$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa File: 0d3a9201-b626-32e3-8ba2-32af8872019c.roa (raw, json) Hash identifier: TyZz7C4K1xRjcNmjltVsGiOtSymYKxgD9SF6TimqWiQ= Subject key identifier: 24:82:46:4B:3D:09:6B:AE:FC:4B:9A:71:E8:33:3D:C2:A2:C0:94:CE Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Certificate serial: 010D0C9F4328584A7085ED049C8E10D831F1DA80 Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 396982 IP address blocks: 168.235.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:ed:04:9c:8e:10:d8:31:f1:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=c86c4ffb-a41a-433f-8bc6-5ba5d0b9e61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5e:05:b7:0f:76:72:73:b8:72:5a:58:73:d5: b9:ff:da:47:1b:1b:16:38:9d:5c:8a:e7:0b:4a:9e: 14:01:ae:e9:49:dc:97:89:92:57:16:78:41:91:73: 16:6b:4d:36:92:25:7f:f0:bb:31:69:f4:11:a6:a3: 94:2b:a5:af:ec:2b:49:12:7f:ba:da:76:49:86:05: be:6b:aa:ce:b2:d2:39:fc:9f:f4:7d:a1:c9:7c:5a: 09:3c:a3:74:bf:c1:ba:5b:b1:81:e7:82:c8:97:d2: 4e:2e:82:73:06:79:30:5d:12:ce:2c:e8:c0:42:0e: df:7d:bb:76:25:27:80:91:ec:a3:82:92:ae:0d:59: c8:0e:fe:17:96:cb:89:96:5b:86:47:87:32:23:49: d5:0b:d7:95:f0:f8:c7:5c:78:77:3d:cb:6f:27:b1: 86:92:8c:8f:19:78:f5:1f:1b:c1:3f:b9:5a:8f:be: bb:74:93:2c:08:dc:4f:64:df:11:99:0a:f4:2e:0c: 91:55:c9:9f:53:1a:38:23:14:cf:9f:09:d9:e9:a7: 7e:46:33:32:ac:f0:e4:7b:85:b0:5c:6c:db:ae:d1: 67:3b:53:13:20:7e:c9:e9:ce:8a:f8:d4:55:94:f9: 01:e4:1d:9d:31:c6:04:81:f2:0b:74:fb:d1:ea:9a: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:82:46:4B:3D:09:6B:AE:FC:4B:9A:71:E8:33:3D:C2:A2:C0:94:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl X509v3 Authority Key Identifier: keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer sbgp-ipAddrBlock: critical IPv4: 168.235.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:02:af:e5:89:6d:88:07:5a:92:0e:52:04:df:09:e3:a3:0f: b6:81:7f:c5:73:95:1c:14:6a:cc:df:5f:28:af:78:2b:c4:17: 4e:cd:e8:41:17:4f:98:2a:c5:85:78:bb:59:ff:93:66:28:f5: e6:56:e2:a0:72:5c:92:99:81:0c:bc:d0:a0:d4:40:d6:fa:df: 3e:46:db:f4:b7:27:b7:3c:06:82:2c:37:cf:82:39:3a:32:92: a1:6b:dd:b7:47:65:b6:62:d8:07:31:6b:ba:07:9e:c2:1b:5a: 0e:94:45:67:23:6d:0e:64:b1:95:1e:06:90:58:32:3f:c2:dc: be:1c:87:bb:aa:a5:0f:da:0e:65:87:d6:6e:a6:7d:78:26:2e: ec:08:cf:a4:63:c2:d1:6f:2d:35:34:44:d4:8a:78:49:75:12: 15:a4:ae:13:b4:71:c8:5f:be:8f:ec:8a:69:6f:a0:b7:25:46: 4b:de:63:53:eb:f9:88:16:2f:a4:25:20:e6:7e:ec:b0:c7:02: f8:02:12:1c:5c:c5:86:0e:59:3a:97:26:7b:68:fb:81:29:6f: 2b:f1:05:ea:af:ad:c4:23:ee:5e:ca:44:93:41:3a:a6:16:05: 04:1f:f4:8a:3d:7b:32:04:41:85:ee:9f:1d:9d:ab:27:15:41: 47:c9:a5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhe0EnI4Q2DHx2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1 NmY5MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk Yzg2YzRmZmItYTQxYS00MzNmLThiYzYtNWJhNWQwYjllNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV4Ftw92cnO4clpYc9W5/9pHGxsWOJ1ciucL Sp4UAa7pSdyXiZJXFnhBkXMWa002kiV/8LsxafQRpqOUK6Wv7CtJEn+62nZJhgW+ a6rOstI5/J/0faHJfFoJPKN0v8G6W7GB54LIl9JOLoJzBnkwXRLOLOjAQg7ffbt2 JSeAkeyjgpKuDVnIDv4XlsuJlluGR4cyI0nVC9eV8PjHXHh3PctvJ7GGkoyPGXj1 HxvBP7laj767dJMsCNxPZN8RmQr0LgyRVcmfUxo4IxTPnwnZ6ad+RjMyrPDke4Ww XGzbrtFnO1MTIH7J6c6K+NRVlPkB5B2dMcYEgfILdPvR6pqdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSCRks9CWuu/EuacegzPcKiwJTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3 YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvMGQzYTkyMDEtYjYyNi0z MmUzLThiYTItMzJhZjg4NzIwMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1 NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk MmRkNTU2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwCr+WJbYgHWpIOUgTfCeOjD7aBf8VzlRwUaszfXyiveCvEF07N6EEX T5gqxYV4u1n/k2Yo9eZW4qByXJKZgQy80KDUQNb63z5G2/S3J7c8BoIsN8+COToy kqFr3bdHZbZi2Acxa7oHnsIbWg6URWcjbQ5ksZUeBpBYMj/C3L4ch7uqpQ/aDmWH 1m6mfXgmLuwIz6RjwtFvLTU0RNSKeEl1EhWkrhO0cchfvo/simlvoLclRkveY1Pr +YgWL6QlIOZ+7LDHAvgCEhxcxYYOWTqXJnto+4EpbyvxBeqvrcQj7l7KRJNBOqYW BQQf9Io9ezIEQYXunx2dqycVQUfJpVw= -----END CERTIFICATE-----Generated at Thu Jul 10 10:31:26 2025 by rpki-client