$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/c94d6397-26be-33f7-bc7c-b27e30e690b6.roa File: c94d6397-26be-33f7-bc7c-b27e30e690b6.roa (raw, json) Hash identifier: 42HXzrVxXOMaEfLkyUdEmHb23TpTsmGr1sV/8HOTA90= Subject key identifier: F3:FC:23:7C:8A:E6:8E:B1:6F:28:D1:E3:46:64:69:F4:76:D2:A9:08 Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584A2EEAC0B49B3428727A444A80 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/c94d6397-26be-33f7-bc7c-b27e30e690b6.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 19901 IP address blocks: 208.160.63.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:c0:b4:9b:34:28:72:7a:44:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=a3f3dd01-0b33-42fc-95a8-3f4316ac25d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:c4:fa:56:8e:71:e8:97:8d:4b:38:d4:40: 58:ff:28:35:8f:5c:08:aa:13:22:41:f6:3c:66:20: 76:40:d3:d2:14:60:3b:ab:df:ce:1d:fa:69:f2:a0: fd:24:3c:01:99:eb:4f:0a:8e:84:42:77:cd:b8:8b: 1a:fa:81:5e:62:84:61:4d:cf:3a:db:15:0c:6a:12: fa:ed:48:3b:70:07:87:55:13:f8:ef:68:bf:e6:28: dd:d3:0b:69:f0:3f:65:d6:8c:5b:a9:40:0e:ab:3a: 7a:12:35:e1:70:cb:7f:95:a1:f5:2d:2e:1c:6e:52: 15:04:05:e8:1c:33:84:9d:85:5d:46:85:5f:fa:4e: f1:15:20:96:d0:a4:fa:21:bc:f0:77:f9:11:a9:b2: ff:86:28:9a:a0:eb:f0:06:c5:e1:dc:95:ad:7e:cc: fe:2b:63:95:83:3e:2e:2e:52:df:87:b2:53:bb:fb: c7:e6:ae:dc:ee:2d:fa:54:63:d4:c9:ab:78:26:2a: 1a:c0:85:d3:c4:e5:e0:56:ce:0b:08:f2:87:ef:09: 51:08:72:20:f3:5c:49:d1:08:58:1a:d2:8b:a3:9e: 7a:74:c4:44:96:d2:32:aa:18:8c:58:77:e7:88:b6: 5c:f3:51:b5:00:df:d5:db:0b:36:a3:b5:8a:b5:3e: eb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:23:7C:8A:E6:8E:B1:6F:28:D1:E3:46:64:69:F4:76:D2:A9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/c94d6397-26be-33f7-bc7c-b27e30e690b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 208.160.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7d:35:54:ef:b6:65:cb:a6:6f:ca:58:ee:1d:21:83:74:37: 58:51:af:2f:e5:6f:97:27:8c:08:e7:f9:01:bc:7d:76:a2:d4: aa:8d:06:ca:2d:e0:05:04:21:64:8a:95:2a:92:94:50:04:9d: 0b:94:e3:a3:81:36:76:22:eb:f7:9f:1d:94:cb:fc:cd:d0:3c: bc:98:6f:cc:6e:77:5d:6e:3f:5c:2a:13:61:b5:9f:dc:0b:54: 68:b9:5d:7e:32:ac:21:5a:15:db:d8:ac:fa:b0:c7:19:00:0d: 41:76:60:d4:dd:7c:da:25:2c:21:5e:54:e7:77:66:29:f9:cc: a6:ce:ae:81:82:5e:b8:f7:89:ad:81:2e:83:6e:d3:56:9b:10: f8:ba:54:ea:21:1f:86:77:40:dd:76:c5:54:a5:41:67:39:35: 13:e2:78:d0:b7:bb:20:93:b8:55:45:6b:0f:6f:87:c8:9e:ca: 22:4a:59:62:dc:9e:69:f5:1c:91:e7:87:04:1d:ff:7e:06:65: cf:ab:f7:24:62:2f:1c:9f:f7:6e:9c:01:95:e8:88:1c:d7:09: 9b:26:d2:13:b6:d5:8d:35:a6:f8:84:fa:3c:3c:ec:eb:91:30: b7:a3:8d:20:d3:ca:b1:38:42:03:bb:24:36:5e:f7:77:5d:e6: a9:15:27:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6sC0mzQocnpESoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk YTNmM2RkMDEtMGIzMy00MmZjLTk1YTgtM2Y0MzE2YWMyNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkjE+laOceiXjUs41EBY/yg1j1wIqhMiQfY8 ZiB2QNPSFGA7q9/OHfpp8qD9JDwBmetPCo6EQnfNuIsa+oFeYoRhTc862xUMahL6 7Ug7cAeHVRP472i/5ijd0wtp8D9l1oxbqUAOqzp6EjXhcMt/laH1LS4cblIVBAXo HDOEnYVdRoVf+k7xFSCW0KT6Ibzwd/kRqbL/hiiaoOvwBsXh3JWtfsz+K2OVgz4u LlLfh7JTu/vH5q7c7i36VGPUyat4JioawIXTxOXgVs4LCPKH7wlRCHIg81xJ0QhY GtKLo556dMREltIyqhiMWHfniLZc81G1AN/V2ws2o7WKtT7rGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP8I3yK5o6xbyjR40ZkafR20qkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvYzk0ZDYzOTctMjZiZS0z M2Y3LWJjN2MtYjI3ZTMwZTY5MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0KA/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh9NVTvtmXLpm/KWO4dIYN0N1hRry/lb5cnjAjn+QG8fXai1KqNBsot 4AUEIWSKlSqSlFAEnQuU46OBNnYi6/efHZTL/M3QPLyYb8xud11uP1wqE2G1n9wL VGi5XX4yrCFaFdvYrPqwxxkADUF2YNTdfNolLCFeVOd3Zin5zKbOroGCXrj3ia2B LoNu01abEPi6VOohH4Z3QN12xVSlQWc5NRPieNC3uyCTuFVFaw9vh8ieyiJKWWLc nmn1HJHnhwQd/34GZc+r9yRiLxyf926cAZXoiBzXCZsm0hO21Y01pviE+jw87OuR MLejjSDTyrE4QgO7JDZe93dd5qkVJ4o= -----END CERTIFICATE-----Generated at Tue Jul 1 23:24:28 2025 by rpki-client