$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa File: 08faf29f-43ea-3741-adc8-4b04d7d43597.roa (raw, json) Hash identifier: hho17MSUaOH3INiXXZ/qcCLhsS/8+H4b97CWdufiEzY= Subject key identifier: E3:C4:E9:F3:D4:ED:E3:81:1A:C2:F6:8E:33:A8:B4:20:DA:B6:CA:79 Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874 Certificate serial: 010D0C9F4328584AE4611B48BE0A5E8257C60C40 Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 204.76.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1b:48:be:0a:5e:82:57:c6:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=50512c22-ec5c-47af-b88b-61c502f44968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:dd:6b:93:0a:f0:64:6e:6c:6c:6c:1f:5a: 30:fc:24:7c:a8:1e:7a:ab:5b:33:57:b2:1d:ba:13: 70:2f:0f:7d:9a:ab:e0:1b:16:d2:5b:b6:69:28:e6: 36:8d:74:db:e7:e7:50:34:5a:78:28:5a:60:e9:cf: 95:09:e4:a0:0d:ac:f9:a0:72:6b:5a:bb:f2:a7:e4: 8f:c5:d3:a6:08:f5:52:6c:91:32:b4:b7:e1:b0:9d: 2f:ea:ed:08:bf:0b:34:23:81:47:68:2c:48:e5:f4: 0a:47:6a:30:72:40:77:01:10:b3:4a:2d:56:29:3e: 45:ba:d5:08:5d:4f:f7:43:31:0c:f0:ea:91:73:5a: 4c:52:ed:55:c0:c8:58:e6:2f:f3:a0:0f:a5:4c:42: a0:1b:38:f3:31:06:9e:5e:39:70:a2:b5:26:df:81: 03:4a:d5:15:9c:1d:1d:37:d5:99:f6:2a:7d:e0:48: c8:40:50:3a:fa:d6:d8:be:70:6f:5a:35:46:ee:19: 35:f0:7f:f7:46:46:29:d3:a3:b0:53:07:a0:03:46: f3:25:96:74:e4:dc:61:cb:7a:6f:cf:19:35:a6:4e: 63:18:4e:2f:c9:0a:12:f8:7e:df:df:9c:b3:df:4b: 24:84:aa:a6:f8:f0:e0:3c:45:b3:7c:ed:f1:5c:df: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C4:E9:F3:D4:ED:E3:81:1A:C2:F6:8E:33:A8:B4:20:DA:B6:CA:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/08faf29f-43ea-3741-adc8-4b04d7d43597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl X509v3 Authority Key Identifier: keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer sbgp-ipAddrBlock: critical IPv4: 204.76.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:48:cc:0f:ff:8a:b6:1d:39:ab:f9:c2:a9:7b:d0:7c:04:9f: 83:67:78:8c:a7:50:2b:ea:9f:6f:15:23:16:56:27:d7:1a:4e: f8:cb:e9:52:22:7b:1f:f3:cf:8c:ac:46:c8:8e:cc:51:e3:a6: a5:41:a2:66:1a:8c:a3:51:4f:f9:43:81:24:28:da:6c:1b:3f: 3d:b6:58:36:a7:29:5a:91:2c:a0:7e:c5:79:10:49:6e:82:1c: 4d:8c:cd:d7:17:a9:86:8a:12:1f:5b:5d:77:ec:5c:be:f4:57: 0a:f9:4c:a5:80:09:5c:33:6a:c4:7f:d0:11:b4:a7:f1:a4:03: 68:ce:83:5b:b6:89:f7:f1:42:74:f6:9a:fe:0f:0d:c3:99:ad: 77:2e:6e:4c:a8:63:2e:c8:48:bf:2f:db:32:10:42:56:ca:06: c6:3c:f1:e4:a1:ec:48:b8:d0:e0:cb:43:e8:4e:3b:91:88:fd: ff:1b:7f:de:c1:ab:81:75:1f:5e:b5:08:c6:7c:d8:2a:90:32: 14:df:8f:c0:14:8e:71:6b:3d:dd:84:39:85:98:31:8e:35:fe: f3:17:ff:22:3f:43:57:7c:0f:8c:81:41:a8:35:3d:e4:c9:76: 3c:68:08:27:58:71:10:08:60:80:df:14:aa:5e:2d:5e:5a:6f: 86:fe:a0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRtIvgpeglfGDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzZTE3NDQtNTE4Ni00ODlhLTliODYtY2IzMWNlZjcz ODc0MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NTA1MTJjMjItZWM1Yy00N2FmLWI4OGItNjFjNTAyZjQ0OTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo63da5MK8GRubGxsH1ow/CR8qB56q1szV7Id uhNwLw99mqvgGxbSW7ZpKOY2jXTb5+dQNFp4KFpg6c+VCeSgDaz5oHJrWrvyp+SP xdOmCPVSbJEytLfhsJ0v6u0Ivws0I4FHaCxI5fQKR2owckB3ARCzSi1WKT5FutUI XU/3QzEM8OqRc1pMUu1VwMhY5i/zoA+lTEKgGzjzMQaeXjlworUm34EDStUVnB0d N9WZ9ip94EjIQFA6+tbYvnBvWjVG7hk18H/3RkYp06OwUwegA0bzJZZ05Nxhy3pv zxk1pk5jGE4vyQoS+H7f35yz30skhKqm+PDgPEWzfO3xXN845QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPE6fPU7eOBGsL2jjOotCDatsp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNl MTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMxY2VmNzM4NzQvMDhmYWYyOWYtNDNlYS0z NzQxLWFkYzgtNGIwNGQ3ZDQzNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIzZTE3NDQtNTE4Ni00ODlhLTli ODYtY2IzMWNlZjczODc0L2JiM2UxNzQ0LTUxODYtNDg5YS05Yjg2LWNiMzFjZWY3 Mzg3NC5jcmwwHwYDVR0jBBgwFoAUbyzGqshcjILtCQXJ5a0Pmc4eB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNlMTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMx Y2VmNzM4NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5IzA//irYdOav5wql70HwEn4NneIynUCvqn28VIxZWJ9caTvjL6VIi ex/zz4ysRsiOzFHjpqVBomYajKNRT/lDgSQo2mwbPz22WDanKVqRLKB+xXkQSW6C HE2MzdcXqYaKEh9bXXfsXL70Vwr5TKWACVwzasR/0BG0p/GkA2jOg1u2iffxQnT2 mv4PDcOZrXcubkyoYy7ISL8v2zIQQlbKBsY88eSh7Ei40ODLQ+hOO5GI/f8bf97B q4F1H161CMZ82CqQMhTfj8AUjnFrPd2EOYWYMY41/vMX/yI/Q1d8D4yBQag1PeTJ djxoCCdYcRAIYIDfFKpeLV5ab4b+oF0= -----END CERTIFICATE-----Generated at Sat Aug 23 06:57:42 2025 by rpki-client