$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa File: dbda1118-9914-33ac-a372-020cfd89d214.roa (raw, json) Hash identifier: 4+EYybVr4eExkDIkTf8pAXHmX2VgRJLMZiIsS/L9Zqs= Subject key identifier: F7:C0:0A:89:2D:26:8C:DD:A6:6A:13:2C:CE:9E:DF:AF:BD:CE:73:7E Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584A3B7AF606F2A78879B2F1F880 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 13629 IP address blocks: 208.94.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f6:06:f2:a7:88:79:b2:f1:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=0d29df50-078a-4e7a-bf25-463275da7561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:79:69:0a:f6:b5:c0:43:c3:59:28:9e:e5:35: 2e:eb:8b:e3:0e:e4:73:52:df:44:cf:9d:5f:a7:76: d5:29:57:13:cd:b3:57:63:ff:00:95:62:7e:d1:3f: cd:88:05:e0:e1:67:33:ad:9e:61:3c:81:2a:d6:8c: 4d:5c:b6:eb:8d:a6:68:71:0f:db:4c:fd:29:49:5d: aa:fe:35:2c:29:4c:18:83:85:7a:56:cb:7d:78:2d: 91:ee:f9:41:cf:a4:ba:5f:8e:34:81:2b:0d:45:d2: 2a:63:d7:1a:04:8f:2b:47:53:d9:92:9b:f1:3f:c4: be:07:93:ef:93:d3:ef:11:7e:de:10:f0:14:26:e9: 7f:90:79:bd:4e:b9:20:74:b3:59:8b:19:9a:d7:3b: d4:7f:63:ba:e0:c3:db:24:11:a5:63:3b:6b:6e:9a: 71:44:20:84:d1:d8:79:cd:16:fd:3e:3b:f4:4c:21: d6:dc:6d:24:4f:27:58:77:fa:57:1e:2d:d6:79:6c: 46:56:1f:46:62:c1:28:1f:af:34:53:47:ee:a6:47: f3:d0:47:17:64:2c:55:8c:9e:5c:85:79:ac:81:08: b6:41:0e:d4:73:c6:87:48:52:37:89:af:1e:5a:7b: cb:7c:21:da:7a:8f:21:30:5c:02:42:59:20:fd:37: 3f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C0:0A:89:2D:26:8C:DD:A6:6A:13:2C:CE:9E:DF:AF:BD:CE:73:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:29:47:f4:5b:45:34:85:3a:9f:cb:5a:23:66:78:e1:9f:9e: 3d:9e:77:05:f0:7d:72:d1:88:a8:09:d7:ac:fe:b4:67:8a:52: 40:a9:61:38:3a:bd:5c:95:82:c5:fd:5c:73:fd:98:20:16:30: 91:6c:c6:e8:29:ad:dc:a2:fd:7f:2b:d0:5e:f8:f4:22:9d:9e: 8f:1b:ed:61:71:53:bc:80:49:dc:2f:4e:c7:94:59:91:b0:90: bf:b6:56:c6:46:f3:2d:92:08:d7:3f:67:fa:5a:d7:cb:86:6e: 91:ca:05:bb:8c:75:51:ed:52:b0:a7:c0:37:69:6e:c2:b0:98: fc:16:e7:12:11:84:b6:78:f1:dc:e2:a1:92:15:1c:32:b9:c4: d4:44:93:93:18:cf:44:73:47:79:3e:c9:7f:c7:d0:05:aa:29: 8d:1c:95:9e:88:c2:91:46:31:b4:ad:ed:bd:a7:71:09:0e:24: 33:53:51:ef:fc:a6:53:52:4b:a8:7f:4e:9f:f6:f2:90:3b:cf: 23:32:c6:05:0b:e5:db:39:a4:a6:ec:f8:5b:73:fc:a3:8c:83: aa:73:b9:ce:5c:79:8c:9a:6c:64:d5:18:5a:96:e9:32:cc:80: af:0e:52:a2:df:2e:98:c1:6e:ce:fa:0a:e5:83:64:95:83:ae: 94:35:64:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evYG8qeIebLx+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MGQyOWRmNTAtMDc4YS00ZTdhLWJmMjUtNDYzMjc1ZGE3NTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HlpCva1wEPDWSie5TUu64vjDuRzUt9Ez51f p3bVKVcTzbNXY/8AlWJ+0T/NiAXg4WczrZ5hPIEq1oxNXLbrjaZocQ/bTP0pSV2q /jUsKUwYg4V6Vst9eC2R7vlBz6S6X440gSsNRdIqY9caBI8rR1PZkpvxP8S+B5Pv k9PvEX7eEPAUJul/kHm9TrkgdLNZixma1zvUf2O64MPbJBGlYztrbppxRCCE0dh5 zRb9Pjv0TCHW3G0kTydYd/pXHi3WeWxGVh9GYsEoH680U0fupkfz0EcXZCxVjJ5c hXmsgQi2QQ7Uc8aHSFI3ia8eWnvLfCHaeo8hMFwCQlkg/Tc/xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfACoktJozdpmoTLM6e36+9znN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvZGJkYTExMTgtOTkxNC0z M2FjLWEzNzItMDIwY2ZkODlkMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACopR/RbRTSFOp/LWiNmeOGfnj2edwXwfXLRiKgJ16z+tGeKUkCpYTg6 vVyVgsX9XHP9mCAWMJFsxugprdyi/X8r0F749CKdno8b7WFxU7yASdwvTseUWZGw kL+2VsZG8y2SCNc/Z/pa18uGbpHKBbuMdVHtUrCnwDdpbsKwmPwW5xIRhLZ48dzi oZIVHDK5xNREk5MYz0RzR3k+yX/H0AWqKY0clZ6IwpFGMbSt7b2ncQkOJDNTUe/8 plNSS6h/Tp/28pA7zyMyxgUL5ds5pKbs+Ftz/KOMg6pzuc5ceYyabGTVGFqW6TLM gK8OUqLfLpjBbs76CuWDZJWDrpQ1ZFI= -----END CERTIFICATE-----Generated at Tue Jul 1 02:40:23 2025 by rpki-client