$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa File: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json) Hash identifier: WszExaaJZicaJKlz0velLqsiumNTNLdamDA885t6I1k= Subject key identifier: 94:E4:D7:B7:7E:E9:65:10:AA:E9:CB:29:7F:B1:D1:79:B0:AA:BE:11 Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Certificate serial: 010D0C9F4328584A51D072F311E74CB711715480 Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 14721 IP address blocks: 208.86.116.0/22 maxlen: 24 208.91.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:72:f3:11:e7:4c:b7:11:71:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=555e7d16-7b57-4c5f-a60d-a001b701f97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:ba:50:77:c2:7f:eb:8d:25:ab:6c:15:ed: 9e:fe:a3:82:be:74:8d:4c:e3:82:6a:5e:9f:d5:e0: 0e:64:fd:fd:f9:88:06:31:fe:7a:bb:3c:98:39:42: f5:99:ce:82:f3:c2:ec:64:5c:d2:30:8a:20:bc:26: 74:06:8e:fb:1f:9f:82:48:68:7d:7c:c3:77:52:20: 04:0a:47:0f:00:9b:55:82:fd:1d:c4:52:c8:47:77: 45:ef:80:2d:21:63:12:0e:96:f7:99:37:bb:2c:56: 3f:fc:01:e9:03:79:04:46:19:d0:20:c3:58:5c:95: 75:f3:ba:5d:9d:64:79:22:08:ed:dc:26:04:90:29: af:e2:17:d8:79:9a:2f:9b:be:92:9e:9a:ad:45:73: c0:f8:0e:bd:89:3c:68:80:3b:68:a8:62:69:ed:1c: bb:11:1b:0a:4e:59:21:b4:c1:05:b8:b6:c6:5b:c9: 81:7f:3e:e9:c8:11:ed:a2:e5:e9:8f:b3:5c:34:d6: ae:5b:e0:25:7e:5f:67:83:8d:6a:d2:81:fe:ad:cd: a9:2e:f3:47:81:72:a6:5d:56:4e:2c:6e:c5:de:16: af:a4:bc:4e:c2:10:7d:58:90:1a:ba:87:8d:dd:b6: 50:67:15:ea:4f:a8:d3:da:9f:54:a6:03:7a:a4:09: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E4:D7:B7:7E:E9:65:10:AA:E9:CB:29:7F:B1:D1:79:B0:AA:BE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl X509v3 Authority Key Identifier: keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer sbgp-ipAddrBlock: critical IPv4: 208.86.116.0/22 208.91.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6e:81:e0:2f:02:d1:24:1f:e2:04:6f:0d:c2:28:e0:b2:5c: 55:23:d5:36:9f:c7:b5:cc:7a:c9:29:d7:2c:03:85:91:91:a8: e8:cd:9c:6c:d9:97:40:00:4e:d3:c8:5e:9d:62:c9:53:ec:56: ab:64:6a:e9:76:40:42:23:58:50:05:2a:11:c1:83:24:f2:7c: d9:a1:6d:fa:ad:0a:6a:74:52:af:f9:8c:e4:11:86:cc:07:da: dd:69:ac:2f:d7:9e:96:39:a0:8b:87:50:5f:e4:d6:f3:fb:60: b7:ff:f1:c2:86:09:70:94:78:0a:ca:65:02:2b:28:75:43:0e: 60:f7:8e:27:4f:83:35:4b:fa:c0:65:80:39:5b:16:04:7a:0e: f5:18:5f:4e:45:d2:f5:96:5d:8b:32:09:33:21:d1:bf:15:a8: b6:b5:65:e7:87:ae:19:0b:96:5c:f7:48:53:6f:af:5e:36:12: 0e:1b:b2:a4:92:57:df:8a:59:8a:b4:36:8b:3e:29:ef:0c:9d: 41:98:76:48:11:71:e4:40:7e:54:a4:30:e7:00:bd:02:54:1f: b4:fe:b2:9c:86:91:f3:22:b4:43:62:12:2c:d5:dc:34:8f:9f: ec:23:62:da:f5:a6:06:28:0f:91:64:42:52:12:42:78:07:37: e9:d6:25:a4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpR0HLzEedMtxFxVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0 YTVhMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NTU1ZTdkMTYtN2I1Ny00YzVmLWE2MGQtYTAwMWI3MDFmOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6S6UHfCf+uNJatsFe2e/qOCvnSNTOOCal6f 1eAOZP39+YgGMf56uzyYOUL1mc6C88LsZFzSMIogvCZ0Bo77H5+CSGh9fMN3UiAE CkcPAJtVgv0dxFLIR3dF74AtIWMSDpb3mTe7LFY//AHpA3kERhnQIMNYXJV187pd nWR5Igjt3CYEkCmv4hfYeZovm76SnpqtRXPA+A69iTxogDtoqGJp7Ry7ERsKTlkh tMEFuLbGW8mBfz7pyBHtouXpj7NcNNauW+Alfl9ng41q0oH+rc2pLvNHgXKmXVZO LG7F3havpLxOwhB9WJAauoeN3bZQZxXqT6jT2p9UpgN6pAn8yQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJTk17d+6WUQqunLKX+x0Xmwqr4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMmEyZjA1OWQtZTE4MS0z M2JmLThiYmQtMmM0YTVkMDkwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3 NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy ODM3NzRhNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0FZ0AwQC 0FuYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAtugeAvAtEkH+IEbw3CKOCyXFUj1Tafx7XMeskp1ywDhZGR qOjNnGzZl0AATtPIXp1iyVPsVqtkaul2QEIjWFAFKhHBgyTyfNmhbfqtCmp0Uq/5 jOQRhswH2t1prC/XnpY5oIuHUF/k1vP7YLf/8cKGCXCUeArKZQIrKHVDDmD3jidP gzVL+sBlgDlbFgR6DvUYX05F0vWWXYsyCTMh0b8VqLa1ZeeHrhkLllz3SFNvr142 Eg4bsqSSV9+KWYq0Nos+Ke8MnUGYdkgRceRAflSkMOcAvQJUH7T+spyGkfMitENi EizV3DSPn+wjYtr1pgYoD5FkQlISQngHN+nWJaQ= -----END CERTIFICATE-----Generated at Sun Jun 29 20:11:17 2025 by rpki-client