$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa File: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (raw, json) Hash identifier: a8dSzlDL8pywXEil1G1uUOCsQu8EsliVZvsYFAgZBJQ= Subject key identifier: 43:38:FB:5A:4F:32:D7:E5:F3:11:EF:BD:39:AD:E3:4C:46:06:53:2C Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584AA160E2C8D9C78BBDE7429100 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 46687 IP address blocks: 207.68.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e2:c8:d9:c7:8b:bd:e7:42:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=c74fcdd7-9228-440f-9a85-51f49bfaa02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b6:f3:5d:32:43:e7:12:41:52:50:6e:58:91: 87:5e:d7:a4:1e:9d:01:d1:9f:15:19:41:86:df:ec: 10:a4:94:b1:9f:85:cf:84:1b:c8:46:64:bc:5f:d7: 23:28:6c:05:ce:61:82:d3:2b:d2:36:10:a3:df:5d: 03:74:71:a1:4f:d7:53:17:0a:9e:23:50:50:6b:04: 24:90:63:a1:b2:3b:ff:ab:4b:47:7d:ba:17:41:f6: da:04:e0:2a:27:1f:37:6f:28:a8:31:a8:2c:29:43: 84:99:db:19:64:2c:e0:72:bc:ed:ea:6b:1f:8c:63: a7:ca:33:45:16:36:b5:6d:bd:e0:18:03:19:91:e1: 4d:64:b3:73:e6:6e:e7:a4:94:c9:5f:a7:fa:d5:d4: 5b:fe:79:72:0d:0c:66:59:6a:b7:a0:03:b9:b5:7f: 88:a2:03:e7:cb:81:ef:95:a7:35:05:c9:25:b7:17: a4:18:0c:4e:3b:03:2f:93:c8:fb:7e:d6:5f:03:01: 67:8b:97:81:7f:52:05:fe:89:00:2f:7a:6c:68:d8: a7:16:3c:22:8a:6f:b4:0d:d7:0b:15:55:0a:3c:9f: c6:4b:3e:3b:0c:ef:b5:57:0b:82:5d:13:39:60:d5: f2:82:38:9e:40:7d:f1:a1:bf:0b:d0:90:04:cd:c9: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:38:FB:5A:4F:32:D7:E5:F3:11:EF:BD:39:AD:E3:4C:46:06:53:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 207.68.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9e:99:f7:a0:3e:8a:08:5d:32:63:d3:a1:14:85:da:d1:3c: a8:c9:18:ba:ca:cb:79:16:7a:dd:39:c7:f4:5e:31:b4:cd:9f: a1:78:73:d4:33:03:d6:1e:13:41:f0:bd:28:2d:3a:77:d4:d4: 7f:64:35:ad:a5:2c:8a:15:57:d9:49:f7:8b:aa:ef:23:94:3e: d4:9c:e7:f2:9c:95:bf:d6:76:f7:9c:fc:f7:b2:ac:e5:31:0c: b6:96:21:57:ef:ee:cd:3d:87:da:7d:e4:bc:fd:fe:8d:9d:e3: 9e:c5:be:92:31:a7:31:28:66:ba:50:2d:00:c3:cf:c7:8e:e8: 2c:b3:4a:b3:dc:5c:fe:6b:78:e5:60:69:b8:9f:ca:b8:ef:eb: ea:2d:a5:50:d0:76:0e:b8:74:5e:ee:ac:dd:85:58:9d:ee:79: 60:1e:c8:10:c2:ae:f9:4e:1b:05:08:7f:11:b1:77:23:ed:85: 98:23:61:60:7c:8c:2f:b1:cd:e4:0f:aa:73:6f:4e:49:c0:c6: 45:8e:75:2d:5e:3b:5b:6a:be:e2:cf:cd:9c:10:43:c1:c4:ae: 01:27:ff:1c:51:5b:19:4a:57:16:d9:38:83:55:07:ab:1a:12: bb:ba:24:f5:84:bb:b3:38:6d:96:5a:44:94:3a:9f:5f:1a:91: d3:96:d4:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOLI2ceLvedCkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk Yzc0ZmNkZDctOTIyOC00NDBmLTlhODUtNTFmNDliZmFhMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rbzXTJD5xJBUlBuWJGHXtekHp0B0Z8VGUGG 3+wQpJSxn4XPhBvIRmS8X9cjKGwFzmGC0yvSNhCj310DdHGhT9dTFwqeI1BQawQk kGOhsjv/q0tHfboXQfbaBOAqJx83byioMagsKUOEmdsZZCzgcrzt6msfjGOnyjNF Fja1bb3gGAMZkeFNZLNz5m7npJTJX6f61dRb/nlyDQxmWWq3oAO5tX+IogPny4Hv lac1BckltxekGAxOOwMvk8j7ftZfAwFni5eBf1IF/okAL3psaNinFjwiim+0DdcL FVUKPJ/GSz47DO+1VwuCXRM5YNXygjieQH3xob8L0JAEzclMxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM4+1pPMtfl8xHvvTmt40xGBlMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvM2I3MGVmNDktNjFlOC0z YzFkLWEzM2EtNTFkMTk0YWNmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz0TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWemfegPooIXTJj06EUhdrRPKjJGLrKy3kWet05x/ReMbTNn6F4c9Qz A9YeE0HwvSgtOnfU1H9kNa2lLIoVV9lJ94uq7yOUPtSc5/Kclb/Wdvec/PeyrOUx DLaWIVfv7s09h9p95Lz9/o2d457FvpIxpzEoZrpQLQDDz8eO6CyzSrPcXP5reOVg abifyrjv6+otpVDQdg64dF7urN2FWJ3ueWAeyBDCrvlOGwUIfxGxdyPthZgjYWB8 jC+xzeQPqnNvTknAxkWOdS1eO1tqvuLPzZwQQ8HErgEn/xxRWxlKVxbZOINVB6sa Eru6JPWEu7M4bZZaRJQ6n18akdOW1PI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:11 2025 by rpki-client