$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa File: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (raw, json) Hash identifier: YhUzLtOjAGsxSZ2ZkgnY/FO7Mgiaf+mI2nMDu0Wr3N8= Subject key identifier: 0E:FA:80:BD:FC:7C:97:A5:8C:BF:BA:67:61:CD:7D:4A:7E:DE:FD:F4 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584AC5AB8FE8A1F4D2BFBC40C880 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 6079 IP address blocks: 208.99.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:8f:e8:a1:f4:d2:bf:bc:40:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=90d1b75a-35d7-4ea7-8c5b-59cec9263e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:df:2d:f3:06:91:4e:99:e4:50:30:f6:63: 7f:5e:f0:77:fc:98:c6:a1:58:64:79:67:f9:32:03: 35:18:bc:92:b9:1e:6a:51:16:41:61:8a:a8:f3:a1: ec:a1:19:6f:27:77:96:89:af:6f:89:ca:84:0d:87: c3:5f:78:81:c5:f4:53:be:b1:26:75:88:fb:b5:ab: d3:73:c3:13:22:3d:33:8f:4d:8c:d2:2d:06:e1:3d: c5:db:26:d6:5c:20:bc:01:d9:1d:94:53:e3:fb:3e: 56:e1:7b:c4:fc:a6:ee:48:60:5e:c6:1b:a2:28:a2: 0b:2c:f2:5a:84:0d:ab:52:fa:22:cd:67:05:ac:a5: c8:f7:f7:bc:1c:5d:00:ee:b6:0e:98:83:c4:ae:06: 03:90:45:fd:2c:1a:bc:e3:a6:c1:81:4d:cb:b9:a6: 9d:90:b4:a8:3f:8f:9e:85:b6:76:70:21:01:57:ff: 7e:1f:e6:a4:7e:37:bc:74:9e:fa:f3:cf:da:d1:ea: fc:ab:fc:42:66:bc:7c:1f:da:2e:ec:64:57:0b:35: 5a:d6:8e:bc:e9:c4:6b:4d:e9:9e:c8:ae:d4:d2:06: 2a:fa:5d:12:97:f6:0c:69:13:e9:b7:c2:07:1e:f9: de:c8:05:40:f2:d0:cf:a3:b2:82:7d:1a:86:9d:d7: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FA:80:BD:FC:7C:97:A5:8C:BF:BA:67:61:CD:7D:4A:7E:DE:FD:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:34:ba:f3:63:85:46:15:9e:ab:a6:a8:51:7d:a6:c7:7c:c5: bf:e1:e0:8f:f1:a2:c3:9c:80:da:ad:3c:aa:c3:fc:36:74:b4: 41:c6:67:d6:b9:6a:e4:df:ae:58:88:03:66:31:02:ed:d3:bf: b8:42:73:69:59:ea:60:c3:8e:ee:f9:b4:ba:a3:a2:83:ee:5f: 5c:0c:6c:20:cd:1a:ae:57:8a:61:7f:5d:5a:bb:fe:64:a2:b1: 3a:43:0e:5c:d9:e5:57:09:7d:bd:9a:e1:e0:a8:79:e6:a0:cb: e8:c0:72:fc:f8:e8:4a:7f:c6:9e:94:45:c8:0f:56:2d:4d:a3: 8e:1c:9d:89:80:7c:10:2c:b3:97:2f:f2:18:12:f1:3d:23:d2: 96:05:7f:7f:da:71:88:66:84:77:7c:a8:8a:4f:fe:f3:85:d3: 2e:99:f9:72:2f:8c:68:8d:02:4c:9b:9e:70:7a:24:b0:d4:84: 6d:72:7c:78:d6:84:3a:74:43:76:ed:a5:95:c8:3a:02:3f:d8: 03:27:1a:e5:73:95:dd:2f:84:71:dd:3a:f7:d1:7c:55:11:aa: 7d:f7:4c:15:9d:f9:91:ec:b3:05:70:7e:04:d5:a6:4b:7a:c0: bf:be:c3:20:03:ff:6c:eb:33:4a:51:eb:f1:4c:84:2a:71:75: fd:2a:5c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4/oofTSv7xAyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OTBkMWI3NWEtMzVkNy00ZWE3LThjNWItNTljZWM5MjYzZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr/fLfMGkU6Z5FAw9mN/XvB3/JjGoVhkeWf5 MgM1GLySuR5qURZBYYqo86HsoRlvJ3eWia9vicqEDYfDX3iBxfRTvrEmdYj7tavT c8MTIj0zj02M0i0G4T3F2ybWXCC8AdkdlFPj+z5W4XvE/KbuSGBexhuiKKILLPJa hA2rUvoizWcFrKXI9/e8HF0A7rYOmIPErgYDkEX9LBq846bBgU3LuaadkLSoP4+e hbZ2cCEBV/9+H+akfje8dJ7688/a0er8q/xCZrx8H9ou7GRXCzVa1o686cRrTeme yK7U0gYq+l0Sl/YMaRPpt8IHHvneyAVA8tDPo7KCfRqGndelpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA76gL38fJeljL+6Z2HNfUp+3v30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzM5Y2NhMzItZjM5NS0z ZmU0LTg0ZGEtNjJkYTZiOGQyYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw0uvNjhUYVnqumqFF9psd8xb/h4I/xosOcgNqtPKrD/DZ0tEHGZ9a5 auTfrliIA2YxAu3Tv7hCc2lZ6mDDju75tLqjooPuX1wMbCDNGq5XimF/XVq7/mSi sTpDDlzZ5VcJfb2a4eCoeeagy+jAcvz46Ep/xp6URcgPVi1No44cnYmAfBAss5cv 8hgS8T0j0pYFf3/acYhmhHd8qIpP/vOF0y6Z+XIvjGiNAkybnnB6JLDUhG1yfHjW hDp0Q3btpZXIOgI/2AMnGuVzld0vhHHdOvfRfFURqn33TBWd+ZHsswVwfgTVpkt6 wL++wyAD/2zrM0pR6/FMhCpxdf0qXBw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:59:26 2025 by rpki-client