$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa File: cf72ba59-053f-3de2-833b-4c405ca166b0.roa (raw, json) Hash identifier: Kk3pk9vm873W1rDehzMLqDcI/i1ReJFZ7NL3NQ4HNxE= Subject key identifier: 9D:B5:7C:75:4D:E0:F8:A4:D3:12:2F:8F:39:F7:14:D1:F4:AC:E4:74 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AEE26802B3C0A566E83D926A0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 14061 IP address blocks: 209.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:80:2b:3c:0a:56:6e:83:d9:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=b40d2568-ea13-41bc-9809-1c9ad7969b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:33:fc:d6:09:51:8c:e0:61:00:68:64:fa: cc:07:d0:a0:b4:6b:53:12:c1:4b:9d:62:1e:6d:3d: be:1e:83:d7:ab:9f:14:ed:9f:4e:2b:02:3c:7b:87: dc:76:e8:17:1b:64:ca:2c:ee:b8:25:6a:f8:a8:fd: 36:09:f6:e0:63:ae:9b:2a:ab:bb:ac:d5:1d:65:00: 73:94:50:e8:8a:30:3d:65:de:68:a9:1d:2b:05:77: 9c:76:3c:06:f8:ee:25:65:41:55:c9:40:28:0a:80: 3e:2e:b8:3f:d5:f2:9d:4e:6e:59:f0:d0:f0:d8:68: e3:c0:99:40:f1:c0:80:89:9f:8d:48:9c:3e:1a:b3: 0f:3b:b4:13:99:33:9c:00:7f:05:f8:47:00:52:e9: c5:d7:25:e5:3f:03:1b:1b:21:b5:33:19:72:07:ef: 2e:cd:ed:24:af:f9:dc:cc:66:dd:00:ce:5c:f3:95: 10:22:46:df:a4:33:06:1f:a4:79:7e:3f:ee:e0:70: 91:38:bd:37:48:39:e0:25:d3:e2:fb:ea:d0:30:90: 90:29:7a:ca:22:62:67:29:71:af:20:5d:88:dc:b3: f0:e1:67:62:ef:36:21:1f:fd:65:30:31:a6:39:74: 65:f1:aa:9a:87:ab:48:08:a6:37:5a:55:ef:af:e3: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:7C:75:4D:E0:F8:A4:D3:12:2F:8F:39:F7:14:D1:F4:AC:E4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1f:1e:68:00:a1:7a:be:58:9f:fe:ba:d6:2a:29:c1:0e:9b: 87:68:02:fc:e6:ba:f3:23:1b:4d:d9:13:91:9e:9a:46:be:9f: 6c:8b:58:eb:b1:da:b7:1d:5d:41:b7:c3:a0:85:73:df:f0:56: 2d:95:39:60:48:39:27:78:bf:73:6c:34:95:20:ca:54:fc:80: 41:cb:57:e8:c2:ee:f7:e8:82:df:b5:73:5d:83:80:a7:02:a7: 6b:f4:fb:78:62:5d:23:fa:0f:35:45:79:e4:5a:09:05:9f:8e: 26:25:58:3f:6b:31:62:73:2f:0e:f2:dd:a7:18:92:04:62:02: 43:19:be:b7:58:6c:55:6a:98:9a:96:2d:36:89:44:1e:e4:65: 45:98:6e:10:48:57:ff:fc:58:a8:a5:d7:21:cc:d9:f7:8c:22: c0:6b:3f:81:ba:8f:c9:99:48:64:2e:21:c7:5c:df:bd:5c:de: 46:62:a7:66:66:49:ef:a4:d9:8f:1f:70:87:e8:70:98:d4:52: 20:d8:b7:ec:f5:4d:a7:84:82:4a:a7:ff:8f:06:67:9e:83:8d: 74:b3:4a:03:9f:05:5d:57:0b:05:c8:e5:4b:0d:05:0e:cc:6c: 5e:3b:34:69:c9:38:c6:d1:d8:fa:a3:cc:6a:5a:4b:91:5c:d1: e8:67:40:cb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEruJoArPApWboPZJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk YjQwZDI1NjgtZWExMy00MWJjLTk4MDktMWM5YWQ3OTY5YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iEz/NYJUYzgYQBoZPrMB9CgtGtTEsFLnWIe bT2+HoPXq58U7Z9OKwI8e4fcdugXG2TKLO64JWr4qP02CfbgY66bKqu7rNUdZQBz lFDoijA9Zd5oqR0rBXecdjwG+O4lZUFVyUAoCoA+Lrg/1fKdTm5Z8NDw2GjjwJlA 8cCAiZ+NSJw+GrMPO7QTmTOcAH8F+EcAUunF1yXlPwMbGyG1MxlyB+8uze0kr/nc zGbdAM5c85UQIkbfpDMGH6R5fj/u4HCROL03SDngJdPi++rQMJCQKXrKImJnKXGv IF2I3LPw4Wdi7zYhH/1lMDGmOXRl8aqah6tICKY3WlXvr+N9/QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ21fHVN4Pik0xIvjzn3FNH0rOR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2Y3MmJhNTktMDUzZi0z ZGUyLTgzM2ItNGM0MDVjYTE2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0SYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMh8eaACher5Yn/661iopwQ6bh2gC/Oa68yMbTdkTkZ6aRr6fbItY67Ha tx1dQbfDoIVz3/BWLZU5YEg5J3i/c2w0lSDKVPyAQctX6MLu9+iC37VzXYOApwKn a/T7eGJdI/oPNUV55FoJBZ+OJiVYP2sxYnMvDvLdpxiSBGICQxm+t1hsVWqYmpYt NolEHuRlRZhuEEhX//xYqKXXIczZ94wiwGs/gbqPyZlIZC4hx1zfvVzeRmKnZmZJ 76TZjx9wh+hwmNRSINi37PVNp4SCSqf/jwZnnoONdLNKA58FXVcLBcjlSw0FDsxs Xjs0ack4xtHY+qPMalpLkVzR6GdAyw== -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:47 2025 by rpki-client