$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa File: aa000e23-1120-334a-ad1d-5bf8f562f368.roa (raw, json) Hash identifier: jPj7cizY7KQPdew3DAFTOFDK7OooLnodPgKrBs7q6uY= Subject key identifier: C4:1C:2D:D7:48:74:7D:64:11:24:D9:E9:52:CB:AF:CF:19:38:5A:90 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55CF60BF6911A5DAC37A80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 21723 IP address blocks: 207.194.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cf:60:bf:69:11:a5:da:c3:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=ca2168af-c970-4bcb-b555-2d5fd0c6d0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:06:12:ed:6b:2b:09:1f:90:0b:02:7b:e9:2d: 94:38:34:d1:d7:57:25:00:84:74:58:18:b7:1b:7a: 4e:be:cf:a2:28:af:27:16:33:50:59:de:31:15:e3: f7:10:16:44:86:8b:83:57:be:39:68:25:4f:9c:cc: 48:20:b3:24:52:eb:29:47:a1:e1:bd:a0:f8:20:51: 24:4d:55:54:21:d4:17:55:c9:ce:80:e8:1c:45:15: 89:9b:8b:51:ad:fc:f2:cd:5d:d3:3f:28:98:33:0b: 2b:fd:31:03:a4:0a:43:6a:46:bf:0e:ee:e1:9c:a0: 92:ea:d3:ca:fc:db:50:63:31:68:4a:67:00:75:ed: f8:c7:0f:e5:24:9c:b8:87:84:b8:1b:b6:a0:49:fd: 67:10:39:c5:b3:89:10:b3:61:1d:3f:5e:99:ab:ed: 83:32:f0:f6:23:86:9b:4e:36:52:66:87:63:b7:5c: d5:43:f6:c8:9f:9a:ce:52:6c:1d:8b:c3:8b:73:5c: 09:18:cb:04:34:f3:77:49:32:9d:31:08:59:13:f3: 06:7c:84:a3:3e:67:d5:71:96:f3:3e:c3:43:4c:5f: 45:df:da:af:49:c5:b9:cf:b0:62:82:5f:c7:95:58: 35:87:68:49:af:a1:f7:16:f5:60:d9:88:e8:bb:1c: 13:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1C:2D:D7:48:74:7D:64:11:24:D9:E9:52:CB:AF:CF:19:38:5A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:40:65:45:21:ab:83:05:04:d9:a9:b0:45:08:bd:49:67:ef: c9:14:85:95:a7:f1:dd:3e:41:8b:f6:d8:d7:a7:f7:e3:14:2f: ed:0c:65:dd:94:5d:6e:bc:0f:44:c1:5b:a0:76:a9:10:7e:d0: 6a:19:d0:2c:cc:4d:4e:1d:eb:da:58:fe:ad:e6:29:a3:0b:74: 16:b6:7d:d7:ff:b6:ce:ac:41:5b:22:48:26:06:d3:b5:88:da: 97:e4:89:44:c8:6d:31:91:63:23:37:28:51:ea:43:66:9d:1e: f5:4d:11:6d:1c:94:03:f9:e8:19:d3:64:ba:f5:81:e3:a1:b4: 45:47:e8:72:9f:4b:37:67:fc:77:69:f8:59:2c:5b:e4:53:04: 60:6d:4b:66:07:12:c3:d6:33:a5:af:d4:01:23:00:db:9d:f0: 8f:0c:2f:3c:67:34:ef:7b:57:ab:f5:e9:d8:11:34:01:95:01: d8:3a:42:f3:c4:d3:90:0d:c3:94:42:3f:2c:36:3e:14:7a:ba: 77:19:d4:5e:a2:4a:c9:33:93:76:85:7f:ef:a9:bf:44:4f:b6: 59:0a:e3:08:99:d8:87:1f:2d:fb:f7:d5:11:1a:32:96:45:ea: a2:ab:02:b5:da:05:9e:8a:5a:fb:b4:f4:72:27:90:79:e2:35: 3f:2a:68:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVc9gv2kRpdrDeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk Y2EyMTY4YWYtYzk3MC00YmNiLWI1NTUtMmQ1ZmQwYzZkMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQYS7WsrCR+QCwJ76S2UODTR11clAIR0WBi3 G3pOvs+iKK8nFjNQWd4xFeP3EBZEhouDV745aCVPnMxIILMkUuspR6HhvaD4IFEk TVVUIdQXVcnOgOgcRRWJm4tRrfzyzV3TPyiYMwsr/TEDpApDaka/Du7hnKCS6tPK /NtQYzFoSmcAde34xw/lJJy4h4S4G7agSf1nEDnFs4kQs2EdP16Zq+2DMvD2I4ab TjZSZodjt1zVQ/bIn5rOUmwdi8OLc1wJGMsENPN3STKdMQhZE/MGfISjPmfVcZbz PsNDTF9F39qvScW5z7Bigl/HlVg1h2hJr6H3FvVg2YjouxwTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQcLddIdH1kESTZ6VLLr88ZOFqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWEwMDBlMjMtMTEyMC0z MzRhLWFkMWQtNWJmOGY1NjJmMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8LIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtAZUUhq4MFBNmpsEUIvUln78kUhZWn8d0+QYv22Nen9+MUL+0MZd2U XW68D0TBW6B2qRB+0GoZ0CzMTU4d69pY/q3mKaMLdBa2fdf/ts6sQVsiSCYG07WI 2pfkiUTIbTGRYyM3KFHqQ2adHvVNEW0clAP56BnTZLr1geOhtEVH6HKfSzdn/Hdp +FksW+RTBGBtS2YHEsPWM6Wv1AEjANud8I8MLzxnNO97V6v16dgRNAGVAdg6QvPE 05ANw5RCPyw2PhR6uncZ1F6iSskzk3aFf++pv0RPtlkK4wiZ2IcfLfv31REaMpZF 6qKrArXaBZ6KWvu09HInkHniNT8qaHE= -----END CERTIFICATE-----Generated at Fri Jul 25 19:21:44 2025 by rpki-client