$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa File: c1c46925-3194-311a-bf74-90ade789f982.roa (raw, json) Hash identifier: 0t3c4quB2SboCGi9L6WkuzVl9EbGbQahgHFHTC4gO3c= Subject key identifier: 44:18:B4:85:7D:A7:3B:53:EF:D0:0C:25:AF:6E:D3:F1:17:6D:6C:D8 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A94D0D83F24F8DFC611228E80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 209854 IP address blocks: 207.230.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d8:3f:24:f8:df:c6:11:22:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=57e6a379-bfe1-45b6-b14e-459e450001e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:96:ef:e5:dc:d3:75:02:51:51:c4:37:7c: 19:1f:72:8e:ef:e9:3c:dc:ec:47:55:4d:ad:a2:70: d4:45:06:e6:06:16:68:88:70:14:24:68:f5:f5:ae: 9b:3c:8b:32:c6:a0:8d:26:8b:47:2d:91:47:8d:9e: 29:5f:e3:74:c9:27:e1:92:17:c3:8b:fd:13:c2:02: ef:16:2b:c3:9c:7e:8d:15:2e:95:9e:02:e6:66:36: 59:5c:83:34:97:e1:ef:be:ec:16:29:ab:8c:0f:d7: 02:02:c4:05:13:96:ae:5e:4c:e8:6f:9a:45:24:d0: 26:b9:af:ee:20:06:e4:be:65:2a:44:04:6f:43:22: 8b:48:67:04:c6:6d:bd:09:61:71:0c:8b:91:07:a0: ea:13:aa:51:ec:cb:6e:14:08:52:c5:85:60:41:ba: f3:e5:bf:0b:dd:79:3c:55:6d:56:69:20:74:50:79: 5d:8b:62:b5:da:90:d5:5b:32:d9:b0:01:47:40:9a: 04:02:f8:14:f6:b0:3c:db:c7:82:00:1b:5e:a9:d5: 04:7d:fe:62:73:87:01:14:78:cc:09:dd:0a:c6:18: 39:5c:51:25:10:c9:31:df:3d:63:d4:b5:89:20:58: 82:00:a5:94:ae:b2:74:b3:72:54:00:31:f7:1f:c8: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:18:B4:85:7D:A7:3B:53:EF:D0:0C:25:AF:6E:D3:F1:17:6D:6C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:78:f1:89:7f:a2:27:b3:06:bb:85:7d:ba:91:7c:36:62:0e: 30:88:87:c1:8a:25:b9:a4:3e:3c:63:27:d5:35:47:0f:32:1a: 1d:80:2d:43:ab:0d:83:2b:1b:d2:4e:ed:0e:09:9b:79:01:78: de:4e:12:5c:89:00:ca:c1:02:fd:93:60:89:1c:20:53:79:19: 92:1c:67:b0:ab:cd:0c:33:be:9e:b5:7c:30:16:c9:cf:04:be: 0d:bf:dc:75:4e:01:25:50:01:a3:ad:8f:7f:8b:38:07:83:22: 02:9d:e3:76:7a:3a:bd:c6:a0:d9:60:66:02:9e:2b:ae:83:ac: b7:cd:34:81:e9:19:86:87:1e:02:df:a9:03:31:09:5f:c4:d0: 34:0d:dd:f2:cb:f3:a4:10:99:5a:03:be:18:ca:72:48:34:26: 9d:96:f0:a4:2b:07:c2:b2:4b:4b:9b:2c:56:21:35:84:0a:81: 32:23:af:bb:ce:85:ee:50:23:76:2a:57:33:82:ce:5e:c3:c7: 69:9f:f1:16:0f:39:2d:c1:1e:53:c2:07:96:75:f9:ca:5f:d8: 92:87:94:ad:79:56:0b:69:04:bd:51:9a:0e:a8:46:05:29:de: 25:6d:7a:49:e2:60:ba:80:14:56:a0:23:90:dd:9c:0d:a4:72: 57:ed:f9:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0Ng/JPjfxhEijoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk NTdlNmEzNzktYmZlMS00NWI2LWIxNGUtNDU5ZTQ1MDAwMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln2W7+Xc03UCUVHEN3wZH3KO7+k83OxHVU2t onDURQbmBhZoiHAUJGj19a6bPIsyxqCNJotHLZFHjZ4pX+N0ySfhkhfDi/0TwgLv FivDnH6NFS6VngLmZjZZXIM0l+HvvuwWKauMD9cCAsQFE5auXkzob5pFJNAmua/u IAbkvmUqRARvQyKLSGcExm29CWFxDIuRB6DqE6pR7MtuFAhSxYVgQbrz5b8L3Xk8 VW1WaSB0UHldi2K12pDVWzLZsAFHQJoEAvgU9rA828eCABteqdUEff5ic4cBFHjM Cd0Kxhg5XFElEMkx3z1j1LWJIFiCAKWUrrJ0s3JUADH3H8izZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQYtIV9pztT79AMJa9u0/EXbWzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYzFjNDY5MjUtMzE5NC0z MTFhLWJmNzQtOTBhZGU3ODlmOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+Z9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB48Yl/oiezBruFfbqRfDZiDjCIh8GKJbmkPjxjJ9U1Rw8yGh2ALUOr DYMrG9JO7Q4Jm3kBeN5OElyJAMrBAv2TYIkcIFN5GZIcZ7CrzQwzvp61fDAWyc8E vg2/3HVOASVQAaOtj3+LOAeDIgKd43Z6Or3GoNlgZgKeK66DrLfNNIHpGYaHHgLf qQMxCV/E0DQN3fLL86QQmVoDvhjKckg0Jp2W8KQrB8KyS0ubLFYhNYQKgTIjr7vO he5QI3YqVzOCzl7Dx2mf8RYPOS3BHlPCB5Z1+cpf2JKHlK15VgtpBL1Rmg6oRgUp 3iVtekniYLqAFFagI5DdnA2kclft+Qg= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:08 2025 by rpki-client