$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3472bfab-8cba-3fda-b051-0fe32d29839a.roa File: 3472bfab-8cba-3fda-b051-0fe32d29839a.roa (raw, json) Hash identifier: RHnabdslw87Aq/78QNWwCkvg5fFqZtEwXHhicRm2shs= Subject key identifier: BE:FB:72:1A:60:92:48:A7:9D:B7:C5:B0:6B:11:FD:36:7B:A7:F3:6A Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Certificate serial: 010D0C9F43285849CFEE1F612AD5FFA21DC24B80 Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3472bfab-8cba-3fda-b051-0fe32d29839a.roa Signing time: Sun 11 May 2025 00:25:56 +0000 ROA not before: Sun 11 May 2025 00:25:56 +0000 ROA not after: Sat 09 Aug 2025 00:25:56 +0000 asID: 62513 IP address blocks: 207.174.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ee:1f:61:2a:d5:ff:a2:1d:c2:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Validity Not Before: May 11 00:25:56 2025 GMT Not After : Aug 9 00:25:56 2025 GMT Subject: CN=7687c0b0-90d8-4cfd-964b-4be48c1ec3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:61:a0:e3:56:8f:fd:6b:6d:45:e2:32:7f: ad:dd:97:27:91:5b:36:7d:ba:a6:1f:a3:ee:07:5a: 7d:89:51:3e:8c:80:fe:b0:f6:40:37:89:9f:8a:81: 81:6f:99:f4:0c:2b:a1:b5:3b:24:6c:32:a2:09:25: 9b:de:61:9c:ff:e4:bd:c6:92:90:28:2a:c9:ad:66: 45:e5:6b:f4:ca:f8:2e:34:74:f0:c9:3a:e6:8b:06: e3:9d:25:e8:ab:58:db:38:e4:04:e8:76:5f:f0:77: 5e:c6:3a:51:c2:bf:0c:a4:63:05:1e:c7:01:84:89: 78:da:14:fa:a0:b4:be:48:dc:c4:47:27:6d:4f:3b: c5:e5:d6:77:e7:03:7d:29:75:2a:c0:05:ce:69:94: e6:94:65:70:87:9a:18:10:1a:89:96:c8:73:75:8b: 25:bb:d1:8c:6c:28:ce:74:dc:11:e3:e0:5f:57:ea: 05:19:37:b9:a4:d0:00:90:c5:e2:ce:b6:71:a2:98: c9:a2:92:5a:1a:fb:f1:4e:87:c1:d2:85:ce:23:ef: bc:ac:2c:af:41:37:c0:2e:07:fb:6d:f5:7a:a0:71: 73:62:56:39:3d:b3:09:34:ba:18:1e:b8:7d:e7:7c: 23:d1:63:0b:0b:3c:80:20:82:1b:d1:fb:3e:ed:34: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FB:72:1A:60:92:48:A7:9D:B7:C5:B0:6B:11:FD:36:7B:A7:F3:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3472bfab-8cba-3fda-b051-0fe32d29839a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl X509v3 Authority Key Identifier: keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer sbgp-ipAddrBlock: critical IPv4: 207.174.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b7:f4:c5:69:28:a5:f7:90:2d:10:71:72:a4:f0:3c:47:6d: 9d:61:ef:5c:bc:0a:b0:9b:a0:fa:e2:ae:58:c7:f6:bd:0b:74: f0:52:3a:bb:a5:c0:a1:3c:2e:8f:dd:a9:c9:de:38:01:cd:6d: e4:c8:71:75:da:f5:de:61:65:9f:98:3f:4a:d3:06:3e:db:49: c0:be:ea:54:0e:ca:ad:56:1e:e6:5f:c3:33:dd:a5:e8:e1:a4: 3a:a2:48:2e:84:78:9e:ad:37:52:47:b3:1e:d9:cc:d8:a6:62: 7a:ac:d3:c7:b1:28:bb:50:23:72:fe:d5:dd:79:60:5e:8a:4f: d0:8f:0a:22:1c:13:b2:af:6e:a5:e1:05:0b:ec:43:0b:1b:52: 71:e2:97:50:c6:7d:7f:ee:0f:a3:fa:6e:f6:58:57:13:8a:58: ac:c0:a8:d7:af:34:52:57:4e:42:8c:ed:75:82:5b:61:c8:73: 70:56:e6:c1:1b:3b:83:87:72:73:4b:e5:1b:3c:f7:97:21:9f: 98:9f:7e:6c:67:e7:a1:0e:1c:b4:54:5b:d8:d1:b5:4e:e3:fb: f5:cf:69:46:32:25:37:3a:e0:bb:b1:de:c0:26:32:cd:02:a8: 93:fe:2b:7b:dd:c8:be:15:d4:31:a5:24:1c:3c:70:79:49:5f: 38:0f:7d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP7h9hKtX/oh3CS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3 ZWU3MB4XDTI1MDUxMTAwMjU1NloXDTI1MDgwOTAwMjU1NlowLzEtMCsGA1UEAxMk NzY4N2MwYjAtOTBkOC00Y2ZkLTk2NGItNGJlNDhjMWVjM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nBhoONWj/1rbUXiMn+t3ZcnkVs2fbqmH6Pu B1p9iVE+jID+sPZAN4mfioGBb5n0DCuhtTskbDKiCSWb3mGc/+S9xpKQKCrJrWZF 5Wv0yvguNHTwyTrmiwbjnSXoq1jbOOQE6HZf8HdexjpRwr8MpGMFHscBhIl42hT6 oLS+SNzERydtTzvF5dZ35wN9KXUqwAXOaZTmlGVwh5oYEBqJlshzdYslu9GMbCjO dNwR4+BfV+oFGTe5pNAAkMXizrZxopjJopJaGvvxTofB0oXOI++8rCyvQTfALgf7 bfV6oHFzYlY5PbMJNLoYHrh953wj0WMLCzyAIIIb0fs+7TRaXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL77chpgkkinnbfFsGsR/TZ7p/NqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvMzQ3MmJmYWItOGNiYS0z ZmRhLWIwNTEtMGZlMzJkMjk4MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3 YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1 N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES39MVpKKX3kC0QcXKk8DxHbZ1h71y8CrCboPrirljH9r0LdPBSOrul wKE8Lo/dqcneOAHNbeTIcXXa9d5hZZ+YP0rTBj7bScC+6lQOyq1WHuZfwzPdpejh pDqiSC6EeJ6tN1JHsx7ZzNimYnqs08exKLtQI3L+1d15YF6KT9CPCiIcE7KvbqXh BQvsQwsbUnHil1DGfX/uD6P6bvZYVxOKWKzAqNevNFJXTkKM7XWCW2HIc3BW5sEb O4OHcnNL5Rs895chn5iffmxn56EOHLRUW9jRtU7j+/XPaUYyJTc64Lux3sAmMs0C qJP+K3vdyL4V1DGlJBw8cHlJXzgPfQo= -----END CERTIFICATE-----Generated at Mon Jun 30 19:55:10 2025 by rpki-client