$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/dea56328-45cc-3bf6-a7c0-a7d4b1ceb156.roa File: dea56328-45cc-3bf6-a7c0-a7d4b1ceb156.roa (raw, json) Hash identifier: 3L27lrinkNoJpPJOHcm+v9Uqy27DVrNMjz/aergIapo= Subject key identifier: 87:96:83:C6:AD:ED:4F:D9:50:CF:84:B3:01:A4:40:67:06:E5:9B:15 Certificate issuer: /CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Certificate serial: 010D0C9F4328584ADA9BC59972F6663D5A6AA280 Authority key identifier: BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/dea56328-45cc-3bf6-a7c0-a7d4b1ceb156.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 1299 IP address blocks: 169.224.192.0/19 maxlen: 24 2607:cdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c5:99:72:f6:66:3d:5a:6a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=9dfad2df-9674-4727-8035-0b4b7b327fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:94:33:27:30:1b:75:fd:43:8b:8c:f9:01: 65:32:cb:b0:b3:dd:ab:84:33:10:2f:a0:e0:19:b0: 14:f3:f6:4b:01:64:c7:07:dc:4e:03:18:b9:36:38: 0d:58:ca:e7:71:1d:de:00:c9:0b:de:33:40:d2:19: 2d:d1:94:45:c8:08:98:88:ae:2b:6a:7f:95:59:6b: 9f:dc:f8:8a:7d:0c:6f:bc:f8:23:39:2d:45:8a:89: c6:7d:b1:e1:e5:d1:75:a7:d6:31:08:e9:06:87:c7: d4:c3:9d:35:8f:d1:f6:af:6e:e3:41:10:a8:dc:aa: 2e:3d:2c:a6:b1:cb:c0:21:47:fe:86:2c:03:36:0c: 16:65:f3:06:9f:db:8e:5f:21:a6:96:d4:57:55:61: 6d:d6:1a:76:d7:d6:e3:21:97:3f:cc:36:96:08:45: ee:6c:5a:70:55:85:09:4f:01:bb:6c:ae:48:34:3b: 51:53:84:5d:80:bb:ce:e3:43:39:1d:e4:c6:32:1c: 02:54:b8:a8:04:ce:5b:e0:e0:71:29:a5:ed:09:81: 6e:c7:4d:48:91:14:56:5a:98:f5:18:f7:dd:53:6a: f2:16:ee:8e:9b:e2:bc:ef:43:81:3e:5c:44:b7:a9: da:c9:b5:95:2a:2c:ea:f1:49:25:bf:e9:93:96:a3: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:96:83:C6:AD:ED:4F:D9:50:CF:84:B3:01:A4:40:67:06:E5:9B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/dea56328-45cc-3bf6-a7c0-a7d4b1ceb156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl X509v3 Authority Key Identifier: keyid:BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer sbgp-ipAddrBlock: critical IPv4: 169.224.192.0/19 IPv6: 2607:cdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4a:f1:00:6b:c8:83:63:2f:f9:2b:b8:1e:48:03:96:3f:32: d8:5c:82:28:9d:7d:b4:8b:fb:54:3b:c7:6e:46:30:e3:05:a7: 47:e9:bd:9e:88:7d:ca:9c:7f:d4:5d:51:cb:a1:72:50:7b:a6: b5:a8:03:d6:de:d4:f8:df:eb:6a:fb:0c:dc:bd:8f:92:5a:a4: 9f:7b:c4:80:d7:ee:a7:86:2f:0d:4f:81:19:5d:5f:00:77:c3: 71:25:ef:93:2d:65:f5:95:92:67:43:ef:32:07:7b:22:d8:59: 24:32:85:21:39:7a:cb:5c:5f:3e:a9:0a:f5:e0:78:11:da:be: 01:a9:bf:a6:7b:02:46:f8:db:f0:2b:3a:fd:b5:2b:6a:a3:9e: b8:ee:3a:84:f8:0e:0d:10:4c:08:bb:dc:d2:ce:82:f1:f2:ce: 06:33:0d:6f:83:78:27:f2:a4:85:a3:6e:d8:87:0c:ec:4a:61: e6:c1:16:ef:95:a0:f0:40:be:39:90:a5:59:8e:b2:89:8d:1b: 9e:75:97:bc:67:c7:83:e2:01:31:8d:2b:0d:c2:57:97:34:48: 7c:d7:a0:63:ca:cb:31:83:a7:3d:6b:a0:ec:ab:8e:63:b8:77: d1:7f:d6:73:07:4d:d9:b7:d2:af:88:30:71:11:cd:f0:44:12: fa:19:94:78 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEram8WZcvZmPVpqooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIxNWE5ZTctOGM2Ni00ZTgxLWEwNzctMmE3M2M5MDNh MGFjMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk OWRmYWQyZGYtOTY3NC00NzI3LTgwMzUtMGI0YjdiMzI3ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY6UMycwG3X9Q4uM+QFlMsuws92rhDMQL6Dg GbAU8/ZLAWTHB9xOAxi5NjgNWMrncR3eAMkL3jNA0hkt0ZRFyAiYiK4ran+VWWuf 3PiKfQxvvPgjOS1FionGfbHh5dF1p9YxCOkGh8fUw501j9H2r27jQRCo3KouPSym scvAIUf+hiwDNgwWZfMGn9uOXyGmltRXVWFt1hp219bjIZc/zDaWCEXubFpwVYUJ TwG7bK5INDtRU4RdgLvO40M5HeTGMhwCVLioBM5b4OBxKaXtCYFux01IkRRWWpj1 GPfdU2ryFu6Om+K870OBPlxEt6naybWVKizq8Uklv+mTlqNo2wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFIeWg8at7U/ZUM+EswGkQGcG5ZsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1 YTllNy04YzY2LTRlODEtYTA3Ny0yYTczYzkwM2EwYWMvZGVhNTYzMjgtNDVjYy0z YmY2LWE3YzAtYTdkNGIxY2ViMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxNWE5ZTctOGM2Ni00ZTgxLWEw NzctMmE3M2M5MDNhMGFjL2UyMTVhOWU3LThjNjYtNGU4MS1hMDc3LTJhNzNjOTAz YTBhYy5jcmwwHwYDVR0jBBgwFoAUu8xuj3HuW3kcaBiFsT9kPwHRyCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1YTllNy04YzY2LTRlODEtYTA3Ny0yYTcz YzkwM2EwYWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFqeDAMA0E AgACMAcDBQAmB83AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKpK8QBryINjL/kruB5IA5Y/MthcgiidfbSL +1Q7x25GMOMFp0fpvZ6Ifcqcf9RdUcuhclB7prWoA9be1Pjf62r7DNy9j5JapJ97 xIDX7qeGLw1PgRldXwB3w3El75MtZfWVkmdD7zIHeyLYWSQyhSE5estcXz6pCvXg eBHavgGpv6Z7Akb42/ArOv21K2qjnrjuOoT4Dg0QTAi73NLOgvHyzgYzDW+DeCfy pIWjbtiHDOxKYebBFu+VoPBAvjmQpVmOsomNG551l7xnx4PiATGNKw3CV5c0SHzX oGPKyzGDpz1roOyrjmO4d9F/1nMHTdm30q+IMHERzfBEEvoZlHg= -----END CERTIFICATE-----Generated at Sun Aug 24 03:51:56 2025 by rpki-client