$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cfe742b2-41bb-382c-9370-7bcf5af91a4a.roa File: cfe742b2-41bb-382c-9370-7bcf5af91a4a.roa (raw, json) Hash identifier: Cl/SqoaecM/Hc4m+y/gz+YULoZGKB2BlnFZZ0zfAJZg= Subject key identifier: FE:FD:F3:D3:F0:E8:D7:F1:FE:F2:F7:69:0E:A1:70:0F:6D:9F:F3:F1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6825FA434A27A317D5888B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cfe742b2-41bb-382c-9370-7bcf5af91a4a.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 40820 IP address blocks: 207.194.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:fa:43:4a:27:a3:17:d5:88:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=e41efc2a-d780-454c-ae2d-78ed38ce76fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:01:18:1e:6e:1f:08:eb:26:5c:19:88:21: 79:0e:bc:19:49:35:2a:71:87:82:65:e3:65:81:28: 36:02:9d:3c:62:9c:4b:cc:28:d9:8e:94:87:64:6b: 94:ec:90:fe:26:84:fe:28:a0:19:9c:b0:33:ae:27: 77:57:d1:b6:1b:59:40:97:b9:9d:0d:a0:7d:67:94: 53:51:25:41:7d:b0:62:99:eb:cb:82:fb:ed:32:81: 7a:75:bd:9b:3f:48:05:83:76:2b:8f:b0:26:34:ba: d5:c7:96:74:33:01:58:79:7a:78:ef:94:58:1d:58: 6e:17:b5:c8:a4:f5:dd:1f:01:5f:7a:1f:8f:d1:9e: d6:f8:82:34:0f:b6:ac:4a:a7:5f:0f:65:c9:fe:1e: a1:05:02:38:eb:7c:6a:f4:d8:ea:c0:a8:d7:c2:22: dd:5f:5c:14:bc:a8:07:52:0d:49:81:41:82:b0:57: 2c:67:9c:bf:3b:f3:a2:12:70:d4:aa:58:96:b1:fd: 77:45:7a:57:43:36:49:8d:ad:6f:fc:fc:ad:98:5c: af:eb:73:11:0e:bc:39:98:6b:06:ec:7f:d3:3a:08: 0f:16:d3:5e:60:fd:23:95:84:1a:ca:09:26:68:f7: f3:a6:8e:ce:0c:20:4b:ed:66:85:34:aa:06:6f:4d: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FD:F3:D3:F0:E8:D7:F1:FE:F2:F7:69:0E:A1:70:0F:6D:9F:F3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cfe742b2-41bb-382c-9370-7bcf5af91a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:29:18:ae:79:4c:37:d1:2b:b4:80:66:3b:c3:a3:83:3a:c3: 69:cb:a6:68:e0:fa:f0:ad:13:26:7c:2c:7e:e5:50:2a:03:e2: 2b:c2:71:80:a2:3f:6a:c8:44:8e:b3:1d:09:68:d0:bc:fe:d0: 5a:4d:2b:23:f0:ea:02:64:f1:dc:9a:5e:ab:f6:45:73:69:7f: bd:1e:50:df:83:e6:25:57:01:d2:7b:0a:9c:f1:33:51:6e:b0: e8:5e:35:36:42:df:f6:f6:92:55:72:78:a8:04:02:d1:2b:9b: 55:2a:30:98:5e:32:ef:34:ea:85:a3:f8:60:04:28:41:8b:75: 1f:27:dd:51:a0:6b:96:d1:f5:52:29:55:8e:e7:db:f1:50:f9: b0:04:ce:2d:31:95:49:ee:44:00:6b:a1:c1:2a:1c:4b:78:18: 90:af:b9:38:f1:ec:f7:27:38:ed:03:44:4d:02:9c:e0:ab:77: 42:23:de:59:68:52:21:ec:73:ea:af:58:a3:ae:00:1e:33:51: c2:45:ad:dd:51:90:29:af:02:4a:80:c1:ab:f6:29:57:3e:8a: c5:e9:0f:36:f0:7f:84:10:44:6b:58:99:c2:79:51:55:75:08: ce:4e:89:e3:01:9c:18:f4:e5:89:99:5a:70:1a:39:e0:e0:d7: 47:3d:50:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJfpDSiejF9WIi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZTQxZWZjMmEtZDc4MC00NTRjLWFlMmQtNzhlZDM4Y2U3NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mQBGB5uHwjrJlwZiCF5DrwZSTUqcYeCZeNl gSg2Ap08YpxLzCjZjpSHZGuU7JD+JoT+KKAZnLAzrid3V9G2G1lAl7mdDaB9Z5RT USVBfbBimevLgvvtMoF6db2bP0gFg3Yrj7AmNLrVx5Z0MwFYeXp475RYHVhuF7XI pPXdHwFfeh+P0Z7W+II0D7asSqdfD2XJ/h6hBQI463xq9NjqwKjXwiLdX1wUvKgH Ug1JgUGCsFcsZ5y/O/OiEnDUqliWsf13RXpXQzZJja1v/PytmFyv63MRDrw5mGsG 7H/TOggPFtNeYP0jlYQaygkmaPfzpo7ODCBL7WaFNKoGb00+QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7989Pw6Nfx/vL3aQ6hcA9tn/PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2ZlNzQyYjItNDFiYi0z ODJjLTkzNzAtN2JjZjVhZjkxYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8KIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAspGK55TDfRK7SAZjvDo4M6w2nLpmjg+vCtEyZ8LH7lUCoD4ivCcYCi P2rIRI6zHQlo0Lz+0FpNKyPw6gJk8dyaXqv2RXNpf70eUN+D5iVXAdJ7CpzxM1Fu sOheNTZC3/b2klVyeKgEAtErm1UqMJheMu806oWj+GAEKEGLdR8n3VGga5bR9VIp VY7n2/FQ+bAEzi0xlUnuRABrocEqHEt4GJCvuTjx7PcnOO0DRE0CnOCrd0Ij3llo UiHsc+qvWKOuAB4zUcJFrd1RkCmvAkqAwav2KVc+isXpDzbwf4QQRGtYmcJ5UVV1 CM5OieMBnBj05YmZWnAaOeDg10c9UC0= -----END CERTIFICATE-----Generated at Fri Jul 4 21:11:59 2025 by rpki-client