$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ccf8c2f9-24d2-3cfd-a66c-c699906b76ce.roa File: ccf8c2f9-24d2-3cfd-a66c-c699906b76ce.roa (raw, json) Hash identifier: NFZt9U3yaXnDXRMVfMI39gCVFvpn35A4X00Q5pHiA2o= Subject key identifier: D1:77:6E:05:40:20:ED:4E:65:67:E0:53:2E:46:70:02:9B:EE:39:8C Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584A84117709583C657B7ABCD200 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ccf8c2f9-24d2-3cfd-a66c-c699906b76ce.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 209.107.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:77:09:58:3c:65:7b:7a:bc:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=48bfaf91-67b3-4722-ae8e-86c33cb4e49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:69:4e:0c:02:0f:44:b1:9b:41:bd:8d:73: 5c:a1:0a:f3:19:60:16:5b:0a:ee:84:d3:aa:4b:62: 7d:45:df:3f:35:07:05:8e:b0:03:ce:00:6a:35:2f: 15:23:a8:fe:2d:69:be:19:93:b2:f2:a3:04:21:45: f8:c3:57:e6:f6:f6:97:e9:aa:74:38:87:cf:41:12: 82:27:c6:de:42:7a:c8:b7:35:ba:d9:83:c9:3c:41: a3:b2:b7:35:f8:1a:77:37:62:2d:c9:0d:8f:8e:0b: 91:fe:cf:62:a7:7a:01:c9:b8:e2:ec:16:cc:64:ac: 55:16:27:62:46:82:8a:d0:0d:95:5e:70:09:d4:cb: 9b:d1:bf:65:41:7b:ba:79:69:ee:67:1d:27:7b:fe: 05:ad:4c:bc:71:da:43:82:c2:8e:73:66:21:ec:05: a1:5e:38:7b:a3:a2:b2:40:de:82:93:ec:4a:c7:d4: 47:e5:c0:ea:de:9d:0f:cf:d6:e3:b8:6a:6a:a7:ac: 55:50:41:9e:f3:3c:33:a3:a9:31:d0:7a:42:09:c1: 1d:79:7b:7b:f3:ff:0d:9a:9a:b3:be:e8:a6:92:ab: 36:97:51:71:b6:d4:9a:38:d6:cf:21:46:e1:d7:4c: 92:bc:da:03:e0:5c:c9:f2:8d:c9:0b:d4:fb:aa:26: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:77:6E:05:40:20:ED:4E:65:67:E0:53:2E:46:70:02:9B:EE:39:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ccf8c2f9-24d2-3cfd-a66c-c699906b76ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f4:ca:45:3e:48:a8:d9:04:d5:8b:fa:9e:d4:34:af:86:7f: 5a:ee:57:5a:db:6d:0c:6f:9c:ae:2b:76:cb:55:62:78:20:5b: b5:00:64:39:c2:44:df:b9:18:a1:1f:ea:f2:ab:8e:7f:40:93: cc:86:6f:cc:1f:5f:d3:2b:e0:fa:c8:b8:90:b1:11:c4:a1:7a: da:e6:a0:99:c4:2a:8e:76:62:16:e0:b4:5a:14:90:2c:67:2c: bf:90:86:2f:7a:0e:dc:d7:ed:56:ec:6e:d8:a6:ee:c9:da:e9: cb:13:29:d2:ff:72:0e:81:7d:23:66:1f:23:b9:ef:67:51:5e: 0d:bb:ff:72:b3:e8:a4:51:e2:ff:64:a7:14:1d:9f:6c:29:5f: bb:19:6e:ae:02:aa:f1:de:1e:73:41:67:c3:7d:fd:ba:33:a5: b3:ac:2d:0e:3a:59:ed:d6:2f:66:4e:a0:2c:b7:69:11:b4:86: e6:d6:b7:9c:4c:e6:40:bb:1a:c7:99:d3:35:94:b1:3a:e7:9b: 3f:4f:c9:2e:4b:0a:1f:c0:74:f5:a2:cb:09:9b:2f:6c:ff:f1: ea:3d:25:f3:80:ee:bc:cb:76:08:97:0f:2d:42:2a:ff:3e:d9: 65:6d:32:13:24:1b:03:c1:9b:7e:ec:3b:a5:fa:b2:39:36:2d: 72:e9:ab:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXcJWDxle3q80gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDhiZmFmOTEtNjdiMy00NzIyLWFlOGUtODZjMzNjYjRlNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqNpTgwCD0Sxm0G9jXNcoQrzGWAWWwruhNOq S2J9Rd8/NQcFjrADzgBqNS8VI6j+LWm+GZOy8qMEIUX4w1fm9vaX6ap0OIfPQRKC J8beQnrItzW62YPJPEGjsrc1+Bp3N2ItyQ2PjguR/s9ip3oBybji7BbMZKxVFidi RoKK0A2VXnAJ1Mub0b9lQXu6eWnuZx0ne/4FrUy8cdpDgsKOc2Yh7AWhXjh7o6Ky QN6Ck+xKx9RH5cDq3p0Pz9bjuGpqp6xVUEGe8zwzo6kx0HpCCcEdeXt78/8Nmpqz vuimkqs2l1FxttSaONbPIUbh10ySvNoD4FzJ8o3JC9T7qibx1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNF3bgVAIO1OZWfgUy5GcAKb7jmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvY2NmOGMyZjktMjRkMi0z Y2ZkLWE2NmMtYzY5OTkwNmI3NmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Wu8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz0ykU+SKjZBNWL+p7UNK+Gf1ruV1rbbQxvnK4rdstVYnggW7UAZDnC RN+5GKEf6vKrjn9Ak8yGb8wfX9Mr4PrIuJCxEcShetrmoJnEKo52YhbgtFoUkCxn LL+Qhi96DtzX7Vbsbtim7sna6csTKdL/cg6BfSNmHyO572dRXg27/3Kz6KRR4v9k pxQdn2wpX7sZbq4CqvHeHnNBZ8N9/bozpbOsLQ46We3WL2ZOoCy3aRG0hubWt5xM 5kC7GseZ0zWUsTrnmz9PyS5LCh/AdPWiywmbL2z/8eo9JfOA7rzLdgiXDy1CKv8+ 2WVtMhMkGwPBm37sO6X6sjk2LXLpq70= -----END CERTIFICATE-----Generated at Sat Jul 26 07:20:48 2025 by rpki-client