$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa File: 38baa28c-5f18-3003-b482-8efaa6947bef.roa (raw, json) Hash identifier: ZOMODBZHFx+kqjFCuyuEvx5UQiGaMQaDU0cNXpI+Lws= Subject key identifier: CC:0F:5F:B5:61:CB:53:9F:E3:5F:A9:A7:0D:9A:2C:00:91:D5:06:75 Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F4328584A43DB0A5E7C87747D4D1ED1D0 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 12022 IP address blocks: 208.83.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0a:5e:7c:87:74:7d:4d:1e:d1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=9d1fecf9-faa6-46f8-a91a-002579715ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:b8:5c:cf:31:c4:5c:f7:29:d4:c7:2c:a0: 77:f3:05:01:10:96:4d:b8:a1:c9:cf:63:67:d0:fa: 33:c9:6f:e5:d1:59:c7:8e:80:c3:1d:64:3e:0d:79: 6a:22:49:a0:e8:c4:70:31:4e:9b:c9:74:5b:be:1d: ee:53:1a:86:c0:3d:7c:f8:b4:fa:6a:66:90:ff:fe: bd:0c:31:08:f9:1c:47:7f:39:8a:a0:fe:f0:ab:6d: df:31:91:58:69:f6:aa:24:fc:f5:d3:f4:d0:95:dc: 32:aa:cf:35:93:b3:c5:d8:be:a3:51:72:e0:59:3c: d5:0a:34:f2:3a:ea:d4:7c:5b:59:67:76:7e:31:5d: 12:74:a2:19:30:6d:3f:7f:c0:c8:4b:83:ab:d4:0c: 5b:ec:29:6f:de:f1:0e:90:14:2c:e9:ff:4b:3b:26: 30:24:14:c0:2e:de:5e:f2:7d:c3:0f:f3:2a:ef:7f: 4c:3a:f0:e3:4e:8b:41:1d:d4:db:5b:68:d7:a4:b4: a1:73:83:83:fe:8d:82:80:b3:71:20:42:10:49:a4: 7a:ee:21:bf:e5:2d:95:44:c5:eb:78:a8:f5:09:39: 56:d9:43:2c:47:4f:3c:08:45:5a:44:99:aa:f3:36: e0:2f:d1:6e:af:3e:53:e7:4a:de:b1:05:4d:c8:39: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0F:5F:B5:61:CB:53:9F:E3:5F:A9:A7:0D:9A:2C:00:91:D5:06:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:32:a0:31:05:36:d4:4b:cc:cc:8e:6f:6b:43:a4:fa:64:03: 4d:b6:43:a7:13:e5:63:5c:c3:30:7d:cb:be:f9:6b:08:f5:fe: 1f:8c:3d:60:59:ac:62:66:a4:6b:14:f7:78:da:b8:0d:43:52: 8b:88:51:ad:e2:c6:da:cb:41:91:f2:16:32:27:e7:ef:72:3f: d9:ac:79:69:20:bc:ea:75:41:07:f6:81:61:d0:cd:79:1b:e3: c7:e1:9c:25:cf:71:42:8a:da:f2:7c:10:06:1f:91:16:a3:f7: 1a:b3:3f:b4:29:5e:41:60:5c:69:fb:6a:8c:d8:2d:40:5d:6e: 72:1a:b8:5e:69:b2:ee:02:a5:a9:91:6e:fa:7a:ae:17:78:39: 78:dd:65:e2:0b:d3:18:11:cd:49:7c:e3:d1:26:3c:33:5d:9b: 22:97:e2:6d:7d:1b:ae:ff:1f:e0:5f:6a:ed:d0:66:d6:8c:72: 15:70:6a:bb:cc:97:6a:5b:92:e2:ce:a8:fb:95:e6:28:58:e6: b7:7d:87:d0:97:29:0e:0c:23:ca:c7:bc:d5:1f:0a:7e:36:fc: 81:9f:1f:f6:09:d7:78:c5:d6:ce:7e:91:41:6b:f8:42:d5:2a: aa:dd:c8:6c:ee:54:a9:93:c4:ff:a7:08:4e:eb:42:19:b1:e6: 9f:44:2f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wpefId0fU0e0dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk OWQxZmVjZjktZmFhNi00NmY4LWE5MWEtMDAyNTc5NzE1YWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzye4XM8xxFz3KdTHLKB38wUBEJZNuKHJz2Nn 0PozyW/l0VnHjoDDHWQ+DXlqIkmg6MRwMU6byXRbvh3uUxqGwD18+LT6amaQ//69 DDEI+RxHfzmKoP7wq23fMZFYafaqJPz10/TQldwyqs81k7PF2L6jUXLgWTzVCjTy OurUfFtZZ3Z+MV0SdKIZMG0/f8DIS4Or1Axb7Clv3vEOkBQs6f9LOyYwJBTALt5e 8n3DD/Mq739MOvDjTotBHdTbW2jXpLShc4OD/o2CgLNxIEIQSaR67iG/5S2VRMXr eKj1CTlW2UMsR088CEVaRJmq8zbgL9Furz5T50resQVNyDnpaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwPX7Vhy1Of41+ppw2aLACR1QZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvMzhiYWEyOGMtNWYxOC0z MDAzLWI0ODItOGVmYWE2OTQ3YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8yoDEFNtRLzMyOb2tDpPpkA022Q6cT5WNcwzB9y775awj1/h+MPWBZ rGJmpGsU93jauA1DUouIUa3ixtrLQZHyFjIn5+9yP9mseWkgvOp1QQf2gWHQzXkb 48fhnCXPcUKK2vJ8EAYfkRaj9xqzP7QpXkFgXGn7aozYLUBdbnIauF5psu4CpamR bvp6rhd4OXjdZeIL0xgRzUl849EmPDNdmyKX4m19G67/H+Bfau3QZtaMchVwarvM l2pbkuLOqPuV5ihY5rd9h9CXKQ4MI8rHvNUfCn42/IGfH/YJ13jF1s5+kUFr+ELV KqrdyGzuVKmTxP+nCE7rQhmx5p9ELzI= -----END CERTIFICATE-----Generated at Sat Jul 5 08:01:52 2025 by rpki-client