$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa File: cf9e080d-5220-3f48-8b51-39615620115f.roa (raw, json) Hash identifier: mUTaBjHX7q51Vbj5X/Hmf1uIYQF+1NM7gNvJ8AjlfFg= Subject key identifier: 33:9E:14:2E:45:39:1E:B8:77:BF:0F:4E:41:B4:54:2E:3F:6D:B0:D2 Certificate issuer: /CN=af93a26c-49ee-415a-bda7-07e781689339 Certificate serial: 010D0C9F4328584ACF70FF8AD66F82EFBC9D1A00 Authority key identifier: 72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 33191 IP address blocks: 208.103.161.0/24 maxlen: 24 2602:f79a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:ff:8a:d6:6f:82:ef:bc:9d:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af93a26c-49ee-415a-bda7-07e781689339 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=5914fe68-4132-49a5-89b3-c5335153fd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:82:26:f8:cd:8c:22:db:84:66:6a:b2:dd: e6:84:79:1e:d4:c5:77:df:9f:75:ea:87:1d:49:da: f6:37:fc:7a:da:76:35:8e:0e:79:4d:b1:95:f1:8f: 59:79:0b:1b:9a:76:4e:bf:77:eb:8f:59:bf:92:3d: fb:09:a7:28:22:14:69:64:31:aa:bd:86:e9:58:8f: 8a:03:3e:07:19:79:f9:d4:94:1b:97:25:41:a2:3b: af:66:54:06:af:28:d8:f7:07:78:01:f0:88:d3:86: a2:65:38:15:28:fd:4b:32:db:e3:7d:76:6b:7e:cb: 0e:c8:f6:80:5d:c4:d9:69:98:d2:97:7e:13:71:40: 8a:c7:29:75:99:39:07:d7:c1:b8:7b:1c:b7:77:d1: 8a:d2:b1:00:e4:6d:36:7e:22:e9:53:e6:e9:8f:25: 81:fe:d5:74:32:49:ec:2f:e3:ac:b9:f2:58:3a:5f: 32:dc:3e:88:9a:77:a4:0c:c6:ce:c4:e6:e4:9f:27: 7b:e0:83:34:f9:0b:9d:e0:ac:e9:38:fb:b6:dd:ac: e9:9a:0d:f2:c1:4b:ab:d4:44:fe:82:7a:94:cc:ab: 09:95:73:c0:8d:83:55:84:dd:21:8d:54:c2:ad:d8: af:8d:5b:81:53:f0:0b:b1:7e:22:e9:01:f8:77:23: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9E:14:2E:45:39:1E:B8:77:BF:0F:4E:41:B4:54:2E:3F:6D:B0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl X509v3 Authority Key Identifier: keyid:72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer sbgp-ipAddrBlock: critical IPv4: 208.103.161.0/24 IPv6: 2602:f79a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1a:53:50:78:f4:dc:9a:bd:4c:25:a5:cd:ae:11:1f:6f:70: 18:1f:67:3b:8a:ef:4d:da:d5:4f:42:76:7a:8f:50:2b:81:56: ed:2d:4f:ee:75:27:77:c3:4a:38:c3:40:dd:b1:e1:aa:dd:04: 38:c4:b6:7a:33:d9:a9:51:cd:7e:c7:c7:84:7c:da:a4:84:34: 4a:8e:df:98:87:4b:3b:7c:15:18:0e:89:7f:cf:5e:df:5f:5c: c7:68:da:f4:bc:a2:91:a2:5b:ed:ae:1b:58:45:95:a6:66:d6: 6a:5d:77:d8:10:15:db:f5:d2:50:d7:05:40:50:86:c9:11:8a: ce:74:c1:82:08:33:5e:c1:e9:61:7e:f8:46:f9:8f:36:c1:59: 56:00:35:47:78:49:ee:bc:4c:9f:97:86:72:9d:29:6c:69:6a: 6a:44:0b:1f:50:5e:05:86:77:1e:08:25:70:bc:84:7f:8a:f8: d5:d1:56:44:11:62:c3:c7:fe:cc:b0:cc:f9:ff:bf:8c:4d:e1: e2:7d:2c:08:ab:88:ed:29:b9:2e:0b:e2:94:9e:d9:f0:7f:82: 09:80:c8:1c:cf:f7:dc:7d:5f:49:59:72:36:8d:33:61:7c:1b: ab:1f:6c:b3:94:b0:a8:3a:5c:63:95:e5:c2:60:c5:bb:57:30: 1e:a9:b4:aa -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErPcP+K1m+C77ydGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY5M2EyNmMtNDllZS00MTVhLWJkYTctMDdlNzgxNjg5 MzM5MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NTkxNGZlNjgtNDEzMi00OWE1LTg5YjMtYzUzMzUxNTNmZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMiCJvjNjCLbhGZqst3mhHke1MV335916ocd Sdr2N/x62nY1jg55TbGV8Y9ZeQsbmnZOv3frj1m/kj37CacoIhRpZDGqvYbpWI+K Az4HGXn51JQblyVBojuvZlQGryjY9wd4AfCI04aiZTgVKP1LMtvjfXZrfssOyPaA XcTZaZjSl34TcUCKxyl1mTkH18G4exy3d9GK0rEA5G02fiLpU+bpjyWB/tV0Mkns L+OsufJYOl8y3D6ImnekDMbOxObknyd74IM0+Qud4KzpOPu23azpmg3ywUur1ET+ gnqUzKsJlXPAjYNVhN0hjVTCrdivjVuBU/ALsX4i6QH4dyNgrwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDOeFC5FOR64d78PTkG0VC4/bbDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZjkz YTI2Yy00OWVlLTQxNWEtYmRhNy0wN2U3ODE2ODkzMzkvY2Y5ZTA4MGQtNTIyMC0z ZjQ4LThiNTEtMzk2MTU2MjAxMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWY5M2EyNmMtNDllZS00MTVhLWJk YTctMDdlNzgxNjg5MzM5L2FmOTNhMjZjLTQ5ZWUtNDE1YS1iZGE3LTA3ZTc4MTY4 OTMzOS5jcmwwHwYDVR0jBBgwFoAUchiRnAE1sOqwtDdoL9a9M7GGnCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZjkzYTI2Yy00OWVlLTQxNWEtYmRhNy0wN2U3 ODE2ODkzMzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0GehMA8E AgACMAkDBwAmAveaAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcBpTUHj03Jq9TCWlza4RH29wGB9nO4rv TdrVT0J2eo9QK4FW7S1P7nUnd8NKOMNA3bHhqt0EOMS2ejPZqVHNfsfHhHzapIQ0 So7fmIdLO3wVGA6Jf89e319cx2ja9LyikaJb7a4bWEWVpmbWal132BAV2/XSUNcF QFCGyRGKznTBgggzXsHpYX74RvmPNsFZVgA1R3hJ7rxMn5eGcp0pbGlqakQLH1Be BYZ3HgglcLyEf4r41dFWRBFiw8f+zLDM+f+/jE3h4n0sCKuI7Sm5LgvilJ7Z8H+C CYDIHM/33H1fSVlyNo0zYXwbqx9ss5SwqDpcY5XlwmDFu1cwHqm0qg== -----END CERTIFICATE-----Generated at Sat Aug 23 20:52:10 2025 by rpki-client