$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa File: 43923168-7671-34ef-8e05-2404a6ab8830.roa (raw, json) Hash identifier: nMg90DdRV4qizYs2qY1eQXho0CcXgmL2j1gVoje15m8= Subject key identifier: 18:58:BE:1A:F0:4D:FD:33:84:EA:A7:CA:85:C9:5B:ED:A6:21:F9:91 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584ADD666CE20A66C7FAC8B9F0C0 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 398068 IP address blocks: 207.41.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:6c:e2:0a:66:c7:fa:c8:b9:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=a715631f-9fdb-4320-8732-201ff93ddb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:71:fe:0c:36:83:39:26:86:8c:be:d5:3c: c2:1e:47:58:6d:f1:8c:5a:fd:37:82:6a:3a:64:9e: 38:44:66:6e:ed:0f:4c:f3:a8:a7:9e:ac:cf:a0:e1: a5:2c:74:31:aa:bb:65:64:e6:b9:ac:e7:f4:31:89: a8:57:a7:04:49:da:ca:de:94:cc:f6:8c:5d:18:46: 66:e0:8e:32:01:05:1c:5e:f5:1b:04:69:7d:92:d7: d4:dc:41:96:1a:e7:99:f6:bd:dd:31:49:c8:af:cc: d2:76:40:76:f2:49:ef:ea:b1:43:55:3d:82:3b:10: 46:22:65:fb:d9:27:51:b2:7e:9b:1d:b1:08:d4:c2: be:2f:50:c5:fb:a5:d3:ff:33:1e:7e:58:3a:27:7b: 81:20:7e:02:1a:7e:00:ce:76:89:19:4a:69:9e:bd: 05:2a:e7:0c:54:0f:5f:a4:bb:a1:62:98:73:9f:0d: 6a:05:6c:d5:d5:42:67:1b:ef:24:30:13:62:1e:fd: 80:28:fd:d1:f1:2a:74:44:7f:19:6b:12:fe:bb:85: 26:5b:a1:2f:8c:77:0c:fc:19:aa:61:5f:67:7b:4a: 45:5b:c2:b1:54:a6:fb:6a:be:37:28:9a:c6:7d:9b: a8:5e:f5:cd:dc:4f:59:ed:0b:62:75:8e:d3:28:62: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:58:BE:1A:F0:4D:FD:33:84:EA:A7:CA:85:C9:5B:ED:A6:21:F9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 207.41.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a1:1a:d8:d3:13:67:14:0f:a2:c6:c9:bf:75:14:d0:59:5e: 6b:65:60:5a:99:ba:0d:5f:f8:01:5b:76:45:89:bb:92:49:da: 9b:fc:7d:69:01:5b:57:c2:ec:b8:99:cd:2d:87:e7:0e:b2:a0: dd:89:f8:4f:22:cd:56:90:fa:b0:b0:5b:f4:e3:4d:87:e2:37: 7c:8c:c0:cf:6a:b8:d5:2e:92:b5:22:0b:35:dc:61:48:75:03: d2:d9:68:75:b6:55:cd:c8:05:93:e5:48:bc:c7:c9:1c:e4:c1: 3c:0f:79:93:08:27:a3:0a:31:14:6a:ac:b4:eb:6d:13:1f:06: 46:a5:0c:7e:c8:29:4d:df:a8:0a:3a:39:c3:9b:cb:0f:e4:ce: c9:2f:f6:19:d9:83:2c:e2:1a:f8:a0:2c:65:a1:6f:e6:49:92: ce:0f:9b:cd:f2:ec:7e:88:fd:e9:00:ea:c7:83:47:d9:c6:c2: 23:db:d9:ba:b9:12:a1:a2:8f:25:f0:9a:ce:da:f3:8d:c9:70: 13:d1:30:81:9a:23:fb:fd:0d:54:04:47:bc:60:8e:53:1e:b7: fd:75:19:04:35:48:93:6b:a3:ec:1e:43:9e:26:86:65:a2:9a: 49:11:a7:f9:b6:a8:3d:88:de:f3:8e:29:24:3b:f1:09:af:3f: f1:b0:27:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmziCmbH+si58MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YTcxNTYzMWYtOWZkYi00MzIwLTg3MzItMjAxZmY5M2RkYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Vx/gw2gzkmhoy+1TzCHkdYbfGMWv03gmo6 ZJ44RGZu7Q9M86innqzPoOGlLHQxqrtlZOa5rOf0MYmoV6cESdrK3pTM9oxdGEZm 4I4yAQUcXvUbBGl9ktfU3EGWGueZ9r3dMUnIr8zSdkB28knv6rFDVT2COxBGImX7 2SdRsn6bHbEI1MK+L1DF+6XT/zMeflg6J3uBIH4CGn4AznaJGUppnr0FKucMVA9f pLuhYphznw1qBWzV1UJnG+8kMBNiHv2AKP3R8Sp0RH8ZaxL+u4UmW6EvjHcM/Bmq YV9ne0pFW8KxVKb7ar43KJrGfZuoXvXN3E9Z7QtidY7TKGKRqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhYvhrwTf0zhOqnyoXJW+2mIfmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNDM5MjMxNjgtNzY3MS0z NGVmLThlMDUtMjQwNGE2YWI4ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzykBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKhGtjTE2cUD6LGyb91FNBZXmtlYFqZug1f+AFbdkWJu5JJ2pv8fWkB W1fC7LiZzS2H5w6yoN2J+E8izVaQ+rCwW/TjTYfiN3yMwM9quNUukrUiCzXcYUh1 A9LZaHW2Vc3IBZPlSLzHyRzkwTwPeZMIJ6MKMRRqrLTrbRMfBkalDH7IKU3fqAo6 OcObyw/kzskv9hnZgyziGvigLGWhb+ZJks4Pm83y7H6I/ekA6seDR9nGwiPb2bq5 EqGijyXwms7a843JcBPRMIGaI/v9DVQER7xgjlMet/11GQQ1SJNro+weQ54mhmWi mkkRp/m2qD2I3vOOKSQ78QmvP/GwJw8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:21 2025 by rpki-client