$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa File: 38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa (raw, json) Hash identifier: K63j+qGUdUkHGVbWkZndhiTgBq818AZXge1MsS3NrKw= Subject key identifier: 7D:03:44:5C:30:49:1D:21:1B:3B:E1:38:58:A2:F0:53:73:C9:60:CE Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584A3FAAD01CAB7217B66246EEE0 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 21782 IP address blocks: 67.209.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:d0:1c:ab:72:17:b6:62:46:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=5619bbe4-0f02-4e2c-8b16-dbe151386cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:99:91:f7:aa:eb:06:ee:60:4e:1b:e5:a6: 43:e8:e0:3d:41:ec:ff:4d:c8:bc:9c:e1:30:fa:07: 3e:ff:cb:65:25:5a:c8:7f:55:f7:b1:fe:77:81:72: 2d:c7:bd:6f:95:41:ed:ed:2a:ab:fc:68:ee:30:fd: 9d:ed:c3:87:ad:c9:75:cb:12:3c:be:56:92:d5:40: c9:64:5b:30:57:2c:51:d1:9e:e5:c0:2c:e8:92:f7: d0:de:5f:cc:94:6e:91:cc:c1:7a:b8:1a:23:db:0c: 58:6f:b5:ef:17:ba:92:8c:2b:9e:53:46:f4:97:ae: 2d:85:0a:8a:72:dd:34:5b:f6:ec:14:c5:f2:fb:84: 2e:e3:d5:3e:f5:80:f5:b2:f1:04:70:f2:b6:22:31: cf:f2:24:34:40:77:3b:f5:94:97:14:9c:71:74:c8: 46:8a:f1:8e:49:eb:fc:e5:68:a2:23:2d:d5:55:12: ec:55:19:25:97:65:d5:60:7f:37:8a:60:8d:55:ac: 95:f9:20:79:bd:13:b3:97:98:aa:39:f9:a2:0f:47: fe:3a:e9:d0:e2:36:9d:0e:91:93:bc:7e:54:a7:45: 66:ab:25:80:e6:5b:93:05:db:3a:92:72:ca:f1:4f: 3d:43:42:8d:1c:e0:6c:77:66:04:e8:21:18:da:e0: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:03:44:5C:30:49:1D:21:1B:3B:E1:38:58:A2:F0:53:73:C9:60:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 67.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:06:3d:4d:83:59:24:60:f5:7f:dd:8e:b0:d7:16:a8:b5:fb: 56:e0:c3:6f:79:82:9d:bb:a4:b0:e1:8f:bb:db:74:3d:59:3c: 35:a0:cf:51:f8:25:9b:a0:da:c5:1e:ff:1e:f9:87:ea:09:ff: 9c:97:4e:5a:2d:6b:54:10:10:7a:47:18:eb:93:10:0c:85:58: e0:d8:da:0d:5a:27:3d:83:c3:e1:10:12:a2:1c:02:9f:69:66: bd:89:83:e7:cf:dc:57:8b:43:67:89:26:b2:9c:c4:19:f8:b7: 81:fe:11:26:d9:aa:b5:d5:f7:de:2f:5a:2c:40:64:fa:40:09: ab:f7:20:ed:e2:c9:34:90:6d:9b:84:de:19:0a:87:83:e6:51: f2:f6:32:f6:1f:0d:cd:9a:3f:59:90:4b:db:e7:34:b2:30:dc: 73:6a:1f:ec:64:57:f4:61:36:86:6d:ef:00:8c:61:fa:20:81: 49:cb:a0:fa:16:b3:a6:97:18:f6:ce:e8:19:33:2b:69:48:20: 56:31:32:ac:66:e7:82:ac:6c:d1:8c:7e:0f:da:61:7b:92:ed: f7:05:72:dd:d1:0c:4f:60:36:00:aa:ff:af:b5:6b:ac:fe:60: 15:d2:cb:45:03:ad:e4:44:d3:59:24:d1:bf:55:78:85:65:23: d1:4e:19:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtAcq3IXtmJG7uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk NTYxOWJiZTQtMGYwMi00ZTJjLThiMTYtZGJlMTUxMzg2Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4OZkfeq6wbuYE4b5aZD6OA9Qez/Tci8nOEw +gc+/8tlJVrIf1X3sf53gXItx71vlUHt7Sqr/GjuMP2d7cOHrcl1yxI8vlaS1UDJ ZFswVyxR0Z7lwCzokvfQ3l/MlG6RzMF6uBoj2wxYb7XvF7qSjCueU0b0l64thQqK ct00W/bsFMXy+4Qu49U+9YD1svEEcPK2IjHP8iQ0QHc79ZSXFJxxdMhGivGOSev8 5WiiIy3VVRLsVRkll2XVYH83imCNVayV+SB5vROzl5iqOfmiD0f+OunQ4jadDpGT vH5Up0VmqyWA5luTBds6knLK8U89Q0KNHOBsd2YE6CEY2uA80wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0DRFwwSR0hGzvhOFii8FNzyWDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMzgwMzRmMzgtZWU1MS0z OWFlLThiN2ItOWM5YWM5NGQzNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ9HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYGPU2DWSRg9X/djrDXFqi1+1bgw295gp27pLDhj7vbdD1ZPDWgz1H4 JZug2sUe/x75h+oJ/5yXTlota1QQEHpHGOuTEAyFWODY2g1aJz2Dw+EQEqIcAp9p Zr2Jg+fP3FeLQ2eJJrKcxBn4t4H+ESbZqrXV994vWixAZPpACav3IO3iyTSQbZuE 3hkKh4PmUfL2MvYfDc2aP1mQS9vnNLIw3HNqH+xkV/RhNoZt7wCMYfoggUnLoPoW s6aXGPbO6BkzK2lIIFYxMqxm54KsbNGMfg/aYXuS7fcFct3RDE9gNgCq/6+1a6z+ YBXSy0UDreRE01kk0b9VeIVlI9FOGSE= -----END CERTIFICATE-----Generated at Mon Jun 30 14:43:47 2025 by rpki-client