$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08698217-e5d0-3e11-9d8f-6c3912865cf9.roa File: 08698217-e5d0-3e11-9d8f-6c3912865cf9.roa (raw, json) Hash identifier: DJTb1uLrpdP/NXWCrm5Fdl0rGoGxCR/qw2FbDU5MWuQ= Subject key identifier: FD:C5:D9:8B:67:54:BC:96:37:B4:87:F1:69:0A:E3:65:C9:1D:9B:86 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584AE90919F0ACD3DDF69C170FC0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08698217-e5d0-3e11-9d8f-6c3912865cf9.roa Signing time: Tue 19 Aug 2025 17:02:27 +0000 ROA not before: Tue 19 Aug 2025 17:02:27 +0000 ROA not after: Mon 17 Nov 2025 18:02:27 +0000 asID: 3561 IP address blocks: 206.153.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:09:19:f0:ac:d3:dd:f6:9c:17:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Aug 19 17:02:27 2025 GMT Not After : Nov 17 18:02:27 2025 GMT Subject: CN=6210657f-9a3f-4317-8574-8041db9123e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e7:38:cc:19:db:47:83:1e:cd:f8:fe:9f:1a: 24:ef:25:ea:3c:0e:fe:84:2e:25:69:9a:4f:e4:54: 35:ad:0a:69:a8:d1:c4:97:b7:ca:d7:bc:93:ab:ab: 55:0b:ab:fc:36:37:29:d9:db:2b:ef:28:3d:40:48: b5:df:b6:d0:bc:c9:de:77:38:d1:d2:d3:cb:c2:d8: 6e:8e:0d:ed:fe:fe:b2:b6:9c:69:22:55:23:2b:44: 07:96:1e:f4:70:e4:15:6f:f1:79:fa:5f:b4:dc:27: 6c:50:15:4a:ad:e3:95:9b:b7:0f:30:7a:13:67:21: 67:96:aa:2f:93:96:e4:7b:b8:25:df:fb:16:8d:07: 16:96:aa:25:ec:ab:46:55:38:2a:42:ed:6d:1b:8a: be:ee:33:f8:54:7b:ab:02:e5:6e:38:24:a6:21:e9: bd:20:88:37:65:f0:7e:b3:84:e6:69:e6:e7:0a:97: a1:b9:9b:e6:af:d8:75:49:3e:31:4f:cc:db:3b:f6: 7d:14:4e:3a:f5:a5:3f:45:4d:14:fe:fc:9b:d5:1f: 0b:2a:ee:fc:c5:5e:4c:ed:ad:f3:62:52:e7:8d:b1: 9f:bc:13:67:e6:4d:13:32:2d:99:2b:51:c2:ce:68: df:6c:f8:7d:af:d3:19:fa:7e:e2:bf:ad:21:34:e8: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C5:D9:8B:67:54:BC:96:37:B4:87:F1:69:0A:E3:65:C9:1D:9B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/08698217-e5d0-3e11-9d8f-6c3912865cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 206.153.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:08:27:76:d8:89:87:a3:d0:57:7f:1b:d0:a1:03:19:a7:79: b2:27:b9:d2:64:87:0c:41:1a:d5:45:ab:14:d5:a7:47:71:d9: 48:ce:0e:fd:20:ef:78:e1:5e:d3:2b:62:0b:2e:b1:0e:67:a1: a8:ba:eb:82:b1:7b:e2:29:04:49:79:2e:69:8d:e9:3d:3d:f1: ad:a5:9d:6f:72:1e:65:aa:3c:31:0f:c3:bf:5e:63:a3:29:c4: 56:a0:cc:f9:65:44:3d:32:35:29:68:c1:94:56:2f:96:82:c3: 64:1a:c9:7b:02:43:09:71:23:e8:00:e7:f0:96:c8:81:56:9f: bd:b4:53:3d:2b:fb:62:cf:b1:06:26:09:1f:c6:a5:7c:ed:aa: 4d:92:c9:68:2d:07:bb:f2:ff:aa:e8:cd:6b:41:c5:4f:01:7a: 68:05:3c:fd:c2:43:54:90:08:ac:91:e3:56:13:53:54:97:ef: 81:cf:2c:cd:7e:fd:e8:88:34:3d:e8:18:1d:8b:a3:40:a7:d1: 89:bb:3f:4c:f3:70:f8:2f:39:d3:d7:82:11:cd:97:84:ce:d3: d1:24:82:fb:56:19:08:03:4c:4d:e0:2a:0e:ff:92:78:a5:57: 63:66:04:d4:cc:7a:47:8a:8e:af:81:81:9b:36:0b:0e:b5:e9: b3:2f:64:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpCRnwrNPd9pwXD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDgxOTE3MDIyN1oXDTI1MTExNzE4MDIyN1owLzEtMCsGA1UEAxMk NjIxMDY1N2YtOWEzZi00MzE3LTg1NzQtODA0MWRiOTEyM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uc4zBnbR4Mezfj+nxok7yXqPA7+hC4laZpP 5FQ1rQppqNHEl7fK17yTq6tVC6v8Njcp2dsr7yg9QEi137bQvMnedzjR0tPLwthu jg3t/v6ytpxpIlUjK0QHlh70cOQVb/F5+l+03CdsUBVKreOVm7cPMHoTZyFnlqov k5bke7gl3/sWjQcWlqol7KtGVTgqQu1tG4q+7jP4VHurAuVuOCSmIem9IIg3ZfB+ s4TmaebnCpehuZvmr9h1ST4xT8zbO/Z9FE469aU/RU0U/vyb1R8LKu78xV5M7a3z YlLnjbGfvBNn5k0TMi2ZK1HCzmjfbPh9r9MZ+n7iv60hNOhm8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3F2YtnVLyWN7SH8WkK42XJHZuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMDg2OTgyMTctZTVkMC0z ZTExLTlkOGYtNmMzOTEyODY1Y2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzpmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4IJ3bYiYej0Fd/G9ChAxmnebInudJkhwxBGtVFqxTVp0dx2UjODv0g 73jhXtMrYgsusQ5noai664Kxe+IpBEl5LmmN6T098a2lnW9yHmWqPDEPw79eY6Mp xFagzPllRD0yNSlowZRWL5aCw2QayXsCQwlxI+gA5/CWyIFWn720Uz0r+2LPsQYm CR/GpXztqk2SyWgtB7vy/6rozWtBxU8BemgFPP3CQ1SQCKyR41YTU1SX74HPLM1+ /eiIND3oGB2Lo0Cn0Ym7P0zzcPgvOdPXghHNl4TO09EkgvtWGQgDTE3gKg7/knil V2NmBNTMekeKjq+BgZs2Cw616bMvZIM= -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:58 2025 by rpki-client