$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa File: 43fc3f5d-7da6-3394-990c-e086579daa0f.roa (raw, json) Hash identifier: eur5HrQd577n7EHEUaCSL64cCSfaTvCvS40gcwiksWc= Subject key identifier: 66:0B:2D:8F:22:3D:5D:A7:2A:4C:DD:62:C8:75:4F:A8:74:0B:82:37 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F4328584ACB40E97B29600B013A7DF7C0 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 29909 IP address blocks: 208.74.60.0/22 maxlen: 22 208.74.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e9:7b:29:60:0b:01:3a:7d:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=aa1c2ce0-6f55-4b8f-8f90-0323c9017aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:d9:c4:57:af:1d:df:36:25:70:78:97:a1: 2b:dd:23:d7:4f:b5:52:78:23:90:06:71:9c:dd:59: b9:4e:0a:cf:c6:94:b2:5b:d2:cd:d1:e7:20:75:35: e2:f0:d3:ab:c5:34:ac:93:63:92:65:cd:fe:73:3f: 1d:8c:b7:80:19:54:ee:cf:f8:dc:49:25:12:ae:0c: 46:78:42:d5:e1:dd:68:d6:76:37:c0:4c:37:77:ec: 11:3b:e6:99:cb:c0:3a:1e:55:e8:09:be:d4:52:84: b6:3d:9b:8c:c2:7b:d5:17:85:77:fa:0a:41:84:91: 27:75:a8:44:95:af:7a:00:e6:01:47:ff:44:cf:e5: 9e:a8:4c:c7:ef:d5:b3:a3:5c:60:40:35:ea:e2:56: 65:40:e9:9f:18:8a:53:fa:b7:8d:66:db:68:0c:86: fc:22:9e:c6:c9:73:87:23:b2:67:d0:f8:c1:df:46: a3:4f:92:82:51:c0:f3:22:44:70:a6:05:2c:bf:f3: 24:e5:32:2f:19:7e:98:05:d9:c3:57:48:28:94:a4: f3:1a:08:46:1d:f8:51:b0:5a:ac:8c:35:97:b8:2e: 04:06:ff:0e:54:cc:ed:e1:9c:ff:e0:86:d5:bb:e7: dc:a9:84:dc:23:81:8c:04:24:41:b0:cc:e5:40:7a: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0B:2D:8F:22:3D:5D:A7:2A:4C:DD:62:C8:75:4F:A8:74:0B:82:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.74.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:88:f2:a8:44:4e:4a:e8:d3:72:01:78:ae:62:92:1e:0a:e6: 09:2f:f6:be:54:90:02:fe:14:f9:80:04:38:3c:67:0b:65:d0: 54:8e:c1:11:b5:ff:f4:9c:3e:f0:1d:8c:cd:c4:a8:df:42:0f: cb:81:9e:16:5a:ee:2a:c3:90:6f:bd:1d:d8:b0:0f:ed:d8:03: 57:9b:0e:5f:8d:9e:81:9f:cf:e5:8f:e8:16:34:12:d6:44:bd: f7:f0:3a:43:49:3e:16:e6:9b:c4:8d:53:d5:b7:82:14:45:eb: 1c:3c:30:00:80:27:00:ac:28:db:67:1c:89:79:2d:18:7e:69: ba:38:08:05:52:e5:df:ce:85:ab:2d:8a:0a:6c:0b:3b:86:8a: ce:f5:9e:25:71:b5:e4:f7:14:61:c5:10:81:20:8b:5a:f6:32: 0c:f4:28:85:08:f8:8f:c3:67:66:ec:57:76:34:68:4f:e2:d4: 9c:0a:69:02:71:45:bc:e8:c7:9c:c6:8d:75:7d:ea:ca:dd:dc: ab:e1:6e:13:13:7f:8f:bf:33:3c:89:80:39:63:a7:46:c7:71: 47:af:45:51:c9:fc:a6:ef:20:0f:38:70:e2:b5:95:78:83:74: 39:61:ab:64:15:b9:e4:61:58:b6:be:ce:d9:6c:c1:27:43:b1: b4:c8:37:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOl7KWALATp998AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWExYzJjZTAtNmY1NS00YjhmLThmOTAtMDMyM2M5MDE3YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptbZxFevHd82JXB4l6Er3SPXT7VSeCOQBnGc 3Vm5TgrPxpSyW9LN0ecgdTXi8NOrxTSsk2OSZc3+cz8djLeAGVTuz/jcSSUSrgxG eELV4d1o1nY3wEw3d+wRO+aZy8A6HlXoCb7UUoS2PZuMwnvVF4V3+gpBhJEndahE la96AOYBR/9Ez+WeqEzH79Wzo1xgQDXq4lZlQOmfGIpT+reNZttoDIb8Ip7GyXOH I7Jn0PjB30ajT5KCUcDzIkRwpgUsv/Mk5TIvGX6YBdnDV0golKTzGghGHfhRsFqs jDWXuC4EBv8OVMzt4Zz/4IbVu+fcqYTcI4GMBCRBsMzlQHrxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYLLY8iPV2nKkzdYsh1T6h0C4I3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNDNmYzNmNWQtN2RhNi0z Mzk0LTk5MGMtZTA4NjU3OWRhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiI8qhETkro03IBeK5ikh4K5gkv9r5UkAL+FPmABDg8Zwtl0FSOwRG1 //ScPvAdjM3EqN9CD8uBnhZa7irDkG+9HdiwD+3YA1ebDl+NnoGfz+WP6BY0EtZE vffwOkNJPhbmm8SNU9W3ghRF6xw8MACAJwCsKNtnHIl5LRh+abo4CAVS5d/Ohast igpsCzuGis71niVxteT3FGHFEIEgi1r2Mgz0KIUI+I/DZ2bsV3Y0aE/i1JwKaQJx Rbzox5zGjXV96srd3KvhbhMTf4+/MzyJgDljp0bHcUevRVHJ/KbvIA84cOK1lXiD dDlhq2QVueRhWLa+ztlswSdDsbTIN50= -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:16 2025 by rpki-client