$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d22973c-0479-382a-a939-a918ab607e0d.roa File: 8d22973c-0479-382a-a939-a918ab607e0d.roa (raw, json) Hash identifier: ynYLdTsxwjGDeR0r15H2uIrBviVxN/otCP2KLho6f/w= Subject key identifier: CC:98:9E:EA:FF:A0:14:15:52:39:49:BA:B7:32:05:75:B3:36:14:FD Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D7B1B650E38E059EE400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d22973c-0479-382a-a939-a918ab607e0d.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 207.102.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d7:b1:b6:50:e3:8e:05:9e:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=4f1d4f59-e408-4ed5-a04d-e39392d4a444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cc:e4:9e:c5:13:d6:da:c3:91:e8:c8:b3:ac: 94:74:d1:17:e2:1b:50:84:61:fd:f3:83:d5:60:81: 3a:68:b4:65:bc:5c:d4:2c:cf:72:27:9c:23:0a:e6: 0b:ae:ae:09:48:bf:84:04:e3:d6:72:f7:3b:fa:de: d5:dd:32:40:b3:42:44:e4:12:8c:4d:79:f9:44:eb: ae:26:d5:f6:a3:39:ba:da:3b:c9:a1:71:f0:00:0c: 6f:b0:ef:c7:cb:2b:67:82:d3:be:27:c7:71:a0:85: f2:0c:7a:ef:80:e6:4e:5f:e9:62:5d:8e:98:d8:c0: bc:0a:60:95:af:a3:1e:c3:93:2a:e9:d3:23:e4:48: d9:da:b0:ce:99:3e:e7:7f:64:1d:62:93:f6:85:1c: e1:d7:ff:93:68:a6:db:b0:8d:2c:45:b1:53:93:01: 5f:dc:a0:6e:84:b5:e3:4f:74:c0:9f:55:17:86:0d: 6d:7b:5a:fa:73:a9:20:f8:24:21:a6:46:59:d2:87: d7:65:b0:d6:d9:5d:5b:58:5d:0c:84:f4:3f:74:5b: a4:fc:f8:a9:ca:2c:91:ac:52:5f:5d:f8:de:a9:17: 0c:a0:a4:4b:c9:05:1f:42:88:43:7e:28:a0:c3:4b: 5c:d4:d8:f2:ad:5c:77:98:b6:14:d3:bc:68:01:6e: 12:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:98:9E:EA:FF:A0:14:15:52:39:49:BA:B7:32:05:75:B3:36:14:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d22973c-0479-382a-a939-a918ab607e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.102.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4f:e2:2c:a9:48:98:d6:ef:dd:a2:bb:de:c7:e4:71:ee:e5: 0c:7b:b4:56:a7:4e:25:0b:45:29:6f:d4:6f:56:eb:a5:11:89: fb:76:e3:90:d7:67:7e:2a:88:73:7d:5d:91:91:20:a0:f7:d2: c7:9f:28:65:65:71:21:ef:1e:99:00:ec:56:07:bf:74:00:32: 15:86:77:31:41:ae:bf:23:98:4d:29:f2:7d:c2:e7:8a:1b:21: c5:39:30:df:2f:2f:25:98:d3:71:49:cc:d2:34:83:39:24:5f: 04:5d:92:0c:4f:3a:43:55:1c:51:c0:3d:0e:f4:46:2f:fe:4e: 4e:71:64:14:99:51:9b:04:0f:79:30:ab:a0:6e:a3:e7:a0:d3: 7f:f9:36:79:60:c0:5d:77:7a:58:4e:3f:da:3b:06:87:a9:be: e8:b7:4f:b3:42:27:f5:17:c5:3a:28:6f:ba:d5:22:09:4a:58: 49:ac:d5:e8:51:f5:dc:e8:56:e5:49:36:3e:5d:44:59:d0:c9: 3d:88:8c:e8:93:85:39:8f:cb:f9:59:79:be:dd:0d:82:70:27: 1e:83:8c:01:bf:49:a6:22:92:0c:68:30:82:7b:cc:33:cd:98: bc:68:9a:97:e1:cd:e9:cb:b4:2a:99:92:e0:e3:e3:3e:ea:51: 96:37:12:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdextlDjjgWe5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk NGYxZDRmNTktZTQwOC00ZWQ1LWEwNGQtZTM5MzkyZDRhNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhczknsUT1trDkejIs6yUdNEX4htQhGH984PV YIE6aLRlvFzULM9yJ5wjCuYLrq4JSL+EBOPWcvc7+t7V3TJAs0JE5BKMTXn5ROuu JtX2ozm62jvJoXHwAAxvsO/HyytngtO+J8dxoIXyDHrvgOZOX+liXY6Y2MC8CmCV r6Mew5Mq6dMj5EjZ2rDOmT7nf2QdYpP2hRzh1/+TaKbbsI0sRbFTkwFf3KBuhLXj T3TAn1UXhg1te1r6c6kg+CQhpkZZ0ofXZbDW2V1bWF0MhPQ/dFuk/PipyiyRrFJf XfjeqRcMoKRLyQUfQohDfiigw0tc1NjyrVx3mLYU07xoAW4S7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyYnur/oBQVUjlJurcyBXWzNhT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGQyMjk3M2MtMDQ3OS0z ODJhLWE5MzktYTkxOGFiNjA3ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2YjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9P4iypSJjW792iu97H5HHu5Qx7tFanTiULRSlv1G9W66URift245DX Z34qiHN9XZGRIKD30sefKGVlcSHvHpkA7FYHv3QAMhWGdzFBrr8jmE0p8n3C54ob IcU5MN8vLyWY03FJzNI0gzkkXwRdkgxPOkNVHFHAPQ70Ri/+Tk5xZBSZUZsED3kw q6Buo+eg03/5NnlgwF13elhOP9o7Boepvui3T7NCJ/UXxToob7rVIglKWEms1ehR 9dzoVuVJNj5dRFnQyT2IjOiThTmPy/lZeb7dDYJwJx6DjAG/SaYikgxoMIJ7zDPN mLxompfhzenLtCqZkuDj4z7qUZY3Egc= -----END CERTIFICATE-----Generated at Fri Jul 25 19:28:01 2025 by rpki-client