$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa File: 59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa (raw, json) Hash identifier: hmBK5513uNTmwCaUjBHcp/VgX3nK6tcNv88OmLDHmkU= Subject key identifier: 09:09:EB:9A:BD:35:05:3E:A1:1C:77:BC:EE:F6:91:5F:F7:5D:AC:A0 Certificate issuer: /CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4 Certificate serial: 010D0C9F4328584A5FC5CCF9327AF583EDC8AB60 Authority key identifier: FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 395176 IP address blocks: 208.92.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:cc:f9:32:7a:f5:83:ed:c8:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=6678d31c-ed33-4b43-92a8-a18dd9150165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:90:01:62:e9:12:2c:a6:3c:f5:b3:a4:e3: 94:a8:b0:55:dc:73:6a:79:f1:e4:29:95:1f:01:b3: 45:67:56:ee:47:7c:66:eb:cf:fd:3a:d8:ae:44:aa: 36:59:33:dc:8e:1e:db:25:ea:56:97:d3:00:d8:d3: cd:c8:07:7d:bd:01:16:02:e9:af:22:95:10:72:4a: 75:ff:0c:bd:7b:2f:9b:63:49:89:99:45:57:79:5b: 58:57:6a:4a:87:b0:51:12:e1:a7:02:fc:b3:f6:30: b4:51:79:b3:27:30:de:59:40:37:6a:40:37:64:f5: 3c:86:ee:50:e6:62:36:b8:ab:d6:ea:99:0b:d1:02: 0a:db:60:60:c8:15:ab:c5:4f:67:10:e1:cd:e5:57: a7:ec:c3:f7:d8:1f:cc:b4:03:cb:ce:ac:ff:18:50: 0e:70:84:97:e1:56:78:6c:66:95:a6:a2:81:c2:8f: c9:f3:29:89:9c:31:e3:18:ec:2d:2d:14:b2:24:97: 81:14:3a:72:94:9c:d4:38:4c:a0:77:e1:6b:cc:69: 3a:8e:42:31:23:fa:ac:86:c5:5a:84:59:67:57:67: 25:89:e4:c4:28:aa:49:9c:a9:dc:06:77:7e:6b:27: 14:24:23:8a:b1:89:df:e3:b6:04:a1:5f:47:65:31: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:09:EB:9A:BD:35:05:3E:A1:1C:77:BC:EE:F6:91:5F:F7:5D:AC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl X509v3 Authority Key Identifier: keyid:FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer sbgp-ipAddrBlock: critical IPv4: 208.92.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:54:67:6c:ba:0f:b0:5a:e8:50:30:ee:2e:f4:ec:9e:ac:89: 49:06:3e:a4:e3:07:c7:24:94:8c:a4:70:89:7d:82:d6:1d:c9: 26:30:e7:6b:2e:54:26:ef:bf:92:19:e8:85:d3:0f:65:1f:94: a0:c7:ef:70:d2:f7:1d:ed:c4:4f:35:48:f7:81:22:fc:5a:2b: 90:f8:3f:7d:41:f9:b8:35:4e:07:79:40:f6:0f:ca:1c:1b:75: b2:f7:23:87:ea:b5:c4:29:6a:46:79:6b:38:90:23:b7:51:16: d7:5f:ce:02:50:77:8b:b9:bf:57:e0:75:95:eb:be:68:13:8c: 82:08:09:d9:87:28:71:7a:34:04:01:c5:00:e2:de:d0:32:3b: 84:be:12:87:e9:bc:40:c2:84:fa:68:2e:e7:52:38:f6:eb:5c: 01:ce:21:36:2e:00:76:74:64:a1:45:7c:3a:74:88:97:8e:eb: 92:87:6a:8b:85:08:c2:bb:2b:e5:cf:e5:9f:67:36:68:00:5c: db:29:59:44:d6:1b:1a:00:44:ab:a1:80:41:d7:29:86:55:7f: 09:6a:5d:b3:88:54:df:82:7f:19:84:37:6b:7a:7e:91:fa:da: 70:02:14:c8:d2:28:0b:2c:43:e6:8f:35:12:81:df:22:2f:fe: 06:fa:21:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxcz5Mnr1g+3Iq2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFjMGI5ZmQtZmM0Yy00N2MyLWJhOTYtMGNlMTE4NjIx ZGU0MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NjY3OGQzMWMtZWQzMy00YjQzLTkyYTgtYTE4ZGQ5MTUwMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogCQAWLpEiymPPWzpOOUqLBV3HNqefHkKZUf AbNFZ1buR3xm68/9OtiuRKo2WTPcjh7bJepWl9MA2NPNyAd9vQEWAumvIpUQckp1 /wy9ey+bY0mJmUVXeVtYV2pKh7BREuGnAvyz9jC0UXmzJzDeWUA3akA3ZPU8hu5Q 5mI2uKvW6pkL0QIK22BgyBWrxU9nEOHN5Ven7MP32B/MtAPLzqz/GFAOcISX4VZ4 bGaVpqKBwo/J8ymJnDHjGOwtLRSyJJeBFDpylJzUOEygd+FrzGk6jkIxI/qshsVa hFlnV2clieTEKKpJnKncBnd+aycUJCOKsYnf47YEoV9HZTH1jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkJ65q9NQU+oRx3vO72kV/3XaygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YWMw YjlmZC1mYzRjLTQ3YzItYmE5Ni0wY2UxMTg2MjFkZTQvNTlhMjFmN2EtN2U2Yy0z YTA0LWFkMDItZmUxYjZiYmMzODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGFjMGI5ZmQtZmM0Yy00N2MyLWJh OTYtMGNlMTE4NjIxZGU0LzRhYzBiOWZkLWZjNGMtNDdjMi1iYTk2LTBjZTExODYy MWRlNC5jcmwwHwYDVR0jBBgwFoAU+oWOZ6efext89R967aL40iLEJR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YWMwYjlmZC1mYzRjLTQ3YzItYmE5Ni0wY2Ux MTg2MjFkZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVUZ2y6D7Ba6FAw7i707J6siUkGPqTjB8cklIykcIl9gtYdySYw52su VCbvv5IZ6IXTD2UflKDH73DS9x3txE81SPeBIvxaK5D4P31B+bg1Tgd5QPYPyhwb dbL3I4fqtcQpakZ5aziQI7dRFtdfzgJQd4u5v1fgdZXrvmgTjIIICdmHKHF6NAQB xQDi3tAyO4S+EofpvEDChPpoLudSOPbrXAHOITYuAHZ0ZKFFfDp0iJeO65KHaouF CMK7K+XP5Z9nNmgAXNspWUTWGxoARKuhgEHXKYZVfwlqXbOIVN+CfxmEN2t6fpH6 2nACFMjSKAssQ+aPNRKB3yIv/gb6IVo= -----END CERTIFICATE-----Generated at Thu Jul 3 19:46:37 2025 by rpki-client