$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa File: b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa (raw, json) Hash identifier: 8jUlbby49Ouc/WkR4WQRg5u8FzVXKnLADGXyYU6ffz0= Subject key identifier: 42:67:31:96:0A:AD:86:4E:B3:34:74:B7:E4:1E:59:72:BD:9B:80:65 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584AD3A0F1770492C29A5694ACE0 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 32034 IP address blocks: 207.241.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f1:77:04:92:c2:9a:56:94:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=ec09998e-a4cd-46cf-93f7-7171639b42f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:d4:5c:a1:20:0e:0b:20:fd:0a:99:96:ef: 0b:0f:fc:6e:64:0c:ad:9f:3f:9f:6b:d4:1d:89:ae: d8:ab:5f:09:2e:e1:58:e9:e3:20:fc:1c:75:95:eb: dc:14:45:33:31:8f:2c:ec:7e:02:b8:8d:2f:4b:0f: 95:e5:c5:15:5f:55:97:04:46:80:98:36:65:4b:93: 05:ca:4c:3c:7b:fa:11:8a:22:4d:e3:6e:be:69:aa: ea:33:e6:8a:6b:ff:04:ab:79:c6:ac:d4:de:4b:2e: ed:5c:78:e1:99:1c:6d:cc:26:11:90:c2:c4:52:03: 64:f4:8a:88:38:14:e6:ee:7d:f6:8d:b0:ac:60:d2: a8:fb:39:c3:f6:73:26:dd:23:db:27:62:f8:9f:08: 5b:ee:8a:bc:5c:a0:b0:0a:4d:4c:ae:cc:5b:97:61: cb:62:e6:51:81:1b:30:13:9d:de:41:c6:b8:ba:9e: 14:76:b0:5e:1c:52:bf:e7:83:5e:f9:6f:05:31:31: af:6f:e4:55:45:44:5d:30:d7:5e:9a:ea:a2:0a:1c: a5:dc:bc:32:e1:d3:5d:8f:ed:c7:c7:d5:87:fe:8d: 92:0d:2d:20:47:a3:8c:9c:51:64:c0:9c:ba:61:3a: 14:fb:37:cb:58:47:5e:2f:51:e5:f4:fd:8e:86:38: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:67:31:96:0A:AD:86:4E:B3:34:74:B7:E4:1E:59:72:BD:9B:80:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:67:64:40:3b:a5:72:85:8f:d3:0e:8e:9a:b9:d6:d9:20:7a: 91:2f:af:bc:96:f9:66:e0:1a:0c:f9:87:ba:c7:61:63:a4:b1: 27:05:8b:4b:e2:56:31:b2:44:d9:26:3f:9d:9d:c3:26:b2:a7: 00:e5:63:96:bd:3f:a6:90:84:8c:47:5b:f9:f3:a5:c7:91:4d: 3f:f6:30:65:c7:3d:35:c5:0c:b1:c2:6c:da:66:67:07:39:ee: 9f:9e:6c:f3:37:03:b8:36:10:7d:dc:0f:1b:04:0a:2c:a3:15: 1e:06:af:f9:d9:c6:ac:74:ab:a5:76:db:b2:db:1e:21:88:49: f6:60:b6:09:99:d8:d8:3b:b2:1f:1e:da:4e:67:0f:f3:08:dd: c6:3a:a5:d2:f7:44:41:47:ba:12:2d:4a:e3:1b:30:a0:ca:f3: 62:3d:ec:3b:78:e9:81:64:ac:50:00:ac:8d:0f:e7:8e:3d:f9: ee:a0:c9:c8:2a:2b:a2:2a:5f:1b:70:b0:29:fa:5e:81:87:a4: 03:d9:25:3a:4a:69:8c:c5:fd:37:0b:af:45:49:a1:0f:eb:10: 72:4c:08:b0:9b:0f:dc:63:f4:5c:f0:3b:a1:46:2f:af:86:5f: f0:e7:74:c7:c4:f4:46:39:c0:94:c2:5a:3e:9e:70:00:fc:34: f9:e8:69:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPF3BJLCmlaUrOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZWMwOTk5OGUtYTRjZC00NmNmLTkzZjctNzE3MTYzOWI0MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBHUXKEgDgsg/QqZlu8LD/xuZAytnz+fa9Qd ia7Yq18JLuFY6eMg/Bx1levcFEUzMY8s7H4CuI0vSw+V5cUVX1WXBEaAmDZlS5MF ykw8e/oRiiJN426+aarqM+aKa/8Eq3nGrNTeSy7tXHjhmRxtzCYRkMLEUgNk9IqI OBTm7n32jbCsYNKo+znD9nMm3SPbJ2L4nwhb7oq8XKCwCk1Mrsxbl2HLYuZRgRsw E53eQca4up4UdrBeHFK/54Ne+W8FMTGvb+RVRURdMNdemuqiChyl3Lwy4dNdj+3H x9WH/o2SDS0gR6OMnFFkwJy6YToU+zfLWEdeL1Hl9P2Ohjg9WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJnMZYKrYZOszR0t+QeWXK9m4BlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvYjIxMjc2YjMtNmE2Zi0z ZTc3LTk1YzQtY2Q4MTJhNmIxYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/G5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdnZEA7pXKFj9MOjpq51tkgepEvr7yW+WbgGgz5h7rHYWOksScFi0vi VjGyRNkmP52dwyaypwDlY5a9P6aQhIxHW/nzpceRTT/2MGXHPTXFDLHCbNpmZwc5 7p+ebPM3A7g2EH3cDxsECiyjFR4Gr/nZxqx0q6V227LbHiGISfZgtgmZ2Ng7sh8e 2k5nD/MI3cY6pdL3REFHuhItSuMbMKDK82I97Dt46YFkrFAArI0P5449+e6gycgq K6IqXxtwsCn6XoGHpAPZJTpKaYzF/TcLr0VJoQ/rEHJMCLCbD9xj9FzwO6FGL6+G X/DndMfE9EY5wJTCWj6ecAD8NPnoaec= -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:03 2025 by rpki-client