$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa File: 3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa (raw, json) Hash identifier: bwSyuHGAUMwcODmiLrwaEQ9jLl4fcrKqHrXfibJ2Ors= Subject key identifier: 4A:1F:EF:B2:45:0E:B5:B7:41:C2:15:35:75:B7:80:E4:DA:6F:DC:7C Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584A90A0C2AFE6A010B816B6B9C0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 62651 IP address blocks: 209.107.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c2:af:e6:a0:10:b8:16:b6:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=3a808272-32db-42ea-950d-bc08f9f1f722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:40:8c:e7:72:36:07:1f:be:6a:eb:01:73: 70:3e:9e:af:41:71:69:09:f5:97:43:11:b5:86:02: a8:66:ec:ae:06:7d:0e:38:45:87:c2:79:e3:db:8e: 8d:0a:c2:e5:25:fc:40:1c:42:cb:81:1a:96:02:94: 01:79:8d:52:1b:12:88:bf:fb:68:c1:4d:1d:5b:fa: 5e:30:67:3a:1b:4a:d7:06:c5:27:ea:aa:90:91:88: a8:6f:b9:39:7e:93:9f:ce:71:ab:ab:eb:58:1d:95: c9:18:a2:49:5f:7c:b4:57:f2:26:c5:b2:c8:ba:25: b5:8b:90:61:dd:f2:a3:33:e9:e4:6f:5e:65:a8:f2: ed:4b:8d:d1:3b:33:4e:2f:80:2e:eb:80:cd:89:72: 90:61:15:28:83:38:bc:c6:a5:f4:61:01:cb:e2:c7: 81:df:d7:ac:c0:4e:e3:ea:55:23:46:80:d6:7b:fd: 33:8e:c7:65:c5:56:67:53:74:e8:81:a1:80:1a:6c: 5a:84:83:20:05:5a:83:cf:a0:ce:f8:3c:ab:a3:09: f1:73:b6:02:4a:da:9f:71:fb:26:fa:dc:e5:4f:16: 85:72:5e:b6:fc:d8:a5:1a:28:cf:28:78:fa:31:8f: e0:6e:34:1d:6b:8e:ef:25:e4:19:3f:5d:17:5d:e2: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1F:EF:B2:45:0E:B5:B7:41:C2:15:35:75:B7:80:E4:DA:6F:DC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:66:76:83:83:8e:52:67:33:e3:a9:93:d1:39:17:a6:fe:64: aa:47:d6:2f:03:d1:cf:01:14:65:cd:85:81:45:39:d1:36:7e: 79:e1:c8:bc:7b:f4:57:47:ce:0f:a7:5d:2a:b8:ee:8e:c7:ae: 2a:34:97:53:34:b7:a3:ad:aa:87:9b:6a:ac:6a:bc:05:11:7e: 35:79:7e:9d:c1:5c:85:9d:47:59:89:dd:a1:57:1e:ca:51:59: e7:ab:ff:e9:5b:8e:35:09:e5:36:1b:ac:9c:39:a9:15:71:b7: 8b:e4:16:77:a5:d0:9a:b0:15:19:ab:9d:f0:43:7d:f0:a3:f3: bb:be:4c:24:76:aa:dc:f6:b7:ab:d7:1b:0d:e4:36:dd:a8:6b: b3:a5:ce:60:b3:b3:48:7f:0c:c2:8a:c3:4c:32:71:0a:9e:18: 08:7d:4b:2d:92:a8:ae:2b:98:60:9a:ca:f7:db:fe:f2:a1:de: af:93:3e:93:81:4f:cd:0d:d4:df:72:cd:78:ef:42:ed:6e:bb: 6d:b4:12:14:f3:a4:cc:ed:6f:c9:36:d0:b1:ac:2e:6e:43:e4: 63:3b:1b:8e:09:05:e3:ca:cb:fe:89:dd:9e:36:79:62:46:60: 2a:62:82:d7:69:20:86:29:86:8f:a3:28:39:f1:d5:68:d3:3f: 5a:46:cd:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMKv5qAQuBa2ucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk M2E4MDgyNzItMzJkYi00MmVhLTk1MGQtYmMwOGY5ZjFmNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApelAjOdyNgcfvmrrAXNwPp6vQXFpCfWXQxG1 hgKoZuyuBn0OOEWHwnnj246NCsLlJfxAHELLgRqWApQBeY1SGxKIv/towU0dW/pe MGc6G0rXBsUn6qqQkYiob7k5fpOfznGrq+tYHZXJGKJJX3y0V/ImxbLIuiW1i5Bh 3fKjM+nkb15lqPLtS43ROzNOL4Au64DNiXKQYRUogzi8xqX0YQHL4seB39eswE7j 6lUjRoDWe/0zjsdlxVZnU3TogaGAGmxahIMgBVqDz6DO+Dyrownxc7YCStqfcfsm +tzlTxaFcl62/NilGijPKHj6MY/gbjQda47vJeQZP10XXeInhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEof77JFDrW3QcIVNXW3gOTab9x8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvM2IxYTRlZDItYjY5Yi0z OTJhLThkZGMtZjM3ZDk1NWZhNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhmdoODjlJnM+Opk9E5F6b+ZKpH1i8D0c8BFGXNhYFFOdE2fnnhyLx7 9FdHzg+nXSq47o7Hrio0l1M0t6OtqoebaqxqvAURfjV5fp3BXIWdR1mJ3aFXHspR Weer/+lbjjUJ5TYbrJw5qRVxt4vkFnel0JqwFRmrnfBDffCj87u+TCR2qtz2t6vX Gw3kNt2oa7OlzmCzs0h/DMKKw0wycQqeGAh9Sy2SqK4rmGCayvfb/vKh3q+TPpOB T80N1N9yzXjvQu1uu220EhTzpMztb8k20LGsLm5D5GM7G44JBePKy/6J3Z42eWJG YCpigtdpIIYpho+jKDnx1WjTP1pGzdA= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:48 2025 by rpki-client