$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa File: 85df388a-c8da-3e19-af2a-f326a918b3bb.roa (raw, json) Hash identifier: bkQBtCrSJ5Pa0X4niPfCOgo+T1Jotc4hXSJl5AijeJQ= Subject key identifier: 11:D2:54:50:2C:55:98:49:12:1F:EF:FC:1C:02:B5:46:60:86:B2:65 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584A5335A377D62AC1BA97789A80 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 6079 IP address blocks: 208.74.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a3:77:d6:2a:c1:ba:97:78:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=f3fddbfb-48fb-4492-b85c-644a512053d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:1c:d2:cd:2a:86:26:4f:18:59:bc:c2:a0: 5e:fa:b4:58:07:8b:5f:7e:cf:07:44:ea:76:44:4d: 9c:41:71:1a:b7:4d:20:5b:5f:50:8e:c5:8a:a3:6e: 48:bd:35:de:00:bc:6a:df:a6:52:cc:46:ce:de:58: 03:c6:d6:03:83:7b:66:77:2d:c9:5b:ec:c8:5a:c5: 45:27:2f:91:05:8f:67:56:8a:a8:83:2a:dc:80:95: 32:a5:e7:60:86:dd:2d:98:63:2e:db:4c:cf:e4:d5: 7a:13:71:a0:a2:79:ae:6e:c3:d0:ee:f3:ca:3c:6a: 73:cf:f1:06:7a:7a:45:5b:b0:de:7a:5c:09:55:9f: 7d:e9:6b:c7:e3:cc:7f:f9:b0:4c:9a:32:70:81:74: 79:6e:76:cc:ab:52:0d:d5:59:66:a8:65:63:8b:0a: 09:42:3f:12:8d:f2:98:b1:d5:28:6f:13:89:d0:05: 61:70:48:eb:a3:74:f1:50:e2:fb:a8:ce:e8:02:17: e1:f4:56:2e:38:7d:1e:a8:3f:9a:f9:15:f2:f3:c7: c2:be:74:1b:3a:0f:9a:4a:7c:60:1d:b7:bf:83:ea: f5:68:1e:39:ce:5d:6c:9a:20:dd:ee:30:fc:77:be: 23:48:5d:d8:96:72:56:e9:4e:3c:3f:ba:77:54:9e: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D2:54:50:2C:55:98:49:12:1F:EF:FC:1C:02:B5:46:60:86:B2:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 208.74.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:64:97:fd:03:0e:f9:ed:bf:b1:63:e8:5d:d0:4e:da:d8:33: b2:69:d9:c4:66:8c:f2:59:3f:0f:60:c5:9a:7d:2e:ae:0f:d3: 1d:6c:53:df:21:92:de:a6:d1:90:96:88:66:ae:09:32:7f:b0: 33:b0:27:b4:25:7f:d6:30:25:5c:53:7a:53:c6:98:38:96:81: 5b:76:d7:61:81:8c:96:2e:94:21:c9:a4:cb:4a:4a:7f:0b:50: fb:b4:de:a5:e7:64:d1:94:b3:6d:97:fc:0f:49:60:f8:bb:79: 82:4f:f1:35:ad:93:74:91:65:8d:1a:49:be:2b:82:7b:bc:63: 6b:8a:2e:3d:1c:4c:dc:7d:b9:d7:46:04:aa:85:e1:6c:84:f1: b6:00:58:3d:71:f0:7e:9f:1e:3a:7d:ef:a9:cf:82:23:02:0c: 3d:63:84:ba:d8:a9:76:27:aa:4e:58:cf:ee:c2:d9:4e:e4:ce: c4:55:30:3f:0c:d3:ad:84:f9:55:45:28:84:95:19:af:a7:3f: 80:05:1e:43:6e:37:0e:4e:9a:e7:86:cf:e2:f8:be:d0:24:3d: 51:11:93:6d:75:62:86:d8:0b:15:d7:79:bf:8f:92:02:3b:ba: b7:93:88:ab:8d:ae:a6:da:23:0f:dd:8a:36:34:5d:83:bc:94: 17:f8:6c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaN31irBupd4moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZjNmZGRiZmItNDhmYi00NDkyLWI4NWMtNjQ0YTUxMjA1M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jgc0s0qhiZPGFm8wqBe+rRYB4tffs8HROp2 RE2cQXEat00gW19QjsWKo25IvTXeALxq36ZSzEbO3lgDxtYDg3tmdy3JW+zIWsVF Jy+RBY9nVoqogyrcgJUypedght0tmGMu20zP5NV6E3GgonmubsPQ7vPKPGpzz/EG enpFW7DeelwJVZ996WvH48x/+bBMmjJwgXR5bnbMq1IN1VlmqGVjiwoJQj8SjfKY sdUobxOJ0AVhcEjro3TxUOL7qM7oAhfh9FYuOH0eqD+a+RXy88fCvnQbOg+aSnxg Hbe/g+r1aB45zl1smiDd7jD8d74jSF3YlnJW6U48P7p3VJ6kMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHSVFAsVZhJEh/v/BwCtUZghrJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvODVkZjM4OGEtYzhkYS0z ZTE5LWFmMmEtZjMyNmE5MThiM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINkl/0DDvntv7Fj6F3QTtrYM7Jp2cRmjPJZPw9gxZp9Lq4P0x1sU98h kt6m0ZCWiGauCTJ/sDOwJ7Qlf9YwJVxTelPGmDiWgVt212GBjJYulCHJpMtKSn8L UPu03qXnZNGUs22X/A9JYPi7eYJP8TWtk3SRZY0aSb4rgnu8Y2uKLj0cTNx9uddG BKqF4WyE8bYAWD1x8H6fHjp976nPgiMCDD1jhLrYqXYnqk5Yz+7C2U7kzsRVMD8M 062E+VVFKISVGa+nP4AFHkNuNw5OmueGz+L4vtAkPVERk211YobYCxXXeb+PkgI7 ureTiKuNrqbaIw/dijY0XYO8lBf4bPw= -----END CERTIFICATE-----Generated at Sun Jun 29 19:27:19 2025 by rpki-client