$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa File: f842fac7-cd73-3534-92f5-b9959d9393b4.roa (raw, json) Hash identifier: XA2WKHt5SDXoy1EFxgYVWimvcmEttR3FzLGpMNiQsfA= Subject key identifier: 0A:B1:D7:4D:F0:87:02:8D:6E:9B:0F:B7:4C:F6:32:55:9E:DA:2F:9D Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584A3B7AFC8FDBE47067A4B56D00 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 46414 IP address blocks: 97.107.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fc:8f:db:e4:70:67:a4:b5:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=5d7740fb-9ed4-4d45-bd2c-f7179fe45c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:c6:d8:4b:67:b7:d0:35:13:8b:04:b1:2b: c3:66:13:51:59:7e:03:9d:00:05:65:a4:d4:25:eb: 51:67:46:94:56:59:77:06:71:eb:c3:09:61:82:b5: 26:06:80:4b:9c:0a:ff:91:ab:91:b3:87:fe:6c:12: f1:2e:ec:2d:a2:19:af:09:cd:af:cd:2c:f7:de:39: 80:ad:f1:1f:b8:9f:12:9c:65:af:6d:10:8d:04:aa: b6:2b:2d:8f:45:03:b8:36:25:ea:50:f9:1f:66:1d: a5:0a:d8:98:7b:cb:5e:b1:a5:41:f8:66:f7:65:68: d4:9f:eb:81:8a:50:ea:85:b5:34:4b:4e:c8:c7:41: 98:fb:95:44:d6:7e:4a:c8:ec:cb:0d:02:cf:ae:d2: c7:2f:fb:a2:4b:c8:3e:df:44:05:d2:5f:1b:85:76: 69:ba:ec:8d:36:45:56:7d:f3:f0:15:5f:72:fd:62: 1d:9d:cc:fa:b5:74:86:d9:df:cd:87:66:eb:d5:36: fa:b8:97:5b:f6:dd:d9:31:37:74:2c:01:7e:98:07: c1:7d:30:53:9c:9d:c9:72:79:a2:70:01:60:5b:ee: 0b:5e:0f:41:d8:bb:df:70:c2:5a:23:d7:48:03:2d: 10:87:2b:54:fc:cc:32:6f:95:1e:6c:50:fb:68:b3: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B1:D7:4D:F0:87:02:8D:6E:9B:0F:B7:4C:F6:32:55:9E:DA:2F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 97.107.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:32:47:5a:3c:0b:31:2f:59:09:ae:dc:cf:eb:42:1c:d6:29: c5:64:c0:5d:ea:eb:3c:b0:b7:f1:a3:1d:6b:bd:d6:de:28:94: e6:0f:ce:0c:d8:43:7f:83:04:c7:46:2e:10:6a:d0:c7:5b:69: 4b:d6:41:87:d3:31:eb:c3:b2:7d:16:92:ec:e4:21:86:ac:d9: 66:ce:86:03:34:68:2d:40:18:05:79:19:89:d9:0b:f8:76:0f: e1:ae:c3:ee:dc:5c:9a:0d:da:08:4e:55:b7:84:ff:5b:a2:ef: 09:42:36:81:49:d3:b5:e1:47:cf:7f:f1:af:92:92:b2:98:90: 2f:be:5c:85:da:19:4a:af:78:04:d9:a2:31:06:c9:50:53:aa: 61:1e:9e:74:35:4c:3e:0b:8b:4e:c5:64:18:90:39:cc:49:f1: ec:8d:ea:8f:a8:2d:ea:07:74:37:38:ec:e0:47:5b:3c:34:86: c6:b5:a0:8b:f9:73:19:c7:c3:a4:c3:60:99:5a:e7:e2:12:95: 26:76:41:b7:eb:08:92:f8:cb:08:32:0b:b2:ed:f6:7a:92:87: ad:11:43:b4:ad:14:af:de:db:3b:df:b7:a5:b4:af:30:0a:cd: 19:bb:98:72:75:41:8d:d8:57:7e:81:b2:3e:9e:44:c4:4a:9c: b6:b4:0e:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evyP2+RwZ6S1bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NWQ3NzQwZmItOWVkNC00ZDQ1LWJkMmMtZjcxNzlmZTQ1Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozbG2Etnt9A1E4sEsSvDZhNRWX4DnQAFZaTU JetRZ0aUVll3BnHrwwlhgrUmBoBLnAr/kauRs4f+bBLxLuwtohmvCc2vzSz33jmA rfEfuJ8SnGWvbRCNBKq2Ky2PRQO4NiXqUPkfZh2lCtiYe8tesaVB+Gb3ZWjUn+uB ilDqhbU0S07Ix0GY+5VE1n5KyOzLDQLPrtLHL/uiS8g+30QF0l8bhXZpuuyNNkVW ffPwFV9y/WIdncz6tXSG2d/Nh2br1Tb6uJdb9t3ZMTd0LAF+mAfBfTBTnJ3Jcnmi cAFgW+4LXg9B2LvfcMJaI9dIAy0QhytU/Mwyb5UebFD7aLMWuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqx103whwKNbpsPt0z2MlWe2i+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvZjg0MmZhYzctY2Q3My0z NTM0LTkyZjUtYjk5NTlkOTM5M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYWucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4yR1o8CzEvWQmu3M/rQhzWKcVkwF3q6zywt/GjHWu91t4olOYPzgzY Q3+DBMdGLhBq0MdbaUvWQYfTMevDsn0WkuzkIYas2WbOhgM0aC1AGAV5GYnZC/h2 D+Guw+7cXJoN2ghOVbeE/1ui7wlCNoFJ07XhR89/8a+SkrKYkC++XIXaGUqveATZ ojEGyVBTqmEennQ1TD4Li07FZBiQOcxJ8eyN6o+oLeoHdDc47OBHWzw0hsa1oIv5 cxnHw6TDYJla5+ISlSZ2QbfrCJL4ywgyC7Lt9nqSh60RQ7StFK/e2zvft6W0rzAK zRm7mHJ1QY3YV36Bsj6eRMRKnLa0Dmo= -----END CERTIFICATE-----Generated at Mon Jun 30 19:12:22 2025 by rpki-client