$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa File: 3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa (raw, json) Hash identifier: XrNXDvsvmnn8sQ2QnFrE9hn1NuIAWDqfxD6k9YVf62M= Subject key identifier: DD:DE:43:FA:93:C7:3B:9B:B2:71:74:5B:9C:4C:B7:EB:F5:2C:B9:11 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A1B600C16A08D9AE9FF0C6180 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 4213 IP address blocks: 107.6.234.0/23 maxlen: 24 107.6.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:0c:16:a0:8d:9a:e9:ff:0c:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=8cb9f0c1-c28f-485c-8e49-37eeaf298cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ac:c4:bf:79:13:68:0b:42:21:18:7e:35:93: a2:55:cf:81:a1:5c:85:b7:c7:7a:d9:ea:df:d7:d3: af:c5:db:fd:f4:3c:0b:5c:cb:11:c6:8d:cb:f8:66: 7f:83:7f:36:d4:2c:c5:a4:c0:9b:47:2f:4b:72:11: 6f:1c:45:8d:70:e9:52:80:c7:94:d8:55:11:eb:70: 40:d0:5a:dc:3f:27:75:32:fb:73:9a:f2:97:5f:67: 03:21:40:02:d3:5a:5a:7a:8e:d8:c6:3d:fb:88:64: 0e:66:be:ca:39:73:6d:b8:57:3d:71:c1:38:be:a2: c9:6a:dc:06:21:ab:01:29:7f:2d:50:6a:50:a7:07: 36:6d:62:9d:43:be:fb:7a:3b:f3:79:ee:dc:38:ef: 32:51:05:b1:d2:11:22:31:cf:a9:42:29:5e:7d:86: 56:82:4b:0e:39:2e:f3:87:e9:b3:c8:a3:1d:cd:05: dc:7d:71:1e:fa:ee:a1:75:28:8d:d5:0c:09:59:98: ee:ae:40:85:c0:c9:87:e3:45:72:f5:df:32:a8:f6: b6:87:cf:db:d0:12:05:6f:42:cd:aa:aa:88:6b:10: e2:ba:9c:ac:7c:94:59:9e:71:52:55:80:81:7d:17: dc:bf:9e:a9:06:b3:be:5b:f8:5a:42:98:b6:1f:ca: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DE:43:FA:93:C7:3B:9B:B2:71:74:5B:9C:4C:B7:EB:F5:2C:B9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.234.0-107.6.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:44:07:cd:bb:5a:bf:82:45:e0:e7:d1:9e:49:01:bf:8a:bd: be:79:58:4a:88:b7:b1:50:9d:12:f2:59:b1:c9:c9:2c:a0:7d: f6:09:da:fa:91:4d:e2:7d:81:85:ea:01:5a:e1:b6:b2:6e:cf: bf:92:8e:90:7c:4c:03:a5:2f:80:50:bc:03:eb:64:7b:8a:e1: 2a:2a:68:cf:49:d2:2b:83:82:53:5b:ac:24:2a:81:62:2b:f6: c3:c6:57:a0:da:f6:15:59:45:9f:3b:db:bd:2c:da:cc:da:d2: a6:b6:63:b4:08:57:95:84:98:04:06:f2:09:6e:dd:88:5f:8c: df:a3:49:0b:44:6f:e8:88:dd:51:83:3d:da:49:c2:b9:cd:94: a6:fa:fa:d7:41:4b:3e:19:eb:b6:d7:c0:5c:6d:cf:65:fa:ee: e2:75:8d:92:b9:c9:71:7e:6a:e8:e8:cc:5d:d8:ad:9a:dc:d7: a1:2f:30:f9:6c:b1:1f:98:a4:db:14:a2:9f:a5:ed:43:60:c3: da:a7:06:e3:51:53:e0:37:ca:83:04:08:9b:06:7a:ba:10:de: 31:30:cd:13:64:d7:d3:35:b6:28:06:82:17:32:8a:10:bd:71: f3:c2:11:9c:6e:e9:fb:e6:27:2b:b0:a0:31:1a:c3:4c:ab:3a: 2c:7a:df:ae -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEobYAwWoI2a6f8MYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk OGNiOWYwYzEtYzI4Zi00ODVjLThlNDktMzdlZWFmMjk4Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KzEv3kTaAtCIRh+NZOiVc+BoVyFt8d62erf 19Ovxdv99DwLXMsRxo3L+GZ/g3821CzFpMCbRy9LchFvHEWNcOlSgMeU2FUR63BA 0FrcPyd1MvtzmvKXX2cDIUAC01paeo7Yxj37iGQOZr7KOXNtuFc9ccE4vqLJatwG IasBKX8tUGpQpwc2bWKdQ777ejvzee7cOO8yUQWx0hEiMc+pQilefYZWgksOOS7z h+mzyKMdzQXcfXEe+u6hdSiN1QwJWZjurkCFwMmH40Vy9d8yqPa2h8/b0BIFb0LN qqqIaxDiupysfJRZnnFSVYCBfRfcv56pBrO+W/haQpi2H8os/QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFN3eQ/qTxzubsnF0W5xMt+v1LLkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvM2E3MjE3YjctMjI1NC0z MWRlLWJkY2QtYTEzYzlkYmNkOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFrBuoD BARrBuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAxEQHzbtav4JF4OfRnkkBv4q9vnlYSoi3sVCdEvJZscnJ LKB99gna+pFN4n2BheoBWuG2sm7Pv5KOkHxMA6UvgFC8A+tke4rhKipoz0nSK4OC U1usJCqBYiv2w8ZXoNr2FVlFnzvbvSzazNrSprZjtAhXlYSYBAbyCW7diF+M36NJ C0Rv6IjdUYM92knCuc2Upvr610FLPhnrttfAXG3PZfru4nWNkrnJcX5q6OjMXdit mtzXoS8w+WyxH5ik2xSin6XtQ2DD2qcG41FT4DfKgwQImwZ6uhDeMTDNE2TX0zW2 KAaCFzKKEL1x88IRnG7p++YnK7CgMRrDTKs6LHrfrg== -----END CERTIFICATE-----Generated at Mon Jun 30 01:27:11 2025 by rpki-client