$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa File: b1c86e78-67c7-333a-928e-a0cff3179bb3.roa (raw, json) Hash identifier: Bh26iOAJ2Vx+Yt0Zy3zZcSEnT2fN8L6AU1W7/qiJL7Q= Subject key identifier: 08:CC:68:F6:18:CB:D8:6A:C0:20:B5:5F:59:A8:BE:2B:41:E9:B5:38 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE5C671F6B203C069F845E8C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 13576 IP address blocks: 208.53.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:71:f6:b2:03:c0:69:f8:45:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=625b706b-da39-4184-aed6-b6383ad7df54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:96:8f:e4:22:38:ba:79:86:6c:be:34:69: 1c:57:fe:dc:c2:b2:87:75:05:77:82:28:c2:14:3e: 99:6d:ad:9f:3b:9f:a0:3e:12:81:e1:0c:e8:a6:58: ab:c5:1d:0d:b2:30:71:53:89:5c:9c:84:a6:b9:ff: 66:1b:28:0d:d8:4b:f9:ee:77:cc:be:aa:71:f9:1d: 44:29:ca:04:bc:76:32:07:41:3c:b5:8b:6e:13:c9: ce:0c:f1:68:7a:75:67:18:8a:e3:3b:44:39:0a:03: b4:c4:9a:08:4f:94:ca:30:34:c4:ca:c6:05:33:40: c1:6b:e6:1c:95:6f:84:3f:4e:b1:8d:0e:4c:9a:e5: 46:e5:5e:9b:57:94:b6:a0:d6:c1:c9:40:82:4d:4c: b1:78:74:40:af:83:ac:95:c7:d4:8d:45:d3:fe:d1: 6e:5a:98:fd:cd:d0:24:26:d3:4d:4e:b9:c7:78:d2: 1d:cf:77:78:04:98:1c:44:ad:6c:4e:9f:46:8e:ab: a8:12:85:5f:76:36:8f:53:67:2c:e6:5c:48:91:1a: 1a:9c:43:57:c2:12:f6:8d:dc:d1:89:3c:81:f9:3d: c7:6f:3f:dc:18:94:20:10:67:9c:77:75:83:48:87: 95:c6:cb:9c:43:25:67:1c:3a:88:84:0f:f5:2d:38: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CC:68:F6:18:CB:D8:6A:C0:20:B5:5F:59:A8:BE:2B:41:E9:B5:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:00:b0:d5:46:de:b1:91:96:dc:34:c1:8d:59:14:f6:6f:c6: 6e:c3:c9:f5:96:13:33:99:dc:e5:ee:c7:c8:5d:74:8d:cc:0b: c3:a6:05:25:c0:70:8c:af:98:aa:29:a5:55:b3:47:67:1e:50: 7b:8e:2a:3e:18:28:2c:bd:80:8c:1a:3a:51:83:35:50:b5:02: fa:eb:cf:4d:0a:f1:12:50:85:0b:2d:41:8a:9c:d4:3d:55:9e: 09:e4:cd:18:27:e0:52:12:c4:a3:fa:f6:79:0c:c5:ce:08:e6: ee:ac:a0:40:09:1a:33:94:f0:fe:61:63:f1:4f:21:eb:8f:82: 9f:6f:11:71:1d:18:2f:04:ea:a3:fa:9d:27:61:35:b6:e5:1e: 24:bd:eb:8d:78:1b:e1:89:61:fa:41:9e:93:15:32:a9:b6:5f: c6:6a:3c:5b:e6:33:dd:7c:78:1b:39:cd:b4:2f:24:93:7e:29: 9d:73:9d:fa:50:e7:e3:19:e7:fc:66:b1:0b:8f:08:cc:3e:50: b9:f1:ec:6f:26:75:09:26:3d:8e:c4:7a:d5:9e:96:27:d7:26: ef:61:31:54:57:8c:8e:2d:43:42:04:75:ea:62:de:5a:a1:a9: d8:88:3c:d4:8f:2d:e6:1b:c4:c5:5f:26:b9:d8:df:1e:d7:b6: ab:4b:0f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnH2sgPAafhF6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk NjI1YjcwNmItZGEzOS00MTg0LWFlZDYtYjYzODNhZDdkZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8yWj+QiOLp5hmy+NGkcV/7cwrKHdQV3gijC FD6Zba2fO5+gPhKB4QzoplirxR0NsjBxU4lcnISmuf9mGygN2Ev57nfMvqpx+R1E KcoEvHYyB0E8tYtuE8nODPFoenVnGIrjO0Q5CgO0xJoIT5TKMDTEysYFM0DBa+Yc lW+EP06xjQ5MmuVG5V6bV5S2oNbByUCCTUyxeHRAr4OslcfUjUXT/tFuWpj9zdAk JtNNTrnHeNIdz3d4BJgcRK1sTp9GjquoEoVfdjaPU2cs5lxIkRoanENXwhL2jdzR iTyB+T3Hbz/cGJQgEGecd3WDSIeVxsucQyVnHDqIhA/1LTjdywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjMaPYYy9hqwCC1X1movitB6bU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjFjODZlNzgtNjdjNy0z MzNhLTkyOGUtYTBjZmYzMTc5YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcAsNVG3rGRltw0wY1ZFPZvxm7DyfWWEzOZ3OXux8hddI3MC8OmBSXA cIyvmKoppVWzR2ceUHuOKj4YKCy9gIwaOlGDNVC1Avrrz00K8RJQhQstQYqc1D1V ngnkzRgn4FISxKP69nkMxc4I5u6soEAJGjOU8P5hY/FPIeuPgp9vEXEdGC8E6qP6 nSdhNbblHiS96414G+GJYfpBnpMVMqm2X8ZqPFvmM918eBs5zbQvJJN+KZ1znfpQ 5+MZ5/xmsQuPCMw+ULnx7G8mdQkmPY7EetWelifXJu9hMVRXjI4tQ0IEdepi3lqh qdiIPNSPLeYbxMVfJrnY3x7XtqtLD+E= -----END CERTIFICATE-----Generated at Sun Aug 24 03:48:46 2025 by rpki-client