$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa File: f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa (raw, json) Hash identifier: +w15+HevvwvD63Cd83bRXowMBn+kLu399NhUHvgCMio= Subject key identifier: 8E:64:50:CF:E8:BB:92:03:0B:A1:7C:E4:B6:94:C7:AB:26:2C:EE:A3 Certificate issuer: /CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Certificate serial: 010D0C9F4328584A4B52863482493C3551400A00 Authority key identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa Signing time: Tue 24 Jun 2025 05:12:40 +0000 ROA not before: Tue 24 Jun 2025 05:12:40 +0000 ROA not after: Mon 22 Sep 2025 05:12:40 +0000 asID: 40676 IP address blocks: 207.174.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4b:52:86:34:82:49:3c:35:51:40:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Validity Not Before: Jun 24 05:12:40 2025 GMT Not After : Sep 22 05:12:40 2025 GMT Subject: CN=743ab12a-ff57-4187-8f05-0139231cf754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:c1:40:a3:ae:d1:63:c3:44:d2:b7:f0:e2: b2:08:0f:c6:23:c2:45:b6:88:38:de:5b:9a:cf:51: 4a:b6:24:12:04:aa:3f:28:6f:9b:86:96:c1:a7:35: 47:35:a1:6c:58:77:c4:c1:26:13:24:cb:a1:92:32: ac:09:ab:a6:e0:3d:a0:d0:3e:03:be:62:58:f5:48: 52:d8:e7:13:06:bc:bf:a3:4a:63:7d:d9:c1:4c:8a: 72:99:64:0a:b9:d3:d7:94:78:0b:c0:60:e1:e2:b1: 81:9f:90:90:50:62:5f:53:b1:00:b3:f7:57:ee:e9: a6:9e:0f:0f:f8:75:7f:fd:80:4b:97:56:9b:f7:ee: 8a:98:20:8e:cb:49:fe:ef:a5:a3:07:52:00:02:7d: 7e:47:29:bb:68:4e:8f:f9:26:eb:3c:63:d8:c3:4f: 88:9c:5d:d8:e5:0f:f1:d0:65:5f:54:a3:8c:95:a0: 51:9a:9f:65:c2:a3:8d:a5:f8:f9:1f:fa:c9:da:6a: ad:31:c8:d5:66:a4:0c:99:d4:1a:8d:46:41:b1:30: 39:14:06:90:f0:49:f1:ce:ac:ea:dc:f3:7c:20:13: 96:13:7c:18:58:99:3e:ee:d4:38:b5:1b:92:1c:19: 8e:63:38:90:72:c5:19:2d:ab:70:94:ac:ca:a3:5a: 74:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:64:50:CF:E8:BB:92:03:0B:A1:7C:E4:B6:94:C7:AB:26:2C:EE:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl X509v3 Authority Key Identifier: keyid:AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer sbgp-ipAddrBlock: critical IPv4: 207.174.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:eb:b6:1d:b7:f6:e6:b1:dc:fd:fc:44:d5:2b:ce:74:5b:16: d6:f4:63:be:61:0c:cc:6f:ae:61:ce:2c:68:0c:2c:81:e9:ef: 38:e5:0a:15:5c:e4:2b:f8:41:b6:5e:c7:38:d2:7d:6b:1a:56: 9d:5f:a8:99:93:05:da:13:03:52:f3:ee:33:81:ec:bb:63:a0: a1:8b:20:38:63:de:1c:db:9f:4e:fb:af:de:db:59:95:41:a2: 5e:cc:9e:4a:a3:8a:87:90:69:9b:71:59:ba:cf:e5:b2:e4:13: ad:4b:bd:68:7c:8c:6e:10:d4:a4:49:a3:41:c8:ee:b2:5c:49: 4f:39:59:f0:3b:46:1b:61:a1:ee:7d:5c:98:0c:42:33:79:4b: c0:69:5d:45:7e:90:ab:9e:49:84:d3:d9:e7:bb:4b:3d:35:aa: d1:3a:5f:83:20:16:04:87:14:43:73:e6:00:55:e7:39:08:0e: fd:c6:28:33:01:ab:aa:af:c7:15:8a:c5:50:0e:66:6a:17:fc: e4:f3:4d:26:48:11:e4:2f:cf:77:8f:50:75:f4:b2:a1:a5:a8: 20:cf:00:a4:92:a1:c7:fa:a1:97:8d:5d:f2:3c:e5:64:05:55: 17:30:03:d7:8e:fe:a4:e4:34:95:d4:d4:c6:ba:46:14:44:40: 24:85:41:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpLUoY0gkk8NVFACgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVkMDFkYWQtNjYyYy00NzIwLWFhYTUtZWEzZDAyNGJh ZDA3MB4XDTI1MDYyNDA1MTI0MFoXDTI1MDkyMjA1MTI0MFowLzEtMCsGA1UEAxMk NzQzYWIxMmEtZmY1Ny00MTg3LThmMDUtMDEzOTIzMWNmNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/jBQKOu0WPDRNK38OKyCA/GI8JFtog43lua z1FKtiQSBKo/KG+bhpbBpzVHNaFsWHfEwSYTJMuhkjKsCaum4D2g0D4DvmJY9UhS 2OcTBry/o0pjfdnBTIpymWQKudPXlHgLwGDh4rGBn5CQUGJfU7EAs/dX7ummng8P +HV//YBLl1ab9+6KmCCOy0n+76WjB1IAAn1+Rym7aE6P+SbrPGPYw0+InF3Y5Q/x 0GVfVKOMlaBRmp9lwqONpfj5H/rJ2mqtMcjVZqQMmdQajUZBsTA5FAaQ8Enxzqzq 3PN8IBOWE3wYWJk+7tQ4tRuSHBmOYziQcsUZLatwlKzKo1p05wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5kUM/ou5IDC6F85LaUx6smLO6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZWQw MWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNkMDI0YmFkMDcvZjkzNjdlNWItNmE4NS0z MGEyLTk3ZGMtNGU1ODFjMTZlNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWVkMDFkYWQtNjYyYy00NzIwLWFh YTUtZWEzZDAyNGJhZDA3L2FlZDAxZGFkLTY2MmMtNDcyMC1hYWE1LWVhM2QwMjRi YWQwNy5jcmwwHwYDVR0jBBgwFoAUryjl9YLM4ZXjBjlUXHntx3ilxU4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZWQwMWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNk MDI0YmFkMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz658MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDrth239uax3P38RNUrznRbFtb0Y75hDMxvrmHOLGgMLIHp7zjlChVc 5Cv4QbZexzjSfWsaVp1fqJmTBdoTA1Lz7jOB7LtjoKGLIDhj3hzbn077r97bWZVB ol7MnkqjioeQaZtxWbrP5bLkE61LvWh8jG4Q1KRJo0HI7rJcSU85WfA7Rhthoe59 XJgMQjN5S8BpXUV+kKueSYTT2ee7Sz01qtE6X4MgFgSHFENz5gBV5zkIDv3GKDMB q6qvxxWKxVAOZmoX/OTzTSZIEeQvz3ePUHX0sqGlqCDPAKSSocf6oZeNXfI85WQF VRcwA9eO/qTkNJXU1Ma6RhREQCSFQcA= -----END CERTIFICATE-----Generated at Sun Jun 29 01:10:42 2025 by rpki-client