$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa File: 3131e6dc-7164-3f03-84c1-c68697ea362c.roa (raw, json) Hash identifier: zPOn+ea2UxZfqXM1mkwoEw7OggCOnhNSxA6z2EvdQgQ= Subject key identifier: 54:2C:A1:74:DA:E1:22:58:86:F9:1B:F2:E6:F1:5C:06:A0:FA:C1:25 Certificate issuer: /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Certificate serial: 010D0C9F4328584ACE0B9360BCC5EE62E1559040 Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 14618 IP address blocks: 208.80.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:93:60:bc:c5:ee:62:e1:55:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=0a113130-d363-4c66-9282-571532bd4bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:e1:f5:5d:39:b5:25:5f:a1:30:68:b4:4f: 37:09:63:42:52:e7:d9:14:b3:21:56:ce:fa:6b:6a: f8:e0:5b:a9:42:f9:58:35:3a:a6:0b:e8:77:c3:7d: c9:b1:0c:f8:84:f3:85:6f:bf:3a:17:73:81:d6:e4: 92:5e:63:47:94:bd:c1:78:32:1e:8d:a6:04:a4:11: 6d:f6:97:fb:bd:ca:e9:ee:46:5d:d9:06:24:7a:b2: a4:95:a8:c6:77:7d:06:8c:81:9f:63:a6:c9:ea:2c: df:8e:63:26:21:83:c9:26:61:1a:d4:f7:08:de:8f: f0:a3:57:41:93:2f:df:c7:43:38:1b:df:eb:ca:9b: 22:ad:34:92:a7:d3:90:2b:6e:91:2c:1d:3e:6c:f4: 6b:52:be:08:44:57:76:2d:87:8e:0d:04:aa:94:52: 70:73:35:51:36:0a:4b:8a:00:00:31:f2:da:f4:a7: cc:9e:20:d5:69:d8:03:a7:28:90:74:67:15:47:68: ac:fd:2f:a4:80:84:e0:78:f4:5d:6f:19:92:14:70: ff:56:f2:c4:01:86:94:8f:7b:9f:a2:77:31:db:32: 1f:f8:d1:77:d7:e9:4e:7d:f5:5e:6b:41:00:26:9f: 77:89:2b:ef:5c:a0:70:46:71:26:6f:a2:35:de:cc: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2C:A1:74:DA:E1:22:58:86:F9:1B:F2:E6:F1:5C:06:A0:FA:C1:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl X509v3 Authority Key Identifier: keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer sbgp-ipAddrBlock: critical IPv4: 208.80.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d6:15:4b:bb:01:3f:74:40:0d:cd:35:f0:75:46:42:41:54: 2e:62:ab:35:af:4e:4b:c1:db:28:9c:30:08:d2:9c:98:56:d8: cd:ad:33:e0:bb:32:3a:c6:17:b3:b3:cd:40:9d:32:b9:bd:e9: f9:31:b7:2f:b3:d5:59:28:41:dd:f6:e8:12:b4:c6:2f:4b:36: 49:40:95:02:d2:38:67:35:a7:68:d9:05:ec:84:35:8e:b5:5b: 6a:e6:5d:f2:02:63:dc:db:10:42:13:57:47:54:e0:15:82:1f: cf:a8:19:86:6d:e3:9d:c3:08:86:5a:25:8c:3a:d3:fb:24:ae: 8b:ba:4f:ef:8e:df:90:6b:2e:81:81:53:99:a5:9b:15:f6:0e: f0:11:0d:aa:5e:fa:26:a5:2f:90:ab:b9:9a:23:4b:2a:31:a6: f6:49:34:3c:f2:00:29:5c:f8:ae:03:5d:5a:7c:a3:42:34:57: 88:80:37:ad:28:ad:02:54:6c:44:90:42:3b:8e:8b:0a:ba:88: 54:28:e7:18:bd:27:57:5d:a1:01:e3:74:bd:ce:de:b0:cf:b5: 92:77:40:7c:86:4c:06:51:23:46:d3:ed:23:cf:74:d2:6f:2e: 8c:47:2d:40:d3:95:04:a3:d0:f5:e8:a9:db:d7:a3:99:02:6e: 53:a5:d9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5NgvMXuYuFVkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJi NzJlMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MGExMTMxMzAtZDM2My00YzY2LTkyODItNTcxNTMyYmQ0YmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3zh9V05tSVfoTBotE83CWNCUufZFLMhVs76 a2r44FupQvlYNTqmC+h3w33JsQz4hPOFb786F3OB1uSSXmNHlL3BeDIejaYEpBFt 9pf7vcrp7kZd2QYkerKklajGd30GjIGfY6bJ6izfjmMmIYPJJmEa1PcI3o/wo1dB ky/fx0M4G9/rypsirTSSp9OQK26RLB0+bPRrUr4IRFd2LYeODQSqlFJwczVRNgpL igAAMfLa9KfMniDVadgDpyiQdGcVR2is/S+kgITgePRdbxmSFHD/VvLEAYaUj3uf oncx2zIf+NF31+lOffVea0EAJp93iSvvXKBwRnEmb6I13sw+WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQsoXTa4SJYhvkb8ubxXAag+sElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRi MWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvMzEzMWU2ZGMtNzE2NC0z ZjAzLTg0YzEtYzY4Njk3ZWEzNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0YjFlNGItODlkMy00NzY5LWJh YjEtMzhkZjFkOWJiNzJlLzgwNGIxZTRiLTg5ZDMtNDc2OS1iYWIxLTM4ZGYxZDli YjcyZS5jcmwwHwYDVR0jBBgwFoAUVQNlKvd/DK9QUvrJh8lPYgQvuDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRm MWQ5YmI3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHWFUu7AT90QA3NNfB1RkJBVC5iqzWvTkvB2yicMAjSnJhW2M2tM+C7 MjrGF7OzzUCdMrm96fkxty+z1VkoQd326BK0xi9LNklAlQLSOGc1p2jZBeyENY61 W2rmXfICY9zbEEITV0dU4BWCH8+oGYZt453DCIZaJYw60/skrou6T++O35BrLoGB U5mlmxX2DvARDape+ialL5CruZojSyoxpvZJNDzyAClc+K4DXVp8o0I0V4iAN60o rQJUbESQQjuOiwq6iFQo5xi9J1ddoQHjdL3O3rDPtZJ3QHyGTAZRI0bT7SPPdNJv LoxHLUDTlQSj0PXoqdvXo5kCblOl2TY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:59 2025 by rpki-client