$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa File: fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa (raw, json) Hash identifier: n2lS1SmOaOgTR2D80FKjndSj1aTLXex/+kxXXlZfPlc= Subject key identifier: 3B:AC:08:3F:D1:62:49:CF:80:AE:38:93:46:C2:E5:41:4E:17:E4:DF Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F4328584A53359F1A02130DAD7DA91C80 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 209 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:9f:1a:02:13:0d:ad:7d:a9:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=a16e26e9-92e5-4af8-a754-65b750b9232d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:dc:41:be:a5:a4:62:99:7b:48:f1:a1:da: 80:03:35:ee:0f:5a:1c:d3:23:12:61:64:1b:9d:13: 98:12:6f:74:d1:d1:bc:9a:e3:d3:eb:ad:dd:de:3a: 26:7f:d9:d3:de:39:08:5f:af:30:69:f7:b9:1a:c3: d4:31:00:dc:54:b4:69:f3:2b:88:59:2c:e0:10:2b: a6:36:55:83:36:3e:5b:0e:57:f9:8b:95:9f:07:43: db:ea:3e:81:44:bc:8f:84:c5:1d:5d:95:0a:5d:8d: 46:3e:ef:ad:c6:60:75:33:ce:39:4c:50:dc:b0:d2: cb:61:0a:2f:b3:38:68:1b:01:89:da:1e:b8:ae:7f: e8:88:05:ab:5b:b9:7a:8a:12:80:39:a9:c5:a0:0b: 53:17:84:77:0d:20:49:d2:4d:49:b3:58:84:29:a8: e7:cc:c7:d8:dd:34:2a:11:30:66:79:92:53:92:73: a3:59:75:97:09:f9:b1:d7:97:94:de:2c:e9:d0:0b: f9:7c:52:bb:a5:fa:42:a0:a9:ce:a1:86:b3:93:30: 0f:4d:cc:3e:cb:ca:ce:78:c5:24:b3:b0:0b:f6:7b: f5:20:c3:6a:fe:fa:10:00:cb:20:07:50:ad:95:67: 17:6e:2e:38:c4:6b:87:d6:ca:83:ea:85:f4:7e:d4: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AC:08:3F:D1:62:49:CF:80:AE:38:93:46:C2:E5:41:4E:17:E4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:38:6f:cb:d8:44:ac:b5:e9:d8:16:38:8b:55:ed:e5:68:fe: 52:00:28:c7:70:7c:bd:c3:20:95:a0:e7:fc:da:21:67:8b:bf: 33:fb:64:81:9f:51:cc:d9:bf:b6:e8:09:3f:ec:1a:18:bd:01: 34:7f:70:61:aa:97:b6:95:4f:ef:6f:25:9f:56:cd:04:5d:dc: 47:0d:91:9b:73:64:53:7d:bf:80:d2:29:da:d9:75:ae:86:ca: 61:58:52:fa:a0:8d:2b:8d:db:1d:8b:1a:f4:0e:2f:c3:f4:46: 33:1a:13:c5:e9:77:ea:2c:91:37:e4:ad:34:18:bc:1d:63:0e: 4e:13:ee:0e:55:ed:61:15:fc:b1:bf:65:3c:8c:67:28:d5:8b: 9e:81:ec:70:d4:ad:20:bc:b6:a2:89:1d:96:7d:f8:e4:c4:69: c5:cf:37:66:7d:7b:5a:d2:64:58:73:ca:72:52:90:45:5a:67: df:ea:b6:97:0d:0a:65:5a:33:2b:a2:e9:55:74:f8:cd:90:80: 36:ef:d0:ee:45:9f:dc:b8:ff:5c:1d:a0:94:bb:7f:80:b8:1f: 45:71:93:30:39:ca:bb:3c:75:d8:b1:8d:81:6c:e0:58:0d:80: 8d:92:7a:eb:a9:d7:ff:70:ef:63:d9:73:68:e3:7c:bd:00:cd: 36:68:78:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNZ8aAhMNrX2pHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk YTE2ZTI2ZTktOTJlNS00YWY4LWE3NTQtNjViNzUwYjkyMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuorcQb6lpGKZe0jxodqAAzXuD1oc0yMSYWQb nROYEm900dG8muPT663d3jomf9nT3jkIX68wafe5GsPUMQDcVLRp8yuIWSzgECum NlWDNj5bDlf5i5WfB0Pb6j6BRLyPhMUdXZUKXY1GPu+txmB1M845TFDcsNLLYQov szhoGwGJ2h64rn/oiAWrW7l6ihKAOanFoAtTF4R3DSBJ0k1Js1iEKajnzMfY3TQq ETBmeZJTknOjWXWXCfmx15eU3izp0Av5fFK7pfpCoKnOoYazkzAPTcw+y8rOeMUk s7AL9nv1IMNq/voQAMsgB1CtlWcXbi44xGuH1sqD6oX0ftRCjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDusCD/RYknPgK44k0bC5UFOF+TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvZmJiYTBhN2YtYjhlZi0z YWY0LWI5NjAtMTNmNzEwY2M1OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs4b8vYRKy16dgWOItV7eVo/lIAKMdwfL3DIJWg5/zaIWeLvzP7ZIGf UczZv7boCT/sGhi9ATR/cGGql7aVT+9vJZ9WzQRd3EcNkZtzZFN9v4DSKdrZda6G ymFYUvqgjSuN2x2LGvQOL8P0RjMaE8Xpd+oskTfkrTQYvB1jDk4T7g5V7WEV/LG/ ZTyMZyjVi56B7HDUrSC8tqKJHZZ9+OTEacXPN2Z9e1rSZFhzynJSkEVaZ9/qtpcN CmVaMyui6VV0+M2QgDbv0O5Fn9y4/1wdoJS7f4C4H0VxkzA5yrs8ddixjYFs4FgN gI2Seuup1/9w72PZc2jjfL0AzTZoeF8= -----END CERTIFICATE-----Generated at Sun Jun 29 16:33:33 2025 by rpki-client