$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa File: cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa (raw, json) Hash identifier: pdR1F+Zb+k/P+EYbIpJmmvSb1J5Ct1TVuhlgevgVzRg= Subject key identifier: 5C:EF:93:EE:2C:1C:F4:47:37:03:D9:84:4D:C7:1D:1E:6D:18:64:4A Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584A7A4B4C0B1B615BE65BF77100 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 400790 IP address blocks: 207.228.218.0/24 maxlen: 24 2606:f6c0:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:4c:0b:1b:61:5b:e6:5b:f7:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=55db41e5-e82c-4d74-b0b2-53637286dc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:97:58:83:63:35:ae:bf:4d:f5:45:32:99: b9:7a:14:c8:56:d7:04:e0:df:1d:07:e5:55:e7:a3: e4:75:40:89:19:48:89:9a:33:e8:4d:10:21:31:f9: eb:53:10:ef:59:d1:c7:40:af:04:a9:3c:28:9a:5e: 21:db:a1:1d:12:7f:07:26:0a:68:30:dc:eb:4a:eb: e4:d1:46:0c:00:5c:b6:e9:68:4a:b3:8d:aa:3b:38: b6:f1:eb:bb:fd:9f:b4:b0:bb:8e:92:89:83:17:db: e3:72:5e:94:09:01:64:49:74:83:1f:54:d9:3e:bf: ba:b0:93:1b:70:e8:e6:1e:8c:9a:65:af:99:4c:1a: ea:e0:f0:0b:d8:c4:3b:25:ff:ef:98:28:c1:28:44: 3b:70:77:88:bd:ec:8f:8d:0b:af:2a:7a:e4:d2:11: 4d:d2:ab:f9:2d:75:2b:b1:a4:7a:5e:0d:28:d9:c8: 3c:8a:af:53:3a:a1:fe:76:30:62:67:6d:e1:65:d0: 92:fa:95:3a:85:d8:7f:ac:09:66:98:0f:f0:19:1f: 20:f9:c3:cd:7c:f5:c1:7e:7c:98:0e:1c:20:e4:b2: 59:21:b7:49:91:e4:ea:8b:46:53:e1:c7:54:f1:d1: ee:46:90:f8:e8:ee:ad:22:0a:a2:c1:09:40:ca:49: 34:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EF:93:EE:2C:1C:F4:47:37:03:D9:84:4D:C7:1D:1E:6D:18:64:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.218.0/24 IPv6: 2606:f6c0:c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:97:bc:88:44:dd:2c:a4:a9:17:bc:92:69:61:08:61:95:11: e7:6b:17:9f:44:a4:e7:0d:48:e7:14:de:c2:9d:bb:19:45:36: d8:c8:b7:21:f6:7e:d3:c9:e1:52:a5:7e:0d:10:ea:ed:cd:98: 85:24:03:71:92:65:01:ac:39:75:d7:ba:36:9a:7a:8e:ae:72: 99:ba:a2:6c:f5:98:24:a1:e3:ef:30:16:6b:05:d0:4f:ee:49: f4:b7:0b:bd:8b:80:e5:5c:95:ef:2c:a8:16:94:95:34:d8:13: 5a:64:59:a4:f1:b3:90:43:4e:a2:fb:6c:83:c0:c9:98:df:52: 9a:59:dd:6f:43:3f:54:72:e1:24:fc:d6:b0:03:6e:ee:03:ee: 3e:4c:47:2e:a1:1d:74:c4:db:f6:0d:be:cd:c6:c0:63:ca:24: 57:ce:7f:8e:0c:6a:86:eb:d5:8d:c1:0c:62:7c:ab:a0:fb:a7: bb:81:96:82:55:d1:5d:86:c2:6e:94:9b:e8:4e:87:2e:14:b8: da:bf:78:f0:63:e8:5e:de:d8:9a:36:c9:73:00:7e:9c:77:23: 4e:13:6d:83:73:58:ec:53:b5:56:f2:bf:d7:19:7b:95:fd:03: d4:54:2d:09:b4:d6:9e:87:68:a3:97:b7:98:d8:9b:c5:31:f2: cf:73:75:a9 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEp6S0wLG2Fb5lv3cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NTVkYjQxZTUtZTgyYy00ZDc0LWIwYjItNTM2MzcyODZkYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf+XWINjNa6/TfVFMpm5ehTIVtcE4N8dB+VV 56PkdUCJGUiJmjPoTRAhMfnrUxDvWdHHQK8EqTwoml4h26EdEn8HJgpoMNzrSuvk 0UYMAFy26WhKs42qOzi28eu7/Z+0sLuOkomDF9vjcl6UCQFkSXSDH1TZPr+6sJMb cOjmHoyaZa+ZTBrq4PAL2MQ7Jf/vmCjBKEQ7cHeIveyPjQuvKnrk0hFN0qv5LXUr saR6Xg0o2cg8iq9TOqH+djBiZ23hZdCS+pU6hdh/rAlmmA/wGR8g+cPNfPXBfnyY Dhwg5LJZIbdJkeTqi0ZT4cdU8dHuRpD46O6tIgqiwQlAykk0/QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFzvk+4sHPRHNwPZhE3HHR5tGGRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvY2Y3YjEyNjgtZWY4Zi0z NGVkLTlhOTgtNzAzZGQ1NjBlMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TaMA8E AgACMAkDBwAmBvbAAMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMZe8iETdLKSpF7ySaWEIYZUR52sXn0Sk 5w1I5xTewp27GUU22Mi3IfZ+08nhUqV+DRDq7c2YhSQDcZJlAaw5dde6Npp6jq5y mbqibPWYJKHj7zAWawXQT+5J9LcLvYuA5VyV7yyoFpSVNNgTWmRZpPGzkENOovts g8DJmN9Smlndb0M/VHLhJPzWsANu7gPuPkxHLqEddMTb9g2+zcbAY8okV85/jgxq huvVjcEMYnyroPunu4GWglXRXYbCbpSb6E6HLhS42r948GPoXt7YmjbJcwB+nHcj ThNtg3NY7FO1VvK/1xl7lf0D1FQtCbTWnodoo5e3mNibxTHyz3N1qQ== -----END CERTIFICATE-----Generated at Wed Aug 6 09:25:37 2025 by rpki-client