$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa File: db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa (raw, json) Hash identifier: t/Vb79H1b5AOvAyUDBvbQXaKk8RHeroVWLjJnkP3Sog= Subject key identifier: E3:5A:23:42:1E:DB:BE:9A:85:07:11:CB:3F:BF:EC:F2:95:16:62:20 Certificate issuer: /CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Certificate serial: 010D0C9F4328584A2ABADC717ED493DF53EF4F40 Authority key identifier: 01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 400204 IP address blocks: 207.167.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:dc:71:7e:d4:93:df:53:ef:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=f82b5645-186b-4d3a-be43-4797b566f087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:be:de:48:5a:8d:2e:6d:a9:7e:ba:19:3f: 24:50:d0:f5:9c:c0:89:06:bc:1e:9f:26:ec:91:f4: cb:c2:12:a2:8f:3c:5b:46:ca:97:99:e0:89:14:14: 95:ec:f8:42:a0:f0:22:8a:44:a1:30:80:46:76:da: ae:59:2d:f0:6b:a7:b0:2d:b1:94:56:20:fd:1a:08: e2:42:d9:54:56:19:52:3f:62:25:f3:20:2f:74:f2: 69:0e:09:9f:92:0d:11:b7:c2:62:92:d4:3d:01:ff: 31:c9:0e:3e:ce:34:4a:e6:c2:80:31:53:9c:cf:e4: 96:80:a1:7a:6d:e4:4c:05:14:8b:7d:2e:d2:77:57: a0:ff:c3:4f:a6:a0:10:f5:ab:23:28:fa:01:c3:c5: 74:59:26:26:a9:d0:50:3f:54:68:6e:89:d3:7f:bf: ff:c3:68:71:85:60:62:08:cf:de:41:2a:c1:ae:0d: 23:e1:f4:d2:b2:fc:55:25:c2:a0:d4:c9:8f:af:50: 90:1e:2c:cc:22:a3:8b:27:d6:10:b2:e3:c7:d5:4f: 3b:cb:c1:c0:96:a1:27:fb:b9:cf:9c:94:13:c7:e0: 23:62:d3:cc:d5:7b:9a:d5:98:3e:43:88:80:f8:5b: c3:99:6b:f1:3d:c2:77:2d:96:7f:1f:2f:0e:e5:3a: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5A:23:42:1E:DB:BE:9A:85:07:11:CB:3F:BF:EC:F2:95:16:62:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl X509v3 Authority Key Identifier: keyid:01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer sbgp-ipAddrBlock: critical IPv4: 207.167.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:6c:a1:36:d7:2c:d4:18:8e:24:63:ba:ff:b8:d2:56:bc:e6: 05:a2:6e:4b:fe:4d:ef:cd:0f:ec:1d:cb:0b:e7:bf:8c:29:30: dd:97:26:da:15:0b:55:81:39:40:73:1c:34:d0:3d:c2:25:34: 51:47:24:aa:a4:70:a2:86:6c:77:0a:35:56:d1:e8:d3:b7:7c: da:6d:89:15:81:25:b6:25:01:db:c1:46:ed:ba:a9:b9:58:83: aa:78:af:50:78:35:2e:b9:e5:bf:c5:3b:47:3d:47:b2:bb:41: bc:11:05:14:98:44:8a:b9:a6:d4:85:28:01:2e:bf:82:c4:30: 58:4e:24:20:e2:f4:ef:09:00:cf:96:13:3a:0b:75:f6:5a:a4: 92:00:91:d4:ea:c3:15:2a:60:8a:71:25:22:c2:7e:4f:12:e9: 4c:9e:ad:72:60:f6:00:96:fd:cb:a0:c7:b3:44:c5:28:fd:6c: 5e:4c:cd:fc:c9:1f:e9:25:95:47:4e:5f:07:37:b6:f4:04:37: 74:ef:55:a5:38:2d:49:93:e6:df:51:c5:98:41:6f:4a:a0:f6: e6:30:34:4b:40:97:e0:4f:e1:8d:ae:5c:50:bc:73:74:a1:70: 8e:2c:c4:b6:43:f0:fe:86:cb:68:10:6b:64:3e:88:13:19:92: dc:6b:58:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutxxftST31PvT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYjFmYjYtYzgyMi00NDYzLTkzMjEtYjg4YjlhODEz MDJjMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjgyYjU2NDUtMTg2Yi00ZDNhLWJlNDMtNDc5N2I1NjZmMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh++3khajS5tqX66GT8kUND1nMCJBrwenybs kfTLwhKijzxbRsqXmeCJFBSV7PhCoPAiikShMIBGdtquWS3wa6ewLbGUViD9Ggji QtlUVhlSP2Il8yAvdPJpDgmfkg0Rt8JiktQ9Af8xyQ4+zjRK5sKAMVOcz+SWgKF6 beRMBRSLfS7Sd1eg/8NPpqAQ9asjKPoBw8V0WSYmqdBQP1RobonTf7//w2hxhWBi CM/eQSrBrg0j4fTSsvxVJcKg1MmPr1CQHizMIqOLJ9YQsuPH1U87y8HAlqEn+7nP nJQTx+AjYtPM1Xua1Zg+Q4iA+FvDmWvxPcJ3LZZ/Hy8O5TodyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONaI0Ie276ahQcRyz+/7PKVFmIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBi MWZiNi1jODIyLTQ0NjMtOTMyMS1iODhiOWE4MTMwMmMvZGI2MjIxYjAtMmEzNS0z N2RjLWIwMmQtNzQyOWNkM2QzZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGYwYjFmYjYtYzgyMi00NDYzLTkz MjEtYjg4YjlhODEzMDJjLzhmMGIxZmI2LWM4MjItNDQ2My05MzIxLWI4OGI5YTgx MzAyYy5jcmwwHwYDVR0jBBgwFoAUAfZCngtbgKTc5GQVg8aMQWnHMw8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBiMWZiNi1jODIyLTQ0NjMtOTMyMS1iODhi OWE4MTMwMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxsoTbXLNQYjiRjuv+40la85gWibkv+Te/ND+wdywvnv4wpMN2XJtoV C1WBOUBzHDTQPcIlNFFHJKqkcKKGbHcKNVbR6NO3fNptiRWBJbYlAdvBRu26qblY g6p4r1B4NS655b/FO0c9R7K7QbwRBRSYRIq5ptSFKAEuv4LEMFhOJCDi9O8JAM+W EzoLdfZapJIAkdTqwxUqYIpxJSLCfk8S6UyerXJg9gCW/cugx7NExSj9bF5MzfzJ H+kllUdOXwc3tvQEN3TvVaU4LUmT5t9RxZhBb0qg9uYwNEtAl+BP4Y2uXFC8c3Sh cI4sxLZD8P6Gy2gQa2Q+iBMZktxrWP8= -----END CERTIFICATE-----Generated at Tue Jul 1 02:39:29 2025 by rpki-client