$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/cb4f7901-cca5-3753-ab11-c977fba3450e.roa File: cb4f7901-cca5-3753-ab11-c977fba3450e.roa (raw, json) Hash identifier: Nz4z95ApYzhyQGApFGpsNsy1xF9KFuYjDzjUg9eaISU= Subject key identifier: B9:97:25:4C:8D:71:61:59:31:39:72:15:4C:64:FA:A5:F0:95:8D:70 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AFC1C019D30AB4D21BBCD2280 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/cb4f7901-cca5-3753-ab11-c977fba3450e.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 35908 IP address blocks: 107.6.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:01:9d:30:ab:4d:21:bb:cd:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=c8186ebb-3d60-457d-a7f2-1f3985505321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:c4:76:ca:e6:cf:2d:47:85:7a:6c:c4:c8: 8d:4b:29:4c:aa:07:44:89:62:f8:fc:61:c2:e8:82: f2:91:e4:83:92:14:bd:e5:10:51:6d:45:43:5b:24: 2a:07:25:bf:98:09:f0:bc:44:80:45:53:43:89:26: f5:cb:1c:01:a6:52:2e:ba:dc:62:7f:36:3c:b1:8d: a9:1d:d1:87:75:0d:1a:c3:88:0a:6f:c0:f2:12:34: 16:45:ec:0f:a7:0a:43:9c:93:3d:a0:b1:3a:bc:47: 5f:0c:c0:80:00:c6:e9:ef:ce:4c:c7:e1:55:36:46: 47:11:f9:0c:83:51:55:5d:d4:49:53:19:f6:39:99: 08:ae:57:d2:ef:a0:09:96:f8:d1:a2:88:3c:56:1e: 93:73:30:56:fa:66:47:11:a0:4b:89:c4:cd:86:67: f0:80:53:2c:1a:70:9e:b4:8b:74:3f:8f:67:be:7d: 25:f5:40:c9:b7:f6:fa:9b:55:72:4a:e8:da:93:0d: 93:f5:c1:98:06:c4:7a:62:87:0b:84:82:83:3d:cf: 50:45:f8:ee:4b:73:81:ae:3a:aa:02:49:a7:e0:0a: 21:99:cb:49:4c:eb:e7:2f:68:66:74:87:c3:22:ff: da:7d:a8:fd:9c:aa:ac:95:35:33:27:74:bb:c4:68: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:97:25:4C:8D:71:61:59:31:39:72:15:4C:64:FA:A5:F0:95:8D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/cb4f7901-cca5-3753-ab11-c977fba3450e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:79:67:b8:af:6b:df:73:72:4d:29:db:13:a4:e6:5e:ab:ee: 86:a2:24:81:df:5a:95:01:46:b0:13:a7:02:57:0b:4b:73:89: 12:e1:d0:e4:c7:cc:3d:b4:1e:8c:2f:41:4c:86:df:f7:69:6d: 21:0d:0a:b1:b5:c5:cd:95:72:08:11:b2:82:6d:13:b2:c8:21: 4f:50:fc:1f:b1:3f:40:d2:17:d7:68:cb:27:3b:47:78:36:81: 73:c8:91:f4:4b:a9:01:99:8c:b5:52:de:f8:08:28:4b:54:95: a4:a5:98:0e:87:4d:fe:35:45:86:61:88:b1:95:29:9c:82:bf: 58:d7:47:0d:0c:45:0c:36:20:28:3a:88:83:b2:51:3f:69:19: 65:5a:ae:fb:ab:62:e4:b2:0e:17:67:38:7b:2d:f4:27:7b:98: 44:da:f1:61:ac:85:14:24:b7:1e:13:35:62:f4:98:4b:28:e1: 6b:19:75:8d:43:26:fa:52:ba:14:3a:41:77:51:11:f2:1a:54: e4:94:3f:13:26:a6:1b:bd:42:44:6d:88:72:c7:c7:25:52:00: e2:ed:f2:c9:c7:e9:a0:43:fa:2b:c4:60:de:a3:d0:67:bd:48: 50:88:b1:da:a2:a7:db:b1:85:96:e9:5e:d9:15:ab:be:c8:d4: 42:78:26:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAGdMKtNIbvNIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzgxODZlYmItM2Q2MC00NTdkLWE3ZjItMWYzOTg1NTA1MzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfvEdsrmzy1HhXpsxMiNSylMqgdEiWL4/GHC 6ILykeSDkhS95RBRbUVDWyQqByW/mAnwvESARVNDiSb1yxwBplIuutxifzY8sY2p HdGHdQ0aw4gKb8DyEjQWRewPpwpDnJM9oLE6vEdfDMCAAMbp785Mx+FVNkZHEfkM g1FVXdRJUxn2OZkIrlfS76AJlvjRoog8Vh6TczBW+mZHEaBLicTNhmfwgFMsGnCe tIt0P49nvn0l9UDJt/b6m1VySujakw2T9cGYBsR6YocLhIKDPc9QRfjuS3OBrjqq Akmn4AohmctJTOvnL2hmdIfDIv/afaj9nKqslTUzJ3S7xGhtXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmXJUyNcWFZMTlyFUxk+qXwlY1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvY2I0Zjc5MDEtY2NhNS0z NzUzLWFiMTEtYzk3N2ZiYTM0NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGawbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ5Z7iva99zck0p2xOk5l6r7oaiJIHfWpUBRrATpwJXC0tziRLh0OTH zD20HowvQUyG3/dpbSENCrG1xc2VcggRsoJtE7LIIU9Q/B+xP0DSF9doyyc7R3g2 gXPIkfRLqQGZjLVS3vgIKEtUlaSlmA6HTf41RYZhiLGVKZyCv1jXRw0MRQw2ICg6 iIOyUT9pGWVarvurYuSyDhdnOHst9Cd7mETa8WGshRQktx4TNWL0mEso4WsZdY1D JvpSuhQ6QXdREfIaVOSUPxMmphu9QkRtiHLHxyVSAOLt8snH6aBD+ivEYN6j0Ge9 SFCIsdqip9uxhZbpXtkVq77I1EJ4JoQ= -----END CERTIFICATE-----Generated at Wed Sep 10 04:40:12 2025 by rpki-client