$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa File: e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa (raw, json) Hash identifier: VLHmCczFNN2GS1TWboi9VZdjKPBVDMGU58T88ZyL6fQ= Subject key identifier: FF:8C:F9:2F:F2:AE:26:85:60:4B:81:06:A2:A8:D9:1E:7E:46:76:D2 Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584A41105E579316BFDBF061F5C0 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 398471 IP address blocks: 204.108.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:5e:57:93:16:bf:db:f0:61:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=07d1d94e-6be9-4102-a174-5e6870cb6465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:4a:60:f3:f8:de:dd:e1:ad:4f:01:7d:5b: a3:ff:dd:d0:35:29:d0:95:d3:28:2d:f5:c1:9d:9d: e3:0c:ec:34:6b:46:4a:32:fb:d3:70:e4:f4:68:79: e5:56:23:22:cf:14:a6:59:14:c5:9a:8a:52:fe:6e: cd:7b:35:ba:72:36:14:ea:21:40:69:c8:90:67:19: e7:83:d9:7d:d9:44:36:a2:b7:47:5b:d6:c3:03:39: 99:77:70:c1:d3:60:b1:70:24:15:71:32:23:8b:6e: a2:2a:51:db:59:0e:9a:3d:fe:0d:1b:bd:6e:6d:df: 64:b1:6c:c8:3e:d0:85:e1:0b:b7:3d:d7:2a:41:dd: b7:09:9e:71:6d:2d:27:10:75:ac:c6:6e:14:0c:ba: 5a:c2:93:72:00:40:66:aa:aa:c2:31:fb:45:59:12: 99:ea:d4:fd:28:9a:34:f2:a6:91:c1:0e:c1:41:fa: 71:8e:6e:36:a2:23:0b:42:9a:b8:b8:15:fa:50:f1: 9d:3e:aa:cc:86:c0:09:ed:fc:04:67:74:20:a1:5d: 41:c9:af:3a:51:2f:03:c4:ad:3b:2b:c4:4a:28:fa: db:6e:ef:b8:f6:0e:57:04:bc:6c:43:9e:47:96:95: 47:35:f1:25:99:e8:33:29:b7:a7:df:12:cf:9e:78: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8C:F9:2F:F2:AE:26:85:60:4B:81:06:A2:A8:D9:1E:7E:46:76:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 204.108.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4f:98:a7:e2:eb:74:23:61:27:28:e9:8a:f7:f4:83:d4:84: 7e:95:38:7f:e3:85:56:f6:96:19:a4:36:0c:32:aa:3d:88:60: 35:af:fd:16:85:d2:cc:bf:5e:7a:5a:ad:1e:3d:06:72:99:68: 63:67:10:fd:65:92:60:90:44:fe:59:80:66:ea:b7:8c:3d:88: 91:37:71:e5:32:3a:ef:0f:21:f7:ed:0b:4b:cf:b9:09:1b:9a: 86:ee:03:ad:d6:a2:ad:9b:c0:f9:7b:ff:f9:31:0f:fa:76:20: 1b:1f:d5:3e:2f:24:9f:ec:25:f0:b1:0a:78:14:ab:71:bb:5c: 56:fc:8c:f5:68:0c:49:fd:2f:46:c1:9b:b0:2c:29:b4:3c:1b: 2d:c6:47:b5:62:0f:89:77:5b:ed:2b:85:5f:5e:40:b3:1b:ed: fe:ea:22:9a:f8:b0:80:e9:9b:cd:c3:88:6c:2d:ab:d6:3c:2a: b8:a1:8a:a1:0c:d7:79:cb:17:d7:ef:62:85:f4:67:89:06:24: 18:5f:13:bd:93:40:e1:8b:f6:2d:f0:8c:8e:66:f2:c4:6e:e8: 07:26:0a:28:cc:c8:a3:c6:96:3b:65:35:7f:c4:f9:f7:e5:0c: a1:42:37:96:e0:5a:8b:6f:68:7d:7b:32:8b:18:16:33:50:32: c0:84:e9:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEF5Xkxa/2/Bh9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MDdkMWQ5NGUtNmJlOS00MTAyLWExNzQtNWU2ODcwY2I2NDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrFKYPP43t3hrU8BfVuj/93QNSnQldMoLfXB nZ3jDOw0a0ZKMvvTcOT0aHnlViMizxSmWRTFmopS/m7NezW6cjYU6iFAaciQZxnn g9l92UQ2ordHW9bDAzmZd3DB02CxcCQVcTIji26iKlHbWQ6aPf4NG71ubd9ksWzI PtCF4Qu3PdcqQd23CZ5xbS0nEHWsxm4UDLpawpNyAEBmqqrCMftFWRKZ6tT9KJo0 8qaRwQ7BQfpxjm42oiMLQpq4uBX6UPGdPqrMhsAJ7fwEZ3QgoV1Bya86US8DxK07 K8RKKPrbbu+49g5XBLxsQ55HlpVHNfElmegzKben3xLPnngbOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+M+S/yriaFYEuBBqKo2R5+RnbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZTdiYjA2MWYtNmQzZi0z YmRlLWJlZTQtNDRjMGZlZTRhMjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVPmKfi63QjYSco6Yr39IPUhH6VOH/jhVb2lhmkNgwyqj2IYDWv/RaF 0sy/XnparR49BnKZaGNnEP1lkmCQRP5ZgGbqt4w9iJE3ceUyOu8PIfftC0vPuQkb mobuA63Woq2bwPl7//kxD/p2IBsf1T4vJJ/sJfCxCngUq3G7XFb8jPVoDEn9L0bB m7AsKbQ8Gy3GR7ViD4l3W+0rhV9eQLMb7f7qIpr4sIDpm83DiGwtq9Y8KrihiqEM 13nLF9fvYoX0Z4kGJBhfE72TQOGL9i3wjI5m8sRu6AcmCijMyKPGljtlNX/E+ffl DKFCN5bgWotvaH17MosYFjNQMsCE6e4= -----END CERTIFICATE-----Generated at Wed Jul 2 04:16:37 2025 by rpki-client