$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/e96993f5-ca60-3022-be74-738b3dcf4ced.roa File: e96993f5-ca60-3022-be74-738b3dcf4ced.roa (raw, json) Hash identifier: bHZl78qTxC857v5JaWzc3QTK0Q/VYmUeZEiF2oVBiEQ= Subject key identifier: 31:A7:26:80:E7:46:57:9C:69:05:18:5A:94:1E:D9:78:63:82:68:0C Certificate issuer: /CN=c42349db-6c0b-49d8-aceb-7b4888a22b1d Certificate serial: 010D0C9F4328584AEE619C05DF3223B9E04FD740 Authority key identifier: C0:C3:17:27:70:3D:87:FE:DF:CE:92:CD:32:77:D6:0C:12:A4:20:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/e96993f5-ca60-3022-be74-738b3dcf4ced.roa Signing time: Thu 21 Aug 2025 14:59:49 +0000 ROA not before: Thu 21 Aug 2025 14:59:49 +0000 ROA not after: Wed 19 Nov 2025 15:59:49 +0000 asID: 17297 IP address blocks: 209.112.110.0/24 maxlen: 24 2602:f8df::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:61:9c:05:df:32:23:b9:e0:4f:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42349db-6c0b-49d8-aceb-7b4888a22b1d Validity Not Before: Aug 21 14:59:49 2025 GMT Not After : Nov 19 15:59:49 2025 GMT Subject: CN=0f76a58c-d139-4ece-9594-7ae691ed2a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:0e:da:7d:ec:6b:da:22:60:86:d2:98:d8: 88:7e:31:3a:09:50:b7:3b:1b:16:20:0b:1c:c5:84: 6d:3a:49:22:b5:a4:7f:2c:0a:95:e3:01:09:97:f0: 54:22:9a:95:f9:3f:e0:1b:3b:47:1e:f0:94:3a:28: 06:5f:98:74:4b:af:a4:4f:2d:a2:64:f8:0f:38:f5: 6a:99:b2:1f:a2:14:2e:8a:40:e4:5d:e6:f7:f5:2d: 11:4c:0b:79:a9:f6:ff:ec:d4:5d:08:19:2e:47:61: 1e:f9:07:b2:a0:85:87:fe:d3:f6:3f:1e:d2:11:97: 23:f3:25:9a:8e:da:bc:03:5a:4f:df:09:02:ca:85: 22:21:57:0d:1f:76:20:f9:a0:08:c0:a7:c3:9c:e7: 6e:ed:d8:e7:2c:d3:a4:bd:e6:80:41:e4:66:c7:01: 21:6c:6f:5d:b5:54:db:7d:3b:8f:5d:6d:ee:66:50: 9e:f9:c1:13:8d:ef:14:82:a3:4d:29:81:dc:0c:63: cc:1a:35:9a:8c:a6:5d:c4:bd:0e:85:ff:cb:1c:86: 6c:42:7c:16:6b:66:ad:7b:b0:6d:7b:ad:3f:5d:51: b8:d5:7f:75:e9:f7:5f:7a:bb:81:34:6d:7c:f1:bc: be:10:7b:12:2a:62:db:3b:69:9e:79:34:6e:3b:1f: f7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A7:26:80:E7:46:57:9C:69:05:18:5A:94:1E:D9:78:63:82:68:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/e96993f5-ca60-3022-be74-738b3dcf4ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl X509v3 Authority Key Identifier: keyid:C0:C3:17:27:70:3D:87:FE:DF:CE:92:CD:32:77:D6:0C:12:A4:20:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer sbgp-ipAddrBlock: critical IPv4: 209.112.110.0/24 IPv6: 2602:f8df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:43:ff:ca:7f:cb:ab:6e:e8:b2:8f:be:48:80:99:4b:72:57: ee:3c:2c:60:37:ad:f6:98:c4:89:01:9d:54:95:54:79:30:23: 6c:2e:4f:ce:0e:6a:b3:b2:22:6f:0b:7b:55:82:fe:26:de:66: b6:d0:a2:9a:a1:30:a6:f7:ea:43:19:2f:a6:db:5f:fc:dc:2a: 5f:84:91:39:81:57:22:56:02:ac:4d:0c:52:12:88:65:91:f0: af:59:0b:1b:b3:47:a4:49:a6:15:7a:c0:28:af:29:92:47:b7: 83:c2:c2:bc:29:f2:f7:bc:f2:47:41:00:16:2d:25:78:36:02: 4f:43:1e:e7:de:a3:54:3a:2d:5f:fd:34:9e:a5:0b:5a:ea:b7: 32:9b:17:b5:18:56:27:83:37:9d:a1:3a:33:70:54:de:09:b5: 75:02:1c:e4:1a:7f:07:01:5c:7c:58:c9:29:c3:69:11:c3:84: 82:a9:28:0b:1e:6b:25:ae:7e:9b:e5:3d:45:b5:1a:5e:88:59: ee:0e:5f:69:0e:4b:e1:44:04:ef:a5:16:43:ee:a2:0f:9c:35: dd:0f:f2:66:8f:cc:de:77:8c:c4:3f:13:46:07:c8:a8:66:80: 82:eb:5c:97:a7:4d:cd:43:47:04:4a:10:bc:ab:b1:54:c1:e6: 6a:97:16:10 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEruYZwF3zIjueBP10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMzQ5ZGItNmMwYi00OWQ4LWFjZWItN2I0ODg4YTIy YjFkMB4XDTI1MDgyMTE0NTk0OVoXDTI1MTExOTE1NTk0OVowLzEtMCsGA1UEAxMk MGY3NmE1OGMtZDEzOS00ZWNlLTk1OTQtN2FlNjkxZWQyYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/EO2n3sa9oiYIbSmNiIfjE6CVC3OxsWIAsc xYRtOkkitaR/LAqV4wEJl/BUIpqV+T/gGztHHvCUOigGX5h0S6+kTy2iZPgPOPVq mbIfohQuikDkXeb39S0RTAt5qfb/7NRdCBkuR2Ee+QeyoIWH/tP2Px7SEZcj8yWa jtq8A1pP3wkCyoUiIVcNH3Yg+aAIwKfDnOdu7djnLNOkveaAQeRmxwEhbG9dtVTb fTuPXW3uZlCe+cETje8UgqNNKYHcDGPMGjWajKZdxL0Ohf/LHIZsQnwWa2ate7Bt e60/XVG41X916fdferuBNG188by+EHsSKmLbO2meeTRuOx/3RwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDGnJoDnRlecaQUYWpQe2XhjgmgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDIz NDlkYi02YzBiLTQ5ZDgtYWNlYi03YjQ4ODhhMjJiMWQvZTk2OTkzZjUtY2E2MC0z MDIyLWJlNzQtNzM4YjNkY2Y0Y2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQyMzQ5ZGItNmMwYi00OWQ4LWFj ZWItN2I0ODg4YTIyYjFkL2M0MjM0OWRiLTZjMGItNDlkOC1hY2ViLTdiNDg4OGEy MmIxZC5jcmwwHwYDVR0jBBgwFoAUwMMXJ3A9h/7fzpLNMnfWDBKkIJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDIzNDlkYi02YzBiLTQ5ZDgtYWNlYi03YjQ4 ODhhMjJiMWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0XBuMA4E AgACMAgDBgAmAvjfADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBQ//Kf8urbuiyj75IgJlLclfuPCxgN632 mMSJAZ1UlVR5MCNsLk/ODmqzsiJvC3tVgv4m3ma20KKaoTCm9+pDGS+m21/83Cpf hJE5gVciVgKsTQxSEohlkfCvWQsbs0ekSaYVesAorymSR7eDwsK8KfL3vPJHQQAW LSV4NgJPQx7n3qNUOi1f/TSepQta6rcymxe1GFYngzedoTozcFTeCbV1AhzkGn8H AVx8WMkpw2kRw4SCqSgLHmslrn6b5T1FtRpeiFnuDl9pDkvhRATvpRZD7qIPnDXd D/Jmj8zed4zEPxNGB8ioZoCC61yXp03NQ0cEShC8q7FUweZqlxYQ -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:29 2025 by rpki-client