$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa File: 6e84b623-e3a3-3f1f-88da-e527e9861998.roa (raw, json) Hash identifier: 3j1lBTmKxXcZELaHk6kqVmRxJxyvdoZcj84n21WHcIM= Subject key identifier: 23:8E:DE:40:CA:DE:4E:F1:0F:43:3D:C7:29:ED:D6:5E:1A:B0:25:CF Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584A84117FBF0ABC4FD33A164100 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 209.107.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7f:bf:0a:bc:4f:d3:3a:16:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=771cccae-8541-4c63-b042-cbc9b0da6f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:3b:bb:85:4b:26:13:d8:f3:93:5e:fd:6e: f9:b9:e3:f4:dd:85:cb:63:9f:99:e5:6e:09:95:12: 8c:d7:b0:7d:88:c9:54:3e:85:8c:50:e4:59:1d:ad: fd:93:01:24:45:f7:94:22:6b:89:1a:21:fe:dc:de: b3:61:44:cb:0d:05:3c:98:cf:14:ac:7d:28:71:60: 98:95:57:87:db:5a:7b:23:79:ad:05:77:fe:b1:14: 25:17:81:89:84:1f:64:21:2b:19:df:6d:1e:1f:68: a6:15:8f:03:fa:18:15:f1:50:fe:f6:e6:8d:cf:aa: 3c:6c:55:b3:a6:45:6e:1d:b7:17:b3:92:71:7c:df: 41:f8:e5:d8:9b:81:8d:dc:1a:27:71:28:b0:b8:26: de:d7:d8:11:46:1d:28:d6:7a:90:96:e8:d4:13:83: 35:94:01:3c:94:67:96:a5:94:df:51:60:aa:f8:99: 64:f8:39:2f:12:b6:6e:ed:db:0d:aa:da:52:ed:e2: 0a:d6:07:bf:08:9a:f0:42:dc:91:b7:30:2e:31:80: 25:91:f7:79:58:39:19:ab:e8:e3:7d:d5:cf:62:6e: d5:e9:d3:a6:22:ee:af:86:c5:e5:6b:19:1d:d6:bf: b0:cb:16:1a:af:9c:3b:30:9b:01:2a:30:6b:b8:d5: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8E:DE:40:CA:DE:4E:F1:0F:43:3D:C7:29:ED:D6:5E:1A:B0:25:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7b:11:71:59:87:e1:3b:5c:e2:53:41:af:ac:30:95:8e:bd: 49:0e:ec:1e:0b:31:ac:26:39:09:14:c9:58:ff:81:2c:8a:92: 42:45:64:d5:51:ab:64:9c:24:a3:04:d2:67:ee:9e:69:da:b5: 36:5d:9f:bd:37:65:45:18:b7:0f:27:57:97:99:0f:3b:f4:cc: d8:42:1a:96:6b:7e:92:0b:09:2c:18:14:7d:a6:ce:e9:1f:10: 47:23:1c:c4:0e:91:c9:f6:44:42:c0:55:af:b2:ce:a2:5b:fb: 05:25:5b:47:34:e7:9b:85:04:33:b5:3f:53:7a:64:3e:80:c7: 77:27:23:79:41:2e:3c:53:e9:4c:fc:e1:c5:34:1a:a9:ed:a3: cc:bf:77:b7:5b:fd:b8:d5:5b:6d:58:f4:cb:a4:16:c1:6c:3f: e3:4d:fd:04:23:6c:86:c3:c2:04:e0:c4:79:06:33:90:70:03: 56:46:d9:b5:ca:89:7e:07:bd:a2:43:43:e8:29:f8:5f:a5:eb: 5f:28:8a:87:78:1f:77:44:a0:3d:7f:21:8f:ed:4d:5f:36:fe: 2c:73:fc:4e:43:27:b3:d0:71:c9:2a:21:e6:c1:d2:3b:d7:f0: fa:34:8d:1f:28:96:32:6c:0f:f2:e2:91:17:1c:e7:96:d4:db: 2a:4a:d2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEX+/CrxP0zoWQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzcxY2NjYWUtODU0MS00YzYzLWIwNDItY2JjOWIwZGE2ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF47u4VLJhPY85Ne/W75ueP03YXLY5+Z5W4J lRKM17B9iMlUPoWMUORZHa39kwEkRfeUImuJGiH+3N6zYUTLDQU8mM8UrH0ocWCY lVeH21p7I3mtBXf+sRQlF4GJhB9kISsZ320eH2imFY8D+hgV8VD+9uaNz6o8bFWz pkVuHbcXs5JxfN9B+OXYm4GN3BoncSiwuCbe19gRRh0o1nqQlujUE4M1lAE8lGeW pZTfUWCq+Jlk+DkvErZu7dsNqtpS7eIK1ge/CJrwQtyRtzAuMYAlkfd5WDkZq+jj fdXPYm7V6dOmIu6vhsXlaxkd1r+wyxYar5w7MJsBKjBruNXbkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOO3kDK3k7xD0M9xynt1l4asCXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNmU4NGI2MjMtZTNhMy0z ZjFmLTg4ZGEtZTUyN2U5ODYxOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Wu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC17EXFZh+E7XOJTQa+sMJWOvUkO7B4LMawmOQkUyVj/gSyKkkJFZNVR q2ScJKME0mfunmnatTZdn703ZUUYtw8nV5eZDzv0zNhCGpZrfpILCSwYFH2mzukf EEcjHMQOkcn2RELAVa+yzqJb+wUlW0c055uFBDO1P1N6ZD6Ax3cnI3lBLjxT6Uz8 4cU0Gqnto8y/d7db/bjVW21Y9MukFsFsP+NN/QQjbIbDwgTgxHkGM5BwA1ZG2bXK iX4HvaJDQ+gp+F+l618oiod4H3dEoD1/IY/tTV82/ixz/E5DJ7PQcckqIebB0jvX 8Po0jR8oljJsD/LikRcc55bU2ypK0ow= -----END CERTIFICATE-----Generated at Sat Jul 26 07:22:34 2025 by rpki-client