$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa File: 716e143f-946d-3424-9321-a2ad6dc97697.roa (raw, json) Hash identifier: l9zJ5fHTU93/Mj/QDUktJFWf2bRQhmoWsqGn/yCbJGc= Subject key identifier: B6:12:3B:D0:49:AA:C8:36:14:2E:39:82:E4:2B:FB:DD:B3:14:01:37 Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F4328584ACE0B9CF1F1050A6F8AC78C40 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 33245 IP address blocks: 167.206.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9c:f1:f1:05:0a:6f:8a:c7:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=daf6cd31-d875-41c7-97c3-505619140a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:07:e8:38:26:5d:3d:2b:20:2c:89:c6:03: 1d:0a:86:af:c5:26:bf:9a:ed:48:58:72:3c:4f:bb: 6e:f5:c1:74:89:6d:ca:41:0d:fe:bd:42:ac:d0:54: bf:f4:d4:5d:78:1f:a5:a4:82:50:60:03:66:e5:46: 70:60:94:f1:7e:87:92:f6:eb:d4:0e:6c:c5:67:e2: c5:e7:b7:c7:77:66:87:49:d2:c2:4b:1f:e3:ba:53: d1:1c:33:eb:db:e1:04:45:db:ac:c4:01:33:31:e9: 39:b4:0c:5f:50:b7:b9:b9:c8:ad:31:dc:3b:f8:e5: 75:b9:6c:87:e9:54:ad:37:47:59:ed:b4:88:8c:cf: 3a:47:bb:20:57:77:68:09:88:d6:f9:56:ac:d8:bc: d8:7c:4a:5c:3f:cb:09:5c:26:71:ac:f1:8e:42:b7: e0:e5:7e:1b:a4:03:d9:2e:a4:2a:37:47:d9:d7:8c: 2b:83:1e:a2:b2:80:c2:49:27:cc:a1:74:05:be:92: d5:22:c3:52:ff:0d:3a:4e:65:73:fb:8b:fb:c7:c8: 5d:70:9b:26:31:d0:44:65:92:2d:3d:f4:04:e1:4b: 41:12:1f:5f:66:cf:a2:16:9c:08:2e:ae:82:e3:16: 50:4e:de:4b:9a:6d:65:14:d1:ae:2d:ad:81:ff:94: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:12:3B:D0:49:AA:C8:36:14:2E:39:82:E4:2B:FB:DD:B3:14:01:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:92:92:70:02:04:9a:d8:ed:f9:63:f2:c3:8d:45:95:76:bb: 8f:d0:77:70:27:16:98:59:65:bc:1c:34:23:c5:c3:dc:02:f5: 82:b9:a4:77:e7:1f:5b:98:f9:e4:08:61:7a:d3:0b:b4:68:c1: e0:28:5f:87:2c:48:0a:79:8a:1f:93:10:c9:67:7a:ac:8d:cd: be:d2:a3:55:23:04:e3:91:88:c1:1a:81:7c:ca:60:2f:3a:f1: 36:6b:31:2c:56:a1:40:75:ac:99:be:40:ed:3d:9f:2b:34:ad: 32:0f:9c:97:d5:43:8c:d7:bb:50:e2:a4:b0:dc:14:40:c5:4b: e3:77:53:b9:e7:12:2c:66:4b:0b:72:a9:7e:95:b3:d9:06:6f: 89:21:f7:3d:16:ca:af:d1:7a:51:a2:d4:c6:ec:e9:56:05:5c: 69:66:1b:d5:82:be:1b:ea:fe:2e:e2:e2:d8:f8:c8:8d:2f:38: 10:33:61:15:68:6e:79:01:2c:29:12:ac:14:cf:2c:1a:96:e2: d9:f2:cb:8a:2b:b3:48:04:01:b7:a4:5b:cf:df:cd:60:7d:56: 8d:cd:07:96:cf:4c:87:12:65:4b:7c:a7:9c:66:28:48:20:36: c6:54:87:8c:1b:13:26:77:fc:a2:72:b1:9a:84:bc:0a:0a:71: 9c:71:8b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5zx8QUKb4rHjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZGFmNmNkMzEtZDg3NS00MWM3LTk3YzMtNTA1NjE5MTQwYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR0H6DgmXT0rICyJxgMdCoavxSa/mu1IWHI8 T7tu9cF0iW3KQQ3+vUKs0FS/9NRdeB+lpIJQYANm5UZwYJTxfoeS9uvUDmzFZ+LF 57fHd2aHSdLCSx/julPRHDPr2+EERdusxAEzMek5tAxfULe5ucitMdw7+OV1uWyH 6VStN0dZ7bSIjM86R7sgV3doCYjW+Vas2LzYfEpcP8sJXCZxrPGOQrfg5X4bpAPZ LqQqN0fZ14wrgx6isoDCSSfMoXQFvpLVIsNS/w06TmVz+4v7x8hdcJsmMdBEZZIt PfQE4UtBEh9fZs+iFpwILq6C4xZQTt5Lmm1lFNGuLa2B/5TN/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYSO9BJqsg2FC45guQr+92zFAE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvNzE2ZTE0M2YtOTQ2ZC0z NDI0LTkzMjEtYTJhZDZkYzk3Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp85QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuSknACBJrY7flj8sONRZV2u4/Qd3AnFphZZbwcNCPFw9wC9YK5pHfn H1uY+eQIYXrTC7RoweAoX4csSAp5ih+TEMlneqyNzb7So1UjBOORiMEagXzKYC86 8TZrMSxWoUB1rJm+QO09nys0rTIPnJfVQ4zXu1DipLDcFEDFS+N3U7nnEixmSwty qX6Vs9kGb4kh9z0Wyq/RelGi1Mbs6VYFXGlmG9WCvhvq/i7i4tj4yI0vOBAzYRVo bnkBLCkSrBTPLBqW4tnyy4ors0gEAbekW8/fzWB9Vo3NB5bPTIcSZUt8p5xmKEgg NsZUh4wbEyZ3/KJysZqEvAoKcZxxi9o= -----END CERTIFICATE-----Generated at Sat Aug 23 22:04:25 2025 by rpki-client