$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa File: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (raw, json) Hash identifier: 1sgmNfnbbiVLWVaplxkSWy5aNvY58bAHZPyyolsHRU4= Subject key identifier: 53:78:BD:D1:90:18:7B:09:1E:AF:AB:2D:42:F8:B1:F1:05:91:12:B8 Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584AD5065DF0504CE3D6F0FD0B00 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 400790 IP address blocks: 207.228.217.0/24 maxlen: 24 2606:f6c0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:5d:f0:50:4c:e3:d6:f0:fd:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=ee56bda9-a954-4753-bbb4-9e0bb8911bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:fb:0c:c4:08:e3:19:8f:d3:c4:c9:eb:65: cc:a9:b2:41:df:05:54:e9:55:df:fe:3f:32:b0:52: f1:f3:13:01:54:6a:f1:a8:b3:c5:34:65:33:f9:b2: 10:d0:b1:8d:51:3c:67:c5:dc:c8:92:7b:97:c5:31: 13:1c:75:06:ea:76:23:9c:27:b4:e4:2e:f6:fd:45: 9a:4a:c2:c7:0d:93:84:d9:3c:f1:2f:bf:36:f1:77: 36:da:7a:8d:5e:11:ce:86:b2:06:2c:9e:cd:94:ca: 02:84:66:3d:7b:a0:c6:3c:96:c8:0a:39:9f:a4:68: 76:8b:18:e1:7a:a3:53:ee:c4:7d:0a:85:f7:c3:64: ed:2e:71:df:8d:bc:91:41:8e:83:00:c5:c8:0b:88: 5b:04:6e:e9:3a:4f:14:2e:cf:ba:3c:0c:d9:c3:07: 48:fa:d7:d0:e6:3d:3e:17:34:d0:ee:9f:c3:74:96: 00:aa:e1:5e:d3:0b:03:f4:7a:a3:98:9b:44:e2:21: 2a:11:fd:43:f2:51:d8:14:cc:36:8c:6e:72:b4:74: 14:30:6e:62:6d:33:53:9c:d7:fa:bb:0c:af:a1:53: 42:25:39:48:cb:91:91:de:c0:e4:9e:9c:4e:59:a8: 74:c7:b1:4d:0b:c0:72:14:d7:6e:da:3e:f7:20:1c: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:BD:D1:90:18:7B:09:1E:AF:AB:2D:42:F8:B1:F1:05:91:12:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.217.0/24 IPv6: 2606:f6c0:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:38:89:09:6b:92:9d:ad:02:e1:13:a0:24:9e:e0:e5:9d:24: df:8a:67:c9:f2:19:4d:48:a9:55:9d:83:45:4f:85:73:d6:26: a6:33:51:a0:59:70:75:0e:6f:64:cd:3f:84:cc:54:cb:80:5f: b6:f8:79:d7:5b:f0:64:5d:e7:38:52:8c:62:e9:9f:f5:cf:da: d8:fd:b0:ce:31:50:22:d7:c0:a5:d0:7c:f0:07:c4:46:0a:1a: 64:75:8a:9a:dd:1e:52:a6:56:c1:af:dd:8e:ba:85:a3:0a:5b: 36:05:5c:67:6f:85:a8:d3:03:61:57:bc:55:b7:e4:02:f9:b0: a7:93:4c:24:16:39:87:97:26:b2:b8:60:9d:d5:01:67:4f:00: 7b:03:dd:0f:d9:5c:f8:22:d1:4a:5d:01:cb:2a:ca:af:73:6b: a7:98:23:b1:70:e4:12:ce:5c:59:8f:e1:80:2a:3d:8b:3d:bc: 3c:41:83:63:93:1f:99:81:d2:15:de:83:37:f7:36:59:70:98: 50:8f:4c:cb:24:2b:d7:b4:c0:9c:61:55:9e:f3:60:41:58:41: 25:40:f3:b5:ce:9c:e7:d4:25:9a:07:06:d3:4d:37:96:98:2c: 22:2a:15:3b:4b:8f:5f:e0:ef:4a:a8:f0:61:1d:a7:3c:0f:ef: 1c:84:34:13 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErVBl3wUEzj1vD9CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk ZWU1NmJkYTktYTk1NC00NzUzLWJiYjQtOWUwYmI4OTExYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs77DMQI4xmP08TJ62XMqbJB3wVU6VXf/j8y sFLx8xMBVGrxqLPFNGUz+bIQ0LGNUTxnxdzIknuXxTETHHUG6nYjnCe05C72/UWa SsLHDZOE2TzxL7828Xc22nqNXhHOhrIGLJ7NlMoChGY9e6DGPJbICjmfpGh2ixjh eqNT7sR9CoX3w2TtLnHfjbyRQY6DAMXIC4hbBG7pOk8ULs+6PAzZwwdI+tfQ5j0+ FzTQ7p/DdJYAquFe0wsD9HqjmJtE4iEqEf1D8lHYFMw2jG5ytHQUMG5ibTNTnNf6 uwyvoVNCJTlIy5GR3sDknpxOWah0x7FNC8ByFNdu2j73IBzDMwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFN4vdGQGHsJHq+rLUL4sfEFkRK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvMmExNjU5ZGQtZDU5Yy0z OTkwLTljYTQtMjhmMWM5MGNjZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TZMA8E AgACMAkDBwAmBvbAAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgDiJCWuSna0C4ROgJJ7g5Z0k34pnyfIZ TUipVZ2DRU+Fc9YmpjNRoFlwdQ5vZM0/hMxUy4Bftvh511vwZF3nOFKMYumf9c/a 2P2wzjFQItfApdB88AfERgoaZHWKmt0eUqZWwa/djrqFowpbNgVcZ2+FqNMDYVe8 VbfkAvmwp5NMJBY5h5cmsrhgndUBZ08AewPdD9lc+CLRSl0ByyrKr3Nrp5gjsXDk Es5cWY/hgCo9iz28PEGDY5MfmYHSFd6DN/c2WXCYUI9MyyQr17TAnGFVnvNgQVhB JUDztc6c59QlmgcG0003lpgsIioVO0uPX+DvSqjwYR2nPA/vHIQ0Ew== -----END CERTIFICATE-----Generated at Sat Aug 23 21:52:00 2025 by rpki-client