$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa File: 297bb316-79a6-3af7-a3db-ad1e4f19895e.roa (raw, json) Hash identifier: 9WRGK7Djm/sk59rdku5IUaywWusMCplnNllrNrGyqGw= Subject key identifier: F9:3C:76:48:BF:9F:90:B1:D8:8C:9C:FC:23:8C:4B:C3:EB:71:A8:97 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584A411052C69C9F8619983F1880 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 29968 IP address blocks: 208.20.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:52:c6:9c:9f:86:19:98:3f:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=7dbda503-104d-46e5-a226-a07e84549c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:5e:0f:c9:b6:45:dc:b7:6c:95:2a:d6:39: 9d:74:5a:9b:40:9d:eb:f5:03:62:07:b8:b8:00:7b: 8f:be:e0:73:34:42:c7:51:dc:6f:1d:8d:c3:99:46: 6a:68:9c:d4:ed:3f:47:ae:c1:13:9d:6e:df:e7:c8: e3:bc:50:e8:0c:83:46:f1:45:19:c6:2c:65:af:e8: 6f:93:ed:0d:7d:bb:13:c7:cf:7d:f0:e6:3a:57:6c: 75:8b:f7:dc:33:b2:fa:f1:e8:2f:88:e0:02:33:5d: 46:cd:bd:a1:49:2d:e7:6f:4e:d1:ea:3d:56:d2:a5: 2a:42:d4:e1:2b:71:ab:e7:67:66:31:ee:24:45:fe: 01:af:db:9d:8d:c5:f4:b6:57:f1:ac:fe:45:cb:c6: 3a:60:20:5d:8d:43:de:53:55:f7:b9:7f:3d:61:4f: 2a:ec:9e:5f:4d:0d:49:72:46:90:28:36:50:f0:bd: 2e:f8:fc:20:2a:b1:2d:7e:42:b2:ea:61:6e:26:93: 12:03:86:6b:5d:4d:36:26:2c:a2:f2:4e:f1:e2:94: 69:5c:42:06:c1:6f:1a:98:50:92:1b:b7:46:26:49: 4c:07:09:de:66:01:da:1e:37:eb:57:2f:78:0c:a0: ca:4e:98:84:57:5e:43:e4:46:23:c2:41:e7:e7:86: 2e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3C:76:48:BF:9F:90:B1:D8:8C:9C:FC:23:8C:4B:C3:EB:71:A8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ba:b9:30:78:b4:8e:6a:83:cd:d9:bc:be:6d:2c:90:ab:ad: db:1b:6d:e9:98:de:88:31:bd:d0:16:5f:15:d4:7b:61:55:38: d3:57:ff:75:18:9d:4e:53:79:83:da:a4:b7:8a:f5:e1:61:fe: 9f:83:f6:38:ae:f0:58:6f:85:23:0f:bf:50:c8:dd:16:3b:86: 16:3c:bf:19:22:d8:ce:ec:45:13:37:9a:fb:76:f4:22:02:41: 3a:ba:fb:03:08:86:0b:dc:89:31:2d:6c:07:a1:5b:23:ee:0d: 42:c3:50:44:e0:47:88:17:dc:5f:c8:bc:77:fd:b3:2f:bf:80: fb:6d:41:54:6f:34:cb:45:12:f3:3c:90:e5:73:db:b5:aa:42: 71:63:14:bc:e4:4f:59:5b:3b:0d:b0:59:27:76:3d:e0:31:41: 86:99:e2:41:6d:6e:cc:29:17:80:fe:4a:f9:7c:4b:48:d0:40: 2a:93:8a:46:32:21:af:a6:74:f3:72:37:a2:61:e7:d3:d9:d9: 0d:20:40:f9:53:fd:ff:02:9a:59:b5:55:64:35:eb:e7:f2:57: 69:05:c6:83:0e:9e:83:8d:55:89:14:e8:ff:b2:52:54:ac:27: f4:0f:60:8f:db:81:6f:40:b6:13:93:c4:71:00:52:68:2c:8e: b6:7a:02:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFLGnJ+GGZg/GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk N2RiZGE1MDMtMTA0ZC00NmU1LWEyMjYtYTA3ZTg0NTQ5YzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt9eD8m2Rdy3bJUq1jmddFqbQJ3r9QNiB7i4 AHuPvuBzNELHUdxvHY3DmUZqaJzU7T9HrsETnW7f58jjvFDoDING8UUZxixlr+hv k+0NfbsTx8998OY6V2x1i/fcM7L68egviOACM11Gzb2hSS3nb07R6j1W0qUqQtTh K3Gr52dmMe4kRf4Br9udjcX0tlfxrP5Fy8Y6YCBdjUPeU1X3uX89YU8q7J5fTQ1J ckaQKDZQ8L0u+PwgKrEtfkKy6mFuJpMSA4ZrXU02Jiyi8k7x4pRpXEIGwW8amFCS G7dGJklMBwneZgHaHjfrVy94DKDKTpiEV15D5EYjwkHn54YuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk8dki/n5Cx2Iyc/COMS8PrcaiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMjk3YmIzMTYtNzlhNi0z YWY3LWEzZGItYWQxZTRmMTk4OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW6uTB4tI5qg83ZvL5tLJCrrdsbbemY3ogxvdAWXxXUe2FVONNX/3UY nU5TeYPapLeK9eFh/p+D9jiu8FhvhSMPv1DI3RY7hhY8vxki2M7sRRM3mvt29CIC QTq6+wMIhgvciTEtbAehWyPuDULDUETgR4gX3F/IvHf9sy+/gPttQVRvNMtFEvM8 kOVz27WqQnFjFLzkT1lbOw2wWSd2PeAxQYaZ4kFtbswpF4D+Svl8S0jQQCqTikYy Ia+mdPNyN6Jh59PZ2Q0gQPlT/f8Cmlm1VWQ16+fyV2kFxoMOnoONVYkU6P+yUlSs J/QPYI/bgW9AthOTxHEAUmgsjrZ6Aj4= -----END CERTIFICATE-----Generated at Sun Jun 29 09:51:37 2025 by rpki-client