$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9db3e04b-b519-30c1-aeed-6368e2b5e2b8.roa File: 9db3e04b-b519-30c1-aeed-6368e2b5e2b8.roa (raw, json) Hash identifier: cGqOHdecOFydIoyjpZkdOEbJBixvZT0/vi22vy2XapE= Subject key identifier: 0F:0E:0B:B7:2C:40:12:37:0E:0C:CF:B2:27:55:4F:52:F5:2A:40:12 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A62CAFB8E6F9CF1F386DC1F40 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9db3e04b-b519-30c1-aeed-6368e2b5e2b8.roa Signing time: Wed 02 Jul 2025 14:58:58 +0000 ROA not before: Wed 02 Jul 2025 14:58:58 +0000 ROA not after: Tue 30 Sep 2025 14:58:58 +0000 asID: 5065 IP address blocks: 207.210.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:ca:fb:8e:6f:9c:f1:f3:86:dc:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jul 2 14:58:58 2025 GMT Not After : Sep 30 14:58:58 2025 GMT Subject: CN=5ae71ad2-b9cd-43b7-94a9-2d78b0652100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:38:db:2e:d0:5d:90:41:ea:89:7a:27:58:dd: 06:11:33:92:38:4b:65:55:ad:95:e8:11:6c:7f:6f: de:0d:04:97:a2:a5:15:9f:a9:09:84:f3:05:79:0b: bd:8e:04:7e:ef:1b:4a:79:2c:7a:db:f5:ab:20:f2: a2:39:4d:5e:0f:58:09:8f:3f:cd:43:f6:92:5f:d7: 23:00:dc:e2:5a:79:f1:e1:93:91:99:5d:54:5a:64: 1a:d4:16:1a:37:72:90:ae:3e:51:96:ec:64:64:88: d0:28:fe:c5:30:4b:7f:6e:50:03:37:f0:48:29:f8: e3:84:79:d3:1d:57:e1:b9:81:46:86:24:d2:c2:5d: 05:2b:f6:3a:6e:29:44:6c:91:79:d9:fe:88:89:60: ed:17:8a:95:7a:86:b1:c8:6c:55:e6:2d:43:e9:34: 34:f3:45:83:8e:65:a5:c3:c8:d9:f0:10:4a:91:af: ba:11:1b:c5:63:44:99:96:9f:d6:bb:0f:30:45:fb: 46:20:d6:e2:8a:7d:07:11:14:64:1a:30:b2:ab:73: 7b:b1:7f:40:af:7a:42:e9:0f:12:61:d0:8e:7e:3a: dd:15:f3:61:ea:05:1f:79:80:06:65:f4:75:3d:4a: df:5b:7e:4d:a6:5d:ee:74:df:88:08:c2:fd:07:d6: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0E:0B:B7:2C:40:12:37:0E:0C:CF:B2:27:55:4F:52:F5:2A:40:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9db3e04b-b519-30c1-aeed-6368e2b5e2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 207.210.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e4:ec:1e:d8:90:44:83:5e:77:a0:d5:6b:a7:74:51:0a:ad: ad:18:d3:9e:49:46:23:d3:b7:80:2d:45:c9:cd:44:a5:90:9b: 1f:1b:08:42:c6:d3:63:c9:74:50:a7:1a:9b:3f:33:9a:32:e9: 7c:4f:d3:19:97:73:5c:7a:14:63:84:b2:af:17:19:f9:c8:ec: 09:b0:d4:95:a3:2d:df:6a:01:93:f4:55:e3:ca:ec:85:e3:f6: b4:00:cd:8d:7a:ff:d8:34:fc:54:37:56:57:62:c6:b2:fd:a8: d4:6f:d6:ff:65:60:a3:31:6c:3c:c7:ae:a7:a5:f9:39:76:38: f7:3c:15:25:65:74:b4:8b:89:50:20:d0:95:0c:13:1d:08:cf: 2b:63:fe:d1:fd:42:c7:0f:75:00:40:8a:ef:54:af:83:88:56: af:e7:3c:f8:18:95:1a:80:4b:8b:4b:0d:38:9c:ed:02:50:64: c4:a0:9f:33:14:0c:d7:32:e8:49:9c:0c:77:ad:ef:c1:6d:53: 7d:27:3e:32:ac:6b:b0:58:04:d7:d1:99:26:3d:ed:82:51:90: bc:73:30:ee:01:f3:2d:74:39:3b:58:62:d9:7f:e7:d2:21:11: 8b:56:e5:96:09:62:8d:c8:1f:bd:c3:db:2e:f9:2f:57:ec:be: 9d:c5:25:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpiyvuOb5zx84bcH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDcwMjE0NTg1OFoXDTI1MDkzMDE0NTg1OFowLzEtMCsGA1UEAxMk NWFlNzFhZDItYjljZC00M2I3LTk0YTktMmQ3OGIwNjUyMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DjbLtBdkEHqiXonWN0GETOSOEtlVa2V6BFs f2/eDQSXoqUVn6kJhPMFeQu9jgR+7xtKeSx62/WrIPKiOU1eD1gJjz/NQ/aSX9cj ANziWnnx4ZORmV1UWmQa1BYaN3KQrj5RluxkZIjQKP7FMEt/blADN/BIKfjjhHnT HVfhuYFGhiTSwl0FK/Y6bilEbJF52f6IiWDtF4qVeoaxyGxV5i1D6TQ080WDjmWl w8jZ8BBKka+6ERvFY0SZlp/Wuw8wRftGINbiin0HERRkGjCyq3N7sX9Ar3pC6Q8S YdCOfjrdFfNh6gUfeYAGZfR1PUrfW35Npl3udN+ICML9B9ZHEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8OC7csQBI3DgzPsidVT1L1KkASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOWRiM2UwNGItYjUxOS0z MGMxLWFlZWQtNjM2OGUyYjVlMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz9JtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/k7B7YkESDXneg1WundFEKra0Y055JRiPTt4AtRcnNRKWQmx8bCELG 02PJdFCnGps/M5oy6XxP0xmXc1x6FGOEsq8XGfnI7Amw1JWjLd9qAZP0VePK7IXj 9rQAzY16/9g0/FQ3VldixrL9qNRv1v9lYKMxbDzHrqel+Tl2OPc8FSVldLSLiVAg 0JUMEx0Izytj/tH9QscPdQBAiu9Ur4OIVq/nPPgYlRqAS4tLDTic7QJQZMSgnzMU DNcy6EmcDHet78FtU30nPjKsa7BYBNfRmSY97YJRkLxzMO4B8y10OTtYYtl/59Ih EYtW5ZYJYo3IH73D2y75L1fsvp3FJa0= -----END CERTIFICATE-----Generated at Thu Jul 10 14:08:43 2025 by rpki-client