$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa File: 0c95cc7e-347c-343b-9a60-43effbd437ce.roa (raw, json) Hash identifier: Nh/OTrYrfurXT5GLmE+EfupFCbT6T4IGBIRWI9n8Pvw= Subject key identifier: 1A:75:BE:23:06:B4:85:BD:F0:32:ED:BC:7B:EF:AF:4A:29:97:81:41 Certificate issuer: /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Certificate serial: 010D0C9F4328584A5FC5EA92B574AAE61BD24E80 Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 8075 IP address blocks: 206.209.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:ea:92:b5:74:aa:e6:1b:d2:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=c6cfb3b6-3a2c-42f0-9cf0-d13c7c236e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:46:f7:6f:de:1b:f7:73:fb:62:bc:c1:05: 52:15:b0:70:46:80:d7:f6:e8:4c:04:3b:f0:e8:bc: 31:a7:ea:cd:a3:35:65:e7:a1:e9:ca:ba:5e:37:65: 24:1d:3c:59:2c:f7:e7:7d:d7:80:52:3e:45:db:b4: b9:73:61:0d:72:85:02:75:30:0a:05:c5:3b:cf:8e: 3d:f2:b2:0b:e8:19:d1:11:39:76:82:ed:db:52:26: 48:74:8f:43:a6:34:5d:6f:99:7e:ea:35:89:33:b6: e2:e8:bf:7e:c8:bc:42:a8:de:dd:ae:ad:4e:69:13: 3a:c0:8b:5d:67:f7:18:61:84:e6:98:e1:a0:c8:36: 86:d1:05:18:25:af:dc:d2:90:bd:74:c0:93:9b:71: 11:72:21:cc:70:dc:9a:d7:44:de:e8:7e:bb:b8:32: 58:30:2a:89:04:89:05:58:2f:12:4b:bb:89:d0:34: d2:6c:54:cc:ce:fd:3c:89:5d:6a:c3:f5:fc:1c:86: cc:45:53:9f:23:74:64:c2:ec:7b:e9:32:42:5c:03: 93:fb:5c:7a:ce:8e:f3:3b:65:96:81:38:bd:fa:0d: cf:24:39:d8:9b:a1:65:45:61:b8:30:a9:54:31:71: 91:f3:66:f2:3d:00:ba:88:86:46:f4:1d:41:8f:0e: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:75:BE:23:06:B4:85:BD:F0:32:ED:BC:7B:EF:AF:4A:29:97:81:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl X509v3 Authority Key Identifier: keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer sbgp-ipAddrBlock: critical IPv4: 206.209.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:56:39:c9:87:86:c3:13:11:17:cd:c1:da:ba:d9:b7:6a:79: 09:9a:0f:a7:d6:7c:cf:17:15:e2:95:a2:fa:80:f0:63:f9:74: 55:be:23:62:10:94:dd:f8:ed:88:f1:57:02:48:81:68:27:f9: 34:38:e7:e4:eb:f6:59:bf:61:f4:6a:ca:cd:2d:96:dc:aa:03: 45:dd:e3:1a:58:a0:a7:91:1e:8e:26:eb:aa:58:56:de:c5:57: 2c:d1:98:98:04:c5:40:1a:ed:15:ec:4a:4e:95:a3:7e:09:a2: 08:4d:10:a6:bd:54:56:31:fa:9c:f3:59:82:d1:72:e1:54:7d: 0a:fc:c3:37:9a:c0:41:ee:41:a9:4a:49:5d:68:7f:13:46:e6: 1e:1a:64:27:95:2e:f2:f7:c6:79:7b:e5:a6:5a:cb:99:ab:8e: d0:dd:d1:36:c0:18:1e:5e:b9:98:63:ac:31:3c:33:87:23:6c: 21:49:cc:e1:a8:41:cc:7f:bd:ca:39:d4:00:77:cc:f5:0d:67: 1d:47:3c:8d:7f:1b:11:5c:2e:ed:d8:9e:6a:cc:3e:86:eb:60: 3a:7d:7d:58:b0:fc:df:cb:4b:dd:af:98:d3:aa:46:ee:8f:a5: b8:b5:35:47:79:c3:02:64:79:73:58:a1:5c:c4:f8:f4:1b:90: bc:f1:40:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeqStXSq5hvSToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgx NGFjMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YzZjZmIzYjYtM2EyYy00MmYwLTljZjAtZDEzYzdjMjM2ZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxFG92/eG/dz+2K8wQVSFbBwRoDX9uhMBDvw 6Lwxp+rNozVl56HpyrpeN2UkHTxZLPfnfdeAUj5F27S5c2ENcoUCdTAKBcU7z449 8rIL6BnRETl2gu3bUiZIdI9DpjRdb5l+6jWJM7bi6L9+yLxCqN7drq1OaRM6wItd Z/cYYYTmmOGgyDaG0QUYJa/c0pC9dMCTm3ERciHMcNya10Te6H67uDJYMCqJBIkF WC8SS7uJ0DTSbFTMzv08iV1qw/X8HIbMRVOfI3Rkwux76TJCXAOT+1x6zo7zO2WW gTi9+g3PJDnYm6FlRWG4MKlUMXGR82byPQC6iIZG9B1Bjw41GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp1viMGtIW98DLtvHvvr0opl4FBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWZh NjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvMGM5NWNjN2UtMzQ3Yy0z NDNiLTlhNjAtNDNlZmZiZDQzN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmYTY3M2UtY2VlYi00MDQ4LWIy YWItOTNjYWQ0NTgxNGFjLzBhZmE2NzNlLWNlZWItNDA0OC1iMmFiLTkzY2FkNDU4 MTRhYy5jcmwwHwYDVR0jBBgwFoAUvVEvSLcAjCwb2JozS3ZOtFgF2GcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2Nh ZDQ1ODE0YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlWOcmHhsMTERfNwdq62bdqeQmaD6fWfM8XFeKVovqA8GP5dFW+I2IQ lN347YjxVwJIgWgn+TQ45+Tr9lm/YfRqys0tltyqA0Xd4xpYoKeRHo4m66pYVt7F VyzRmJgExUAa7RXsSk6Vo34JoghNEKa9VFYx+pzzWYLRcuFUfQr8wzeawEHuQalK SV1ofxNG5h4aZCeVLvL3xnl75aZay5mrjtDd0TbAGB5euZhjrDE8M4cjbCFJzOGo Qcx/vco51AB3zPUNZx1HPI1/GxFcLu3YnmrMPobrYDp9fViw/N/LS92vmNOqRu6P pbi1NUd5wwJkeXNYoVzE+PQbkLzxQGA= -----END CERTIFICATE-----Generated at Sun Jul 20 09:30:27 2025 by rpki-client