$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa File: 3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa (raw, json) Hash identifier: fRYKCp/EeLNgkhmDPR1KOPbb0S5sxetNBCoHCRM+F50= Subject key identifier: CE:BF:7E:AF:75:08:12:CE:61:C4:1B:C4:F0:86:EF:18:F0:68:5B:FF Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AE46109FD6DD7745B91DD3D80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14061 IP address blocks: 192.81.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:09:fd:6d:d7:74:5b:91:dd:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=0d57c295-b4a5-4ae5-b948-e1798c6e98c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:b3:5f:0e:83:f7:ef:e9:08:85:ac:36:de: 95:15:4e:d8:d0:ef:f0:38:60:b6:6b:b2:12:6b:d4: 93:0d:c6:e8:c3:38:18:3d:ce:6c:8f:24:a4:38:4d: b4:5c:75:bf:3a:7d:39:d7:c4:89:8c:78:46:6c:e2: e0:a0:30:5a:4d:c8:93:9d:49:e8:2c:08:2f:61:d9: 45:9c:f5:b2:a1:6e:6c:d6:29:de:19:66:41:79:ac: 24:15:38:28:b0:f0:3d:6e:a2:36:3d:d4:11:fb:56: 2b:78:ef:4b:35:c0:ee:54:10:74:e2:79:26:35:57: 72:0d:0e:91:56:9a:bf:8f:55:bd:6f:ad:0c:47:51: e9:a9:41:7a:81:71:c4:29:6a:cc:22:92:3e:4f:29: ba:73:4c:3f:ee:b0:5b:25:78:df:87:7c:34:df:7a: f9:58:d8:d1:bd:89:a8:63:43:0e:b6:78:af:69:ed: eb:4b:f9:12:a6:67:a6:42:4e:b8:af:94:8c:ab:de: 9b:75:54:0d:86:ca:47:dc:26:bf:9f:c7:c9:71:fb: 38:2e:16:b9:79:76:1a:3a:29:3b:4e:f6:89:41:06: 49:cd:b1:01:dc:c7:eb:5c:98:ef:55:d4:e6:47:0e: c6:f9:ae:87:c0:cd:91:ba:ba:5c:ed:b1:d5:9c:73: 1b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BF:7E:AF:75:08:12:CE:61:C4:1B:C4:F0:86:EF:18:F0:68:5B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 192.81.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:28:95:11:20:1e:64:25:ba:9c:d3:56:88:a1:d2:38:f0:62: c1:bc:ee:d3:0d:e3:ed:35:11:6f:db:26:8e:77:46:d5:26:5e: bd:73:e1:75:6a:1b:43:fe:d5:48:c6:cc:0e:d3:70:e2:7b:22: e8:f5:af:8b:aa:e4:31:87:13:47:9a:47:4a:fb:55:16:85:39: 59:ea:e3:08:c4:1d:9d:58:06:b8:23:0d:63:7c:a4:68:b2:66: 8f:b6:f0:f7:c1:6e:15:47:79:0a:64:a8:22:40:2e:24:b1:34: 5e:12:32:35:83:5c:f9:03:1c:3b:e5:60:4b:b6:f1:0e:4b:27: 50:f8:78:fc:2b:21:46:8a:ce:ca:11:05:63:c4:54:9d:ad:80: c1:03:42:e2:9c:f3:78:de:f1:9b:05:78:45:02:6b:7b:cc:9e: f5:56:ba:4b:33:85:cc:55:7b:18:84:2d:ac:9d:e4:69:ce:9e: 53:39:05:e8:05:8a:7f:8e:08:e1:13:b1:31:db:e8:2c:f4:f7: 1c:ea:72:bc:0b:e0:83:19:08:56:7e:c7:44:09:06:4e:c3:8d: b5:fa:e0:a0:31:c4:1d:c6:e6:ea:3b:22:9d:46:bb:1c:a4:66: df:d0:67:40:75:b0:43:07:17:5b:eb:e9:db:ad:43:c4:74:da: 1d:56:c4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQn9bdd0W5HdPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MGQ1N2MyOTUtYjRhNS00YWU1LWI5NDgtZTE3OThjNmU5OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3uzXw6D9+/pCIWsNt6VFU7Y0O/wOGC2a7IS a9STDcbowzgYPc5sjySkOE20XHW/On0518SJjHhGbOLgoDBaTciTnUnoLAgvYdlF nPWyoW5s1ineGWZBeawkFTgosPA9bqI2PdQR+1YreO9LNcDuVBB04nkmNVdyDQ6R Vpq/j1W9b60MR1HpqUF6gXHEKWrMIpI+Tym6c0w/7rBbJXjfh3w033r5WNjRvYmo Y0MOtnivae3rS/kSpmemQk64r5SMq96bdVQNhspH3Ca/n8fJcfs4Lha5eXYaOik7 TvaJQQZJzbEB3MfrXJjvVdTmRw7G+a6HwM2Rurpc7bHVnHMbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6/fq91CBLOYcQbxPCG7xjwaFv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2QwYzk2NGUtYTg4Ny0z ZmRjLWFlYzAtMGI3ZWMyNDk4MDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwFHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwolREgHmQlupzTVoih0jjwYsG87tMN4+01EW/bJo53RtUmXr1z4XVq G0P+1UjGzA7TcOJ7Iuj1r4uq5DGHE0eaR0r7VRaFOVnq4wjEHZ1YBrgjDWN8pGiy Zo+28PfBbhVHeQpkqCJALiSxNF4SMjWDXPkDHDvlYEu28Q5LJ1D4ePwrIUaKzsoR BWPEVJ2tgMEDQuKc83je8ZsFeEUCa3vMnvVWukszhcxVexiELayd5GnOnlM5BegF in+OCOETsTHb6Cz09xzqcrwL4IMZCFZ+x0QJBk7DjbX64KAxxB3G5uo7Ip1Guxyk Zt/QZ0B1sEMHF1vr6dutQ8R02h1WxGQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:34 2025 by rpki-client