$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa File: c432c5a4-ed04-3547-9d82-8353164b23d8.roa (raw, json) Hash identifier: VeO9/BlJCAukLTphN027qi7OvIIbgk1i0VzYpQdB5Hc= Subject key identifier: BC:35:B2:A0:62:60:AE:74:8A:9A:5F:50:25:B0:D5:F4:43:26:CB:E3 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584A6C55D45DEF60CDD48A8E2C80 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 16409 IP address blocks: 207.114.24.0/24 maxlen: 24 207.114.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d4:5d:ef:60:cd:d4:8a:8e:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=ed09d400-7b5f-4867-8997-1d6ed09cca79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:d6:4f:9f:1d:f5:b4:74:67:6f:48:d9:82: c6:fa:b1:82:1c:21:bf:5e:65:2c:15:25:f3:75:84: 92:4b:d0:89:5e:9b:59:ba:18:f6:35:93:17:9d:8a: ae:c4:9d:b1:f2:16:b2:3a:63:e1:2c:cc:31:d3:b9: 03:cd:f4:ce:e1:cb:e3:fb:07:d0:ed:40:42:36:c3: ea:34:0f:14:d3:55:03:bf:3a:81:e3:96:67:c6:c0: a2:23:75:c0:97:4e:13:0f:26:99:77:b3:3a:f2:27: b3:53:0e:c9:2e:30:13:c9:1b:33:2c:88:18:77:04: 53:bf:92:0c:92:60:43:08:66:71:44:59:63:2d:60: c0:60:eb:7f:19:fa:c9:e8:aa:92:5c:58:a8:77:3d: c5:70:f1:8d:7e:cb:20:ee:48:55:f0:3a:0d:b4:f0: 6f:58:7f:f2:cb:5f:f5:f4:17:bf:67:09:72:ec:f4: 80:f7:51:e0:60:82:0c:5a:89:a3:f4:55:d1:ce:b9: f9:b3:b2:c0:eb:b9:75:07:e8:f4:ff:1a:1b:01:cb: 6a:db:aa:ac:f6:1d:62:e1:97:e2:c4:ca:ae:82:9f: 9b:32:74:1c:6f:6d:a7:2d:cd:64:f2:08:b9:dc:95: 45:be:e0:0d:f1:63:28:b7:1a:d4:fe:d3:8e:5b:67: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:35:B2:A0:62:60:AE:74:8A:9A:5F:50:25:B0:D5:F4:43:26:CB:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c432c5a4-ed04-3547-9d82-8353164b23d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 207.114.24.0/24 207.114.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4a:cf:b7:03:10:6f:14:c1:2f:5b:c9:ab:b3:19:50:1c:75: 18:82:6a:2d:35:1d:58:d4:a5:08:03:77:64:d9:3a:8f:25:eb: 26:1c:b9:5b:36:c1:a0:a9:ba:8d:05:bd:a1:1e:86:4a:2b:1b: 4e:04:91:22:e4:a5:09:d7:93:f3:c6:d4:df:84:3b:a0:4f:45: e7:51:c6:d4:73:26:75:b3:20:6b:25:7a:32:af:6d:77:58:24: 34:4b:4f:cb:58:1a:17:c8:fa:ef:c0:a1:39:34:cf:f8:27:d1: a8:aa:94:2b:32:c4:0a:b8:89:1f:b3:7f:f0:64:1f:9f:20:89: b7:67:97:a8:ae:df:a5:01:9a:40:59:96:e0:b9:52:0a:84:6e: 0c:a5:c2:c5:be:cb:c4:1b:2f:44:61:f8:d0:31:22:ea:c9:41: b8:6f:aa:0f:ed:a1:11:f0:42:fa:d0:b1:94:e2:88:72:a8:5f: 34:54:4b:60:ad:2a:a4:c1:e0:88:f8:80:69:3c:74:f5:79:f8: 64:af:b8:3d:25:66:8a:56:e9:88:bd:d4:7c:5e:99:9f:67:cc: 74:42:d5:ea:b5:95:88:46:f7:d5:93:48:47:24:18:21:9c:2a: c7:56:32:cd:fb:25:dc:00:48:78:7a:04:35:64:02:1b:24:e6: 1d:fd:13:1d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpsVdRd72DN1IqOLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ZWQwOWQ0MDAtN2I1Zi00ODY3LTg5OTctMWQ2ZWQwOWNjYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4rWT58d9bR0Z29I2YLG+rGCHCG/XmUsFSXz dYSSS9CJXptZuhj2NZMXnYquxJ2x8hayOmPhLMwx07kDzfTO4cvj+wfQ7UBCNsPq NA8U01UDvzqB45ZnxsCiI3XAl04TDyaZd7M68iezUw7JLjATyRszLIgYdwRTv5IM kmBDCGZxRFljLWDAYOt/GfrJ6KqSXFiodz3FcPGNfssg7khV8DoNtPBvWH/yy1/1 9Be/Zwly7PSA91HgYIIMWomj9FXRzrn5s7LA67l1B+j0/xobActq26qs9h1i4Zfi xMqugp+bMnQcb22nLc1k8gi53JVFvuAN8WMotxrU/tOOW2ccXwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLw1sqBiYK50ippfUCWw1fRDJsvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYzQzMmM1YTQtZWQwNC0z NTQ3LTlkODItODM1MzE2NGIyM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz3IYAwQD z3IgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADFKz7cDEG8UwS9byauzGVAcdRiCai01HVjUpQgDd2TZOo8l 6yYcuVs2waCpuo0FvaEehkorG04EkSLkpQnXk/PG1N+EO6BPRedRxtRzJnWzIGsl ejKvbXdYJDRLT8tYGhfI+u/AoTk0z/gn0aiqlCsyxAq4iR+zf/BkH58gibdnl6iu 36UBmkBZluC5UgqEbgylwsW+y8QbL0Rh+NAxIurJQbhvqg/toRHwQvrQsZTiiHKo XzRUS2CtKqTB4Ij4gGk8dPV5+GSvuD0lZopW6Yi91HxemZ9nzHRC1eq1lYhG99WT SEckGCGcKsdWMs37JdwASHh6BDVkAhsk5h39Ex0= -----END CERTIFICATE-----Generated at Sat Jul 12 05:28:42 2025 by rpki-client