$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2766bb5-22c2-31db-8030-1ac9aa235b14.roa File: b2766bb5-22c2-31db-8030-1ac9aa235b14.roa (raw, json) Hash identifier: BFlFBeDzL05XYh1Y8ZJchT+7MWHl/biJ+H6UBrHnFPE= Subject key identifier: 6E:63:DF:D9:51:40:2D:B3:5E:7C:77:19:FD:E1:0D:A5:BA:50:0F:20 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE5C6719A0331929A8CEA0C00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2766bb5-22c2-31db-8030-1ac9aa235b14.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 393417 IP address blocks: 208.53.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:71:9a:03:31:92:9a:8c:ea:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=aeba4bf9-3a29-4f8e-9db1-66ef31a365ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:4e:db:d1:57:8d:32:0a:7c:01:dd:d1:05: 51:a2:5e:85:1d:f9:df:f3:26:e9:b2:20:52:c3:2f: df:c3:f6:ae:13:50:3f:14:08:8b:72:ba:4d:a1:d5: aa:c5:98:c1:99:72:71:2d:50:d7:37:4e:37:9b:ef: 17:91:7f:a4:43:6a:6a:83:84:41:30:90:a8:49:e5: b7:5d:c2:47:79:38:ae:72:2d:4c:58:b1:58:65:db: 96:69:8b:d3:4e:54:ce:ec:b6:6f:68:27:0c:01:b9: 2c:7b:17:79:f8:72:9c:fd:dc:8a:c8:02:90:d0:75: 64:b9:6f:22:45:76:08:91:80:83:66:61:77:67:44: e7:9a:91:33:62:51:97:ec:d1:4b:dc:25:ab:f6:b4: 49:66:66:30:09:c2:e3:0a:b3:e0:8f:b2:16:b8:98: c7:33:30:03:58:f0:a9:3c:82:8b:86:01:fe:ad:22: 78:1d:e8:14:14:de:4b:47:c0:83:4e:98:25:92:b7: 9c:10:09:6d:51:1f:b2:7d:7c:cf:61:57:46:f3:49: 58:67:b8:01:f4:06:ba:9c:07:31:cb:aa:6f:9e:1b: b0:1d:4c:81:27:ae:e8:59:53:5a:20:e8:dd:46:7d: 04:c1:3d:8c:a1:82:30:b6:63:27:b1:01:c8:1b:8a: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:63:DF:D9:51:40:2D:B3:5E:7C:77:19:FD:E1:0D:A5:BA:50:0F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b2766bb5-22c2-31db-8030-1ac9aa235b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:af:33:04:08:1b:d1:cf:1d:3e:7d:04:3b:c8:9f:18:b2:c6: 0a:4b:d3:4f:64:e1:20:39:d3:84:a7:d8:84:b0:38:6a:4d:47: 1b:50:79:b2:e9:e3:e4:e3:4c:7c:73:fc:f8:05:15:97:17:e1: a6:1f:8b:4c:11:9a:47:fb:31:0f:6e:97:be:5a:bf:71:01:d1: ab:2c:c9:0a:45:b8:d5:4f:4d:47:5a:f3:ab:14:e0:48:69:02: 50:81:df:6b:4a:17:ac:6a:ac:dc:e5:0f:d7:8c:58:43:55:cb: 64:d6:58:8f:66:64:ec:ba:61:13:df:0a:ab:14:46:bb:8b:f6: ea:2e:19:55:15:39:1b:7e:59:73:fc:c1:64:0f:21:d9:5e:f5: 77:a3:4f:0f:4c:17:19:d4:4a:26:7b:a2:89:c8:fd:17:f5:39: 8c:b9:17:ae:9f:75:bf:83:01:2a:89:00:11:9b:ec:31:88:43: 9a:32:44:97:f0:90:5f:f1:4a:0d:86:43:ff:f9:18:b9:97:d0: 52:c6:51:7e:aa:32:bf:b6:d7:48:98:6d:bd:46:e5:1e:83:42: 47:9e:e5:7a:72:08:8d:73:d6:ab:3b:89:cf:ae:1e:b7:4b:56: 64:fe:c8:fe:bf:42:b2:f6:a0:de:ee:61:3d:03:cc:07:3b:9a: 96:08:84:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnGaAzGSmozqDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk YWViYTRiZjktM2EyOS00ZjhlLTlkYjEtNjZlZjMxYTM2NWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNdO29FXjTIKfAHd0QVRol6FHfnf8ybpsiBS wy/fw/auE1A/FAiLcrpNodWqxZjBmXJxLVDXN043m+8XkX+kQ2pqg4RBMJCoSeW3 XcJHeTiuci1MWLFYZduWaYvTTlTO7LZvaCcMAbksexd5+HKc/dyKyAKQ0HVkuW8i RXYIkYCDZmF3Z0TnmpEzYlGX7NFL3CWr9rRJZmYwCcLjCrPgj7IWuJjHMzADWPCp PIKLhgH+rSJ4HegUFN5LR8CDTpglkrecEAltUR+yfXzPYVdG80lYZ7gB9Aa6nAcx y6pvnhuwHUyBJ67oWVNaIOjdRn0EwT2MoYIwtmMnsQHIG4pz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5j39lRQC2zXnx3Gf3hDaW6UA8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjI3NjZiYjUtMjJjMi0z MWRiLTgwMzAtMWFjOWFhMjM1YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+vMwQIG9HPHT59BDvInxiyxgpL009k4SA504Sn2ISwOGpNRxtQebLp 4+TjTHxz/PgFFZcX4aYfi0wRmkf7MQ9ul75av3EB0assyQpFuNVPTUda86sU4Ehp AlCB32tKF6xqrNzlD9eMWENVy2TWWI9mZOy6YRPfCqsURruL9uouGVUVORt+WXP8 wWQPIdle9XejTw9MFxnUSiZ7oonI/Rf1OYy5F66fdb+DASqJABGb7DGIQ5oyRJfw kF/xSg2GQ//5GLmX0FLGUX6qMr+210iYbb1G5R6DQkee5XpyCI1z1qs7ic+uHrdL VmT+yP6/QrL2oN7uYT0DzAc7mpYIhNw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:07:37 2025 by rpki-client