$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/81ff24c6-d5a8-36f9-a554-7093d542f04e.roa File: 81ff24c6-d5a8-36f9-a554-7093d542f04e.roa (raw, json) Hash identifier: EjDxQV3pFFPjlpECulfm5iyCRSgvJi55NvcmqSwdYx4= Subject key identifier: CA:DA:BA:74:D0:C4:5B:54:BC:F6:91:A3:02:A1:E6:60:0E:D4:9C:05 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE4611D512439C0C831359740 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/81ff24c6-d5a8-36f9-a554-7093d542f04e.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 399439 IP address blocks: 208.53.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1d:51:24:39:c0:c8:31:35:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=d810fac7-b78a-41a4-8384-ca2ddb5ce9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:d6:52:28:95:cf:d7:f9:5a:22:69:98:4c: 68:3b:34:fb:d3:9b:da:8d:fe:8f:49:78:ac:06:0e: bb:d1:71:d9:af:61:d1:4d:f4:2f:f2:b9:fd:0b:74: d0:89:21:71:d9:45:f8:52:c3:8d:a3:b0:d7:a9:3f: 84:76:4c:6a:05:f3:36:f2:e8:5f:06:e7:d5:3b:4b: 74:62:ca:b1:29:b5:31:86:53:88:23:5c:36:36:7d: d1:0c:d1:74:e4:97:c3:45:29:f7:b9:43:6e:ed:f7: 67:91:76:bf:6f:3c:cd:56:d5:04:ad:b3:cd:bc:9b: 11:e1:2e:06:5d:49:2e:98:b4:ea:53:1a:ea:7d:a8: 72:66:70:9d:65:73:3b:4f:1a:4a:d2:9f:06:6a:7e: 3b:8e:28:10:12:fd:f6:4b:f9:4b:7e:b6:e7:b2:86: a1:43:5e:b0:18:16:e8:84:f6:3f:60:5f:34:37:01: 2a:84:b7:7c:07:bb:13:ae:c0:20:ae:f6:2e:df:f1: e8:e6:7f:cb:c7:8f:c2:69:34:e4:bb:8f:f0:c8:b0: 11:58:81:52:bc:ca:c4:7a:ba:0d:ca:39:ba:1f:d8: 40:b9:74:9b:e8:ad:c4:91:97:12:ac:9d:c1:e3:17: e6:84:1d:7c:8d:0d:f0:26:69:e4:a9:93:3e:ee:6d: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:BA:74:D0:C4:5B:54:BC:F6:91:A3:02:A1:E6:60:0E:D4:9C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/81ff24c6-d5a8-36f9-a554-7093d542f04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:59:2f:de:66:24:ff:ef:1e:04:4d:a4:e8:11:e4:51:25:08: 74:80:27:5d:e3:85:c7:e4:24:cc:9b:a5:a5:52:e9:23:67:3e: a1:40:48:6a:86:2c:c1:01:d2:8d:40:ed:49:c4:36:43:20:5e: 51:96:41:ac:93:68:13:8c:ad:0b:3f:0a:fa:24:e4:44:f8:27: 3b:64:df:cd:39:97:2d:e6:61:9b:05:69:eb:be:10:a8:c8:6f: e0:85:aa:8f:20:d8:73:9f:c0:4e:76:92:aa:f4:02:d0:8a:3c: 12:36:62:01:55:f7:6e:4d:db:2c:fa:d3:2f:0e:85:e7:f0:6b: ae:8e:dc:24:54:98:c3:2a:79:98:ab:93:cd:d0:cb:55:cc:7d: 8c:eb:f0:2b:89:d8:be:7c:4e:10:5a:f5:d5:ec:84:53:bb:85: 8d:ab:0a:01:8b:8f:b2:81:41:ec:bf:d7:73:77:e2:c1:ca:16: fa:15:06:af:61:f1:b2:e5:91:be:4d:8a:cf:a7:cf:61:a3:6b: 3d:db:45:60:51:c6:22:c0:50:8f:cf:11:f0:34:d8:2f:f8:b3: 16:a2:13:04:3f:79:40:47:83:86:31:b1:1d:6d:ba:67:b4:30: 0d:59:48:7a:b1:29:36:90:07:60:ef:fb:4b:a8:f6:17:55:10: 77:fc:5f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYR1RJDnAyDE1l0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDgxMGZhYzctYjc4YS00MWE0LTgzODQtY2EyZGRiNWNlOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7nWUiiVz9f5WiJpmExoOzT705vajf6PSXis Bg670XHZr2HRTfQv8rn9C3TQiSFx2UX4UsONo7DXqT+EdkxqBfM28uhfBufVO0t0 YsqxKbUxhlOII1w2Nn3RDNF05JfDRSn3uUNu7fdnkXa/bzzNVtUErbPNvJsR4S4G XUkumLTqUxrqfahyZnCdZXM7TxpK0p8Gan47jigQEv32S/lLfrbnsoahQ16wGBbo hPY/YF80NwEqhLd8B7sTrsAgrvYu3/Ho5n/Lx4/CaTTku4/wyLARWIFSvMrEeroN yjm6H9hAuXSb6K3EkZcSrJ3B4xfmhB18jQ3wJmnkqZM+7m2TYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMraunTQxFtUvPaRowKh5mAO1JwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODFmZjI0YzYtZDVhOC0z NmY5LWE1NTQtNzA5M2Q1NDJmMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM9ZL95mJP/vHgRNpOgR5FElCHSAJ13jhcfkJMybpaVS6SNnPqFASGqG LMEB0o1A7UnENkMgXlGWQayTaBOMrQs/Cvok5ET4Jztk3805ly3mYZsFaeu+EKjI b+CFqo8g2HOfwE52kqr0AtCKPBI2YgFV925N2yz60y8Ohefwa66O3CRUmMMqeZir k83Qy1XMfYzr8CuJ2L58ThBa9dXshFO7hY2rCgGLj7KBQey/13N34sHKFvoVBq9h 8bLlkb5Nis+nz2Gjaz3bRWBRxiLAUI/PEfA02C/4sxaiEwQ/eUBHg4YxsR1tume0 MA1ZSHqxKTaQB2Dv+0uo9hdVEHf8X3c= -----END CERTIFICATE-----Generated at Sun Aug 24 08:56:59 2025 by rpki-client