00:4a:58:9a:02:66:8c:72:d7:2a:1c:1d:33: c9:1b:83:70:04:58:8b:20:e6:39:0d:d5:dc:ca:bd:3f:56:b8: f5:7d:8c:c2:5f:ee:b2:1c:95:e7:60:52:92:7b:67:9e:5d:3b: 2b:1f:88:35:20:ee:76:79:b6:3f:5b:25:65:f0:cf:8c:85:da: 25:84:21:81:f1:c9:a6:e6:35:91:03:6f:6d:82:eb:a4:7a:3c: f4:a0:72:1c:35:74:0a:24:ba:42:17:13:54:61:e7:5f:2e:e2: 3d:f1:e2:1b:e3:62:07:28:f8:3b:28:0d:cd:94:4b:da:61:bd: 0f:bd:70:ed:f0:1e:d7:74:47:cc:15:bc:f9:6d:a3:d1:de:5e: 76:95:25:6f:f2:54:49:40:b0:f0:30:4e:3c:a5:fe:d4:79:31: 1c:a5:fb:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kVvkiRf12xe0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIxMzVlYjctZGJlZC00MzUxLTk0MmQtOTA0ODNhY2Ix YjIyMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk M2RmN2RiNTAtNTVjYS00NTk0LWI5MDUtZmZjN2NiMWIwMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5qGPDaI/ib1HJNWzW38FspCM5gByYSaweud LCofv3GW1h4xaIzXHxTpKPQcM2nxQC9POowmIYcY3ZY1SFwxxQpiVBqCCjhTGxfs NHvmCW5Ggvo/FZ/LQyXWpwidHfghxMPjKP3ZzL0I9IFkMgEqZbMBTqMZK+1BRimi FtFe+GwE4J0AHhxwqaWU7W5tMqzkK4L7Zna+VNj7VRLMOARZ+0Rp55qC7JupnsIo 9d1GCb4HfLYz8H0kirikJWymzLAGJ32+EnUMIUFg1z5qkUeLpLm9eyXme6kCEphw MoLtULuwAAvK0+XII+rqa0DuJ2oDSeo4rKrH13Rk2KWfjhJfPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnq0H++T9c1h84XDlkSX5+f9soZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjEz NWViNy1kYmVkLTQzNTEtOTQyZC05MDQ4M2FjYjFiMjIvY2ExMDQ2YjEtM2M1My0z YTJlLThkNjYtNzIxYjA2Y2Y5YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxMzVlYjctZGJlZC00MzUxLTk0 MmQtOTA0ODNhY2IxYjIyL2UyMTM1ZWI3LWRiZWQtNDM1MS05NDJkLTkwNDgzYWNi MWIyMi5jcmwwHwYDVR0jBBgwFoAUL07xoaEizNT2aC+I5Hjjrs8dq4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjEzNWViNy1kYmVkLTQzNTEtOTQyZC05MDQ4 M2FjYjFiMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQHwKrghGIdSl9L51KwaNtRHRKoJy3T3qU6zSgpWl5SyMaKugkWkUAD 98LynGPCmf4SJOukms13vUkBUeIJs6wv+l6HQ6G7E0V6B8mt9jyXfQKsi0ppMKPn v/aUONdnAEpYmgJmjHLXKhwdM8kbg3AEWIsg5jkN1dzKvT9WuPV9jMJf7rIcledg UpJ7Z55dOysfiDUg7nZ5tj9bJWXwz4yF2iWEIYHxyabmNZEDb22C66R6PPSgchw1 dAokukIXE1Rh518u4j3x4hvjYgco+DsoDc2US9phvQ+9cO3wHtd0R8wVvPlto9He XnaVJW/yVElAsPAwTjyl/tR5MRyl+9o= -----END CERTIFICATE-----Generated at Wed Aug 20 08:38:53 2025 by rpki-client