$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/a9b63255-9e89-39b3-8fcb-9d335ee82b62.roa File: a9b63255-9e89-39b3-8fcb-9d335ee82b62.roa (raw, json) Hash identifier: JxWzG77vKbJQRDUkvmEgV+HCdheZ9wL+zFFRIjblv2M= Subject key identifier: 77:AC:34:7A:78:A2:76:4B:D1:4C:D7:96:9F:45:8F:56:FE:3C:7B:8C Certificate issuer: /CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02 Certificate serial: 010D0C9F4328584ADA9BB681599171D393B18000 Authority key identifier: DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/a9b63255-9e89-39b3-8fcb-9d335ee82b62.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 2497 IP address blocks: 206.132.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b6:81:59:91:71:d3:93:b1:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=3a72e7e9-981e-4b70-bfbe-df38ee18531f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:f0:fe:d9:24:c4:4e:ac:bc:aa:32:d6:b1: 60:32:26:5b:58:53:22:24:c2:f6:8e:b1:24:3a:18: 78:0e:5d:ac:2e:59:80:86:ec:3c:98:46:46:3e:1f: 0b:49:94:43:c2:dd:2f:c4:94:0f:9c:db:08:65:eb: 87:d6:e2:1a:90:23:f8:94:55:0f:f6:c0:d0:a2:55: 83:ec:57:5d:4a:e0:aa:c2:b1:ca:14:cd:b5:56:04: 3d:f0:cc:3f:49:ce:8d:89:3f:29:b1:ec:10:b7:54: 96:20:0e:d1:6c:44:67:7d:cf:dd:ef:4b:55:83:a4: 3e:70:b7:c9:37:bc:ea:b9:87:cc:73:d2:b9:74:86: 16:74:aa:67:4c:74:6c:c1:ff:2b:46:01:2a:4d:9f: 9a:7c:1c:1d:de:12:c8:c0:38:7e:b6:1e:16:86:e4: 3c:38:fe:c5:17:ba:50:7f:c0:1a:ba:b8:72:17:69: bb:d7:aa:42:37:15:e5:54:49:72:e4:b8:49:74:99: 14:d8:d9:bc:83:b5:29:08:b5:8c:0c:4b:84:89:ee: ab:2c:30:61:05:a3:52:9d:59:65:b3:29:68:c1:1f: 74:d3:68:72:b5:84:c3:dd:ae:d7:93:44:7b:ed:57: 67:a4:42:ee:d1:d9:d3:af:be:d0:1d:5e:d3:73:32: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AC:34:7A:78:A2:76:4B:D1:4C:D7:96:9F:45:8F:56:FE:3C:7B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/a9b63255-9e89-39b3-8fcb-9d335ee82b62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl X509v3 Authority Key Identifier: keyid:DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer sbgp-ipAddrBlock: critical IPv4: 206.132.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:61:c0:5e:3a:f6:83:78:f6:bc:3c:57:96:13:47:5d:52:14: 0f:2a:de:fb:35:26:e2:3c:47:f8:b8:b4:01:9f:be:ef:10:98: 3a:9a:af:1c:0e:2e:7c:f7:f2:27:d3:42:0e:dd:5b:21:2d:c1: cc:b5:e4:ef:39:f9:1a:cb:d5:96:14:ad:59:27:79:7c:90:b4: 86:03:2c:6e:39:58:85:eb:d6:65:0b:49:38:f0:03:58:9e:1d: 9f:bd:78:52:50:58:25:48:51:ec:ac:3a:de:5e:bd:11:5f:b9: 73:35:72:ac:9e:f6:c0:21:e2:5d:01:b4:10:4d:e9:0a:84:10: a6:a6:4f:7c:1b:6e:53:af:eb:60:48:c7:e7:3a:cb:8a:d5:b6: 6f:cb:e4:d3:cd:eb:1b:87:dd:22:54:e1:34:59:d5:06:0c:da: 18:de:ce:13:50:09:8b:49:ab:58:18:71:ea:d5:f7:b7:8d:d2: 4e:28:f4:aa:02:34:db:e5:94:8f:51:73:39:e2:b9:6e:0e:bb: ef:00:b9:ac:cb:1f:0c:74:ff:0b:62:bd:aa:f7:2a:b8:53:02: 77:b3:14:89:cf:c8:ad:dd:96:55:82:db:82:e8:de:bb:0d:fd: b9:67:8d:12:aa:99:87:12:90:bb:0f:d2:f9:cb:e7:fd:2e:ac: 9f:78:03:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram7aBWZFx05OxgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q1NTYzMTctY2M0Zi00YjgzLTg2YjAtMjVkNGY5MmM2 ZDAyMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk M2E3MmU3ZTktOTgxZS00YjcwLWJmYmUtZGYzOGVlMTg1MzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP7w/tkkxE6svKoy1rFgMiZbWFMiJML2jrEk Ohh4Dl2sLlmAhuw8mEZGPh8LSZRDwt0vxJQPnNsIZeuH1uIakCP4lFUP9sDQolWD 7FddSuCqwrHKFM21VgQ98Mw/Sc6NiT8psewQt1SWIA7RbERnfc/d70tVg6Q+cLfJ N7zquYfMc9K5dIYWdKpnTHRswf8rRgEqTZ+afBwd3hLIwDh+th4WhuQ8OP7FF7pQ f8AaurhyF2m716pCNxXlVEly5LhJdJkU2Nm8g7UpCLWMDEuEie6rLDBhBaNSnVll sylowR9002hytYTD3a7Xk0R77VdnpELu0dnTr77QHV7TczJWAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHesNHp4onZL0UzXlp9Fj1b+PHuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZDU1 NjMxNy1jYzRmLTRiODMtODZiMC0yNWQ0ZjkyYzZkMDIvYTliNjMyNTUtOWU4OS0z OWIzLThmY2ItOWQzMzVlZTgyYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Q1NTYzMTctY2M0Zi00YjgzLTg2 YjAtMjVkNGY5MmM2ZDAyLzdkNTU2MzE3LWNjNGYtNGI4My04NmIwLTI1ZDRmOTJj NmQwMi5jcmwwHwYDVR0jBBgwFoAU3J+3oTS/B3MNGt1NJUbKVE5DsHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZDU1NjMxNy1jYzRmLTRiODMtODZiMC0yNWQ0 ZjkyYzZkMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzoSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFthwF469oN49rw8V5YTR11SFA8q3vs1JuI8R/i4tAGfvu8QmDqarxwO Lnz38ifTQg7dWyEtwcy15O85+RrL1ZYUrVkneXyQtIYDLG45WIXr1mULSTjwA1ie HZ+9eFJQWCVIUeysOt5evRFfuXM1cqye9sAh4l0BtBBN6QqEEKamT3wbblOv62BI x+c6y4rVtm/L5NPN6xuH3SJU4TRZ1QYM2hjezhNQCYtJq1gYcerV97eN0k4o9KoC NNvllI9RczniuW4Ou+8AuazLHwx0/wtivar3KrhTAnezFInPyK3dllWC24Lo3rsN /blnjRKqmYcSkLsP0vnL5/0urJ94A1I= -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:47 2025 by rpki-client