$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa File: 1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa (raw, json) Hash identifier: V699BvAAsvoI/bpv/cfY27tTPnn+0SE++uYNXFFK5jo= Subject key identifier: 90:38:F4:50:B3:44:CD:90:FF:2E:2C:9E:B9:BF:83:89:0B:D9:BD:92 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584AD3A0FBF6BF47CF4344D304D8 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 32181 IP address blocks: 69.39.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fb:f6:bf:47:cf:43:44:d3:04:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=3c322890-df31-4597-ba60-36bf0f5df276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:b8:eb:12:57:3a:03:09:28:a2:3a:dd:d8: 49:2f:93:f1:63:eb:59:93:68:74:88:71:c2:42:4f: c4:b1:71:ed:3f:d8:41:31:cc:90:8d:4f:82:08:81: 91:c6:ef:71:7b:3d:0c:74:b1:cf:f3:9a:26:63:f7: d8:af:01:ec:c7:e0:41:43:80:0a:fa:74:90:2d:50: 9d:91:83:a7:e3:36:33:1e:5e:5a:d4:d1:e8:3a:ec: 84:3f:8a:44:ba:44:97:5c:f7:a8:47:36:81:fe:89: 9a:ef:8b:10:8b:17:3a:6f:29:d4:5c:4a:49:ff:b4: 54:75:fe:90:61:ea:f4:fd:b8:95:6a:e4:ae:93:32: 02:db:02:ca:c7:72:14:9d:66:6d:bf:0a:8b:9e:be: 00:2a:86:a5:63:af:27:0c:1c:35:7c:58:22:e0:31: a6:9d:55:48:dc:e5:a5:b5:5f:22:38:1f:8e:ea:ac: e0:a5:da:6a:b2:bc:9e:39:6d:ad:4d:39:fd:e1:57: 5b:c9:83:7b:fa:dd:df:f4:79:73:59:25:a3:3f:84: 87:d1:4a:a4:74:ea:89:a3:7f:bc:4c:ca:e6:b3:bc: c6:0d:fd:70:14:fb:c1:c8:42:54:00:59:b3:36:86: 18:55:7f:31:e1:d7:3a:76:c8:d1:b6:3f:f1:8c:38: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:38:F4:50:B3:44:CD:90:FF:2E:2C:9E:B9:BF:83:89:0B:D9:BD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 69.39.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:db:be:9e:65:0e:e9:4b:c9:a4:b7:eb:64:66:c2:8b:ff:73: 52:a5:7e:84:8d:c3:10:03:ec:53:91:64:2d:dd:04:61:74:46: cf:bc:7b:9b:54:c4:87:7b:4c:24:94:bd:27:f2:f5:c8:25:98: dc:96:20:dd:98:d5:4b:c9:6e:fa:20:c8:c0:6f:1f:50:42:80: 85:ec:65:b6:12:ee:08:ef:f9:a8:e7:32:4b:61:aa:bf:83:d8: 88:38:d8:6f:6c:a6:e0:d3:37:e7:ae:51:a0:08:f7:f5:e0:5b: ef:15:3c:bf:00:75:e2:67:1a:48:e2:e3:fa:46:80:29:26:56: 80:af:af:00:d3:f1:11:97:0f:98:c4:6b:dc:39:5e:5d:2f:e3: 1b:c2:c2:e5:30:b4:3b:69:84:56:de:cd:87:78:30:0d:cf:ca: a2:47:ff:42:0e:21:8e:38:db:b9:05:26:65:59:f7:13:72:1d: e7:1e:db:ad:2f:f0:c3:74:d7:64:5d:57:0b:5f:12:be:e6:c3: e4:1c:bf:fa:8a:c4:e5:7e:a4:da:c3:63:c1:f6:9d:01:d8:6c: 12:99:9c:ef:84:5d:fa:7e:49:32:26:b4:4f:50:a9:48:57:bc: b1:d5:df:b7:c2:07:d1:c3:8d:8e:90:28:c4:15:34:63:d9:43: b3:43:e1:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPv2v0fPQ0TTBNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk M2MzMjI4OTAtZGYzMS00NTk3LWJhNjAtMzZiZjBmNWRmMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5y46xJXOgMJKKI63dhJL5PxY+tZk2h0iHHC Qk/EsXHtP9hBMcyQjU+CCIGRxu9xez0MdLHP85omY/fYrwHsx+BBQ4AK+nSQLVCd kYOn4zYzHl5a1NHoOuyEP4pEukSXXPeoRzaB/oma74sQixc6bynUXEpJ/7RUdf6Q Yer0/biVauSukzIC2wLKx3IUnWZtvwqLnr4AKoalY68nDBw1fFgi4DGmnVVI3OWl tV8iOB+O6qzgpdpqsryeOW2tTTn94VdbyYN7+t3f9HlzWSWjP4SH0UqkdOqJo3+8 TMrms7zGDf1wFPvByEJUAFmzNoYYVX8x4dc6dsjRtj/xjDiIaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA49FCzRM2Q/y4snrm/g4kL2b2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMWZjYWFlMmYtNTZjYS0z MWEyLWIyYjUtNGU2M2RhZWFhYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTbvp5lDulLyaS362Rmwov/c1KlfoSNwxAD7FORZC3dBGF0Rs+8e5tU xId7TCSUvSfy9cglmNyWIN2Y1UvJbvogyMBvH1BCgIXsZbYS7gjv+ajnMkthqr+D 2Ig42G9spuDTN+euUaAI9/XgW+8VPL8AdeJnGkji4/pGgCkmVoCvrwDT8RGXD5jE a9w5Xl0v4xvCwuUwtDtphFbezYd4MA3PyqJH/0IOIY4427kFJmVZ9xNyHece260v 8MN012RdVwtfEr7mw+Qcv/qKxOV+pNrDY8H2nQHYbBKZnO+EXfp+STImtE9QqUhX vLHV37fCB9HDjY6QKMQVNGPZQ7ND4X0= -----END CERTIFICATE-----Generated at Sun Aug 24 01:14:18 2025 by rpki-client