$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa File: c8f662c9-10ab-353c-9436-2b1250c74c9a.roa (raw, json) Hash identifier: 4VkFbXjxAjS6xmVQ+Ri//n+/kHwm7TIfecY6C75VfNg= Subject key identifier: C6:B9:35:AF:47:99:77:6D:08:02:77:A8:BD:CC:FF:57:90:81:BB:F9 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584A374ACDA5028D396261BF4E00 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 54203 IP address blocks: 209.107.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cd:a5:02:8d:39:62:61:bf:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=f41e7d18-3a2e-4c59-b1a1-edcc7d824efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:2d:ff:79:58:be:e8:52:fa:97:a6:9d:f0: 11:d8:81:ab:ab:18:76:be:96:61:b8:40:48:b1:94: 57:0c:77:bf:cc:90:c9:e1:86:a9:47:60:37:b1:db: 34:dd:c8:53:83:b2:4e:c0:c9:bd:d7:ac:49:58:79: 5d:b8:8e:22:85:8e:79:c6:60:b6:ac:45:43:54:b1: c5:c5:6b:76:f6:5e:6e:66:4e:f4:9f:2c:3e:e8:6e: 54:9d:ef:ca:22:e5:e2:0e:f3:f2:36:a3:d2:66:90: 9d:ad:48:5f:22:09:37:12:1a:b9:b4:2b:00:b9:21: 65:0c:29:24:f9:bb:75:23:1f:ec:05:10:c4:f5:e1: 4c:93:1f:08:74:7d:3b:91:07:c6:78:c4:90:28:70: dd:3b:db:cf:18:15:a3:dd:43:03:7f:2d:ed:30:8e: da:9f:13:db:d0:07:e8:4b:85:1e:0e:01:c1:90:2b: 0a:d6:a3:d0:b7:fc:b6:32:d7:9c:21:f1:dc:87:19: 21:40:d2:f3:7c:e7:3e:61:30:c0:d9:89:fa:90:f7: ee:bb:3c:f0:89:69:72:68:32:62:8c:d7:5d:b8:b5: 64:26:42:0a:72:91:83:d7:9f:e4:87:83:34:90:56: 20:06:78:54:22:3d:74:ff:b1:79:19:7a:10:ad:df: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B9:35:AF:47:99:77:6D:08:02:77:A8:BD:CC:FF:57:90:81:BB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3d:a6:f7:7d:03:df:9a:44:32:03:3f:73:1a:c1:4d:2a:01: 13:15:5d:d5:70:b8:f4:00:fc:84:3c:5b:cb:22:83:64:1d:67: 91:22:11:ae:ef:16:8a:10:bc:23:34:0c:7e:43:a5:34:23:87: 61:54:ab:ee:9f:f8:75:c9:a8:9b:5a:0c:1c:44:61:08:81:d1: 9f:a6:67:58:c2:b8:70:75:73:f5:75:61:d0:b1:54:db:65:b5: 64:bd:04:29:f1:0b:58:b0:cd:52:ea:bf:8c:df:23:fa:c6:06: 85:08:5f:7f:88:d0:8b:2f:be:83:b2:7e:30:16:5a:ee:f1:e6: 84:fa:da:d0:96:cb:b8:3e:ae:56:70:43:6b:4e:b2:16:9d:24: 62:b1:66:b8:c1:5f:6b:b2:82:d6:19:fc:6e:ef:b8:d4:23:ad: 88:4d:62:f2:25:25:de:d3:d3:4f:f5:72:d0:92:68:c0:9f:04: ba:8b:5f:f4:06:73:4c:5f:c0:eb:b9:39:c2:88:47:f9:e2:72: 3c:ee:8c:5a:5d:45:85:71:d5:6f:d8:90:72:9c:88:2c:b1:bb: 2f:a3:a7:87:7a:8a:6c:41:f3:11:a7:74:d9:ca:47:f7:d0:52: 98:f4:48:c7:fc:cc:fb:d2:4e:f7:fd:52:b8:82:ac:ea:56:9f: 02:67:36:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss2lAo05YmG/TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZjQxZTdkMTgtM2EyZS00YzU5LWIxYTEtZWRjYzdkODI0ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOct/3lYvuhS+pemnfAR2IGrqxh2vpZhuEBI sZRXDHe/zJDJ4YapR2A3sds03chTg7JOwMm916xJWHlduI4ihY55xmC2rEVDVLHF xWt29l5uZk70nyw+6G5Une/KIuXiDvPyNqPSZpCdrUhfIgk3Ehq5tCsAuSFlDCkk +bt1Ix/sBRDE9eFMkx8IdH07kQfGeMSQKHDdO9vPGBWj3UMDfy3tMI7anxPb0Afo S4UeDgHBkCsK1qPQt/y2MtecIfHchxkhQNLzfOc+YTDA2Yn6kPfuuzzwiWlyaDJi jNdduLVkJkIKcpGD15/kh4M0kFYgBnhUIj10/7F5GXoQrd+1UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa5Na9HmXdtCAJ3qL3M/1eQgbv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYzhmNjYyYzktMTBhYi0z NTNjLTk0MzYtMmIxMjUwYzc0YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg9pvd9A9+aRDIDP3MawU0qARMVXdVwuPQA/IQ8W8sig2QdZ5EiEa7v FooQvCM0DH5DpTQjh2FUq+6f+HXJqJtaDBxEYQiB0Z+mZ1jCuHB1c/V1YdCxVNtl tWS9BCnxC1iwzVLqv4zfI/rGBoUIX3+I0IsvvoOyfjAWWu7x5oT62tCWy7g+rlZw Q2tOshadJGKxZrjBX2uygtYZ/G7vuNQjrYhNYvIlJd7T00/1ctCSaMCfBLqLX/QG c0xfwOu5OcKIR/nicjzujFpdRYVx1W/YkHKciCyxuy+jp4d6imxB8xGndNnKR/fQ Upj0SMf8zPvSTvf9UriCrOpWnwJnNnc= -----END CERTIFICATE-----Generated at Mon Jun 30 06:48:33 2025 by rpki-client