$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa File: bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa (raw, json) Hash identifier: cJEXlJgVRqgFIr0/R9eE4t5sR5A0aSVtGtymI6F7RCc= Subject key identifier: 58:D9:19:A9:9F:91:8C:DD:E4:52:0A:AF:63:C2:55:3D:81:41:5E:4E Certificate issuer: /CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Certificate serial: 010D0C9F4328584A7A4B3821C2D5AC2A164E0400 Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 26157 IP address blocks: 207.174.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:38:21:c2:d5:ac:2a:16:4e:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=3f24c540-1f2f-4d2c-8cbc-f4abcabd3bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:84:45:72:3a:bd:23:47:a6:70:ef:2e:38: 29:27:c5:f7:45:aa:34:ec:43:96:7b:2e:1c:50:2f: fc:f0:eb:8f:7c:e2:b7:bd:a4:49:45:bb:17:6d:2c: b7:0f:34:0e:b2:c0:fe:4c:0f:da:9c:31:c3:5f:d7: 62:b1:6b:95:cb:91:40:06:4a:49:df:5a:e2:dc:ca: 7a:a6:39:7d:ad:2d:9b:96:d9:6b:5f:77:ba:fe:34: 06:14:42:f2:00:e9:ae:54:a0:95:b7:64:b6:69:ce: 55:cb:1f:1d:6b:95:a4:14:dd:f1:2c:3e:4e:69:01: 66:21:85:d0:c8:fd:59:f3:e9:ed:7a:c6:22:30:f9: 8a:68:f8:20:ae:69:35:ef:71:ab:a7:88:53:15:e3: 15:ff:73:d2:e6:cb:66:18:b6:56:ce:c4:ab:42:19: 5a:59:4b:28:0f:30:ba:4c:05:14:a8:a4:5a:7a:39: ea:65:f7:4a:ba:8e:22:e4:f1:5f:1a:f5:de:f1:f9: db:6c:27:b3:6f:18:6e:cf:dd:d4:9b:31:63:45:e2: 0b:aa:fe:ff:72:6b:ca:69:37:44:a4:32:8f:32:9d: b8:2f:8a:80:b9:44:5d:2e:2b:af:61:b3:1f:e2:3a: 24:f8:b5:a5:e8:a3:be:9c:3c:85:ba:52:58:12:21: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:19:A9:9F:91:8C:DD:E4:52:0A:AF:63:C2:55:3D:81:41:5E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl X509v3 Authority Key Identifier: keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer sbgp-ipAddrBlock: critical IPv4: 207.174.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:7f:9b:a9:47:cd:7f:cb:9d:7b:b9:c6:2a:d7:2c:db:38:64: f7:67:b5:63:58:92:8b:97:53:e8:ac:46:ea:c1:07:6e:11:b6: 6b:69:30:74:be:c5:05:0a:b4:d5:40:a6:35:05:78:ac:13:c1: 18:5c:84:05:2e:ea:f3:9e:b7:15:89:27:a2:c3:12:51:18:a1: f1:13:46:0a:62:c4:45:e9:1a:5e:b4:01:7a:8a:99:df:ea:89: 9a:64:52:00:94:af:3b:42:66:49:28:35:d6:5d:a0:cb:99:e5: 7b:f2:ee:a9:14:f7:56:48:e7:1a:fc:fe:95:b4:6d:a0:75:ed: ab:8f:81:20:ac:99:04:b7:53:18:42:c7:20:3b:a4:9b:60:a6: 40:a0:d5:b1:03:da:48:c9:7b:17:37:96:79:b0:55:2d:47:7f: dd:73:56:75:56:92:5b:30:74:8c:e3:18:44:08:a9:ef:70:de: 07:9e:d1:1b:b6:69:6f:96:14:6d:69:e8:58:69:80:43:c2:e5: 05:80:ba:0e:0f:c2:cc:39:7f:94:8b:7f:95:83:2d:83:44:6a: 43:a6:90:6f:a0:1d:8b:74:64:a4:2e:6d:4c:16:1e:77:32:af: ae:ad:fd:9d:6f:82:f3:d2:d3:75:9b:fe:81:25:89:76:a3:5a: 45:3e:4b:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzghwtWsKhZOBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0MmNkMWUtMTM1MC00MWQ1LWExNGUtNTFiZGRiNTJj MzM2MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk M2YyNGM1NDAtMWYyZi00ZDJjLThjYmMtZjRhYmNhYmQzYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIiERXI6vSNHpnDvLjgpJ8X3Rao07EOWey4c UC/88OuPfOK3vaRJRbsXbSy3DzQOssD+TA/anDHDX9disWuVy5FABkpJ31ri3Mp6 pjl9rS2bltlrX3e6/jQGFELyAOmuVKCVt2S2ac5Vyx8da5WkFN3xLD5OaQFmIYXQ yP1Z8+ntesYiMPmKaPggrmk173Grp4hTFeMV/3PS5stmGLZWzsSrQhlaWUsoDzC6 TAUUqKRaejnqZfdKuo4i5PFfGvXe8fnbbCezbxhuz93UmzFjReILqv7/cmvKaTdE pDKPMp24L4qAuURdLiuvYbMf4jok+LWl6KO+nDyFulJYEiFX5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjZGamfkYzd5FIKr2PCVT2BQV5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wOTQy Y2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJkZGI1MmMzMzYvYmNhNWFhMjAtMGFiOS0z MzE1LThkOTctZjJlZDUwMzM2OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDk0MmNkMWUtMTM1MC00MWQ1LWEx NGUtNTFiZGRiNTJjMzM2LzA5NDJjZDFlLTEzNTAtNDFkNS1hMTRlLTUxYmRkYjUy YzMzNi5jcmwwHwYDVR0jBBgwFoAUWsdYmsqiyRvuds1T1i6jaRsQMkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wOTQyY2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJk ZGI1MmMzMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5/m6lHzX/LnXu5xirXLNs4ZPdntWNYkouXU+isRurBB24RtmtpMHS+ xQUKtNVApjUFeKwTwRhchAUu6vOetxWJJ6LDElEYofETRgpixEXpGl60AXqKmd/q iZpkUgCUrztCZkkoNdZdoMuZ5Xvy7qkU91ZI5xr8/pW0baB17auPgSCsmQS3UxhC xyA7pJtgpkCg1bED2kjJexc3lnmwVS1Hf91zVnVWklswdIzjGEQIqe9w3gee0Ru2 aW+WFG1p6FhpgEPC5QWAug4Pwsw5f5SLf5WDLYNEakOmkG+gHYt0ZKQubUwWHncy r66t/Z1vgvPS03Wb/oEliXajWkU+S7A= -----END CERTIFICATE-----Generated at Fri Jul 11 04:49:30 2025 by rpki-client