$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: dskb2M7rxatsD0kWzne+W8JbMiSVI+lzdA6ZbRi4W9Y= Subject key identifier: 74:30:4F:0C:69:A6:D6:BA:35:0E:83:C2:FB:4A:7D:59:86:E9:77:97 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584A778089A56874DD5A494994C0 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:89:a5:68:74:dd:5a:49:49:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=1251b096-30e5-4c0a-88b6-a3be9613e156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:c5:8c:68:f3:5c:90:d7:ea:04:15:2b:b4: 54:ec:a8:66:49:2e:58:31:26:64:4e:b8:0a:8a:e9: 67:38:49:5f:2f:c3:de:07:fa:36:3e:1e:d1:f1:6a: 6c:ba:d4:c7:cc:89:0a:83:72:54:ef:d0:71:ad:16: 69:de:9c:ca:df:8a:e4:8c:8a:e0:ed:6e:4b:f6:b6: e7:69:6c:1b:09:e6:79:53:6a:a2:13:a0:23:80:5c: 67:2a:ef:c6:98:8f:26:78:b3:8f:cf:6f:71:58:e3: c4:d9:a5:33:62:00:78:ca:98:40:a4:88:b4:d2:8a: d4:0e:27:a4:b2:4c:eb:13:76:74:e3:6d:55:10:53: 33:c1:84:09:37:c9:b9:15:d5:6b:7e:3b:44:b2:f3: 8e:dd:93:4c:31:9a:7f:4e:b8:da:60:cd:21:10:7e: b1:b5:62:df:4b:58:2f:74:27:4d:36:4e:c6:b6:aa: 56:fd:e6:2e:b0:de:5f:0a:d4:b3:75:8c:8f:77:88: 53:dc:5c:06:64:d1:09:fc:fb:64:77:8f:3d:7d:82: b0:83:a7:38:24:10:4f:bd:69:b0:fb:34:09:c4:7c: 82:d8:c4:4a:81:b4:ad:4f:71:d8:a3:69:9b:c4:c1: b3:f6:66:b5:63:d4:04:74:7b:c0:c7:a9:02:49:91: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:30:4F:0C:69:A6:D6:BA:35:0E:83:C2:FB:4A:7D:59:86:E9:77:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c9:40:db:ba:41:1f:41:25:a5:bc:2d:22:92:e7:6c:4b:1b: 27:fe:af:cd:65:2f:92:56:f0:0c:b6:ef:3b:a8:44:a8:b0:dc: 15:d9:e5:d0:44:02:88:8a:19:dd:81:61:0a:ac:33:36:dc:f8: eb:8f:26:24:e0:e1:56:b1:bd:92:47:79:9d:63:98:3e:c2:c4: 50:72:ee:6a:3e:9b:c4:d1:89:38:ba:ac:08:42:2b:a9:ae:31: 7f:52:61:6a:54:cb:ca:8c:2a:e5:30:89:d8:7d:80:0c:1a:19: 57:f7:0e:f2:1b:05:e1:17:7d:66:61:b3:f3:21:d3:3f:7c:4e: c6:0f:ed:00:1d:e9:21:71:1a:04:71:eb:02:a1:20:59:70:48: 56:3f:5a:ac:30:64:89:6f:92:d2:22:8c:aa:81:e2:46:59:18: c4:ac:48:44:62:c2:1d:03:a7:e8:cc:f2:e3:67:c8:50:25:98: 13:ec:e5:ab:c4:fa:ba:79:09:c8:83:bd:80:3a:72:d7:09:cf: 2c:9c:3e:d9:97:76:b6:05:f8:fa:b7:21:7b:3e:bd:0a:7e:a7: 27:68:f4:6c:68:be:fc:94:2a:cf:3b:da:2d:92:2e:a9:ff:97: ed:db:ce:ca:05:9b:25:d5:9a:f9:82:d9:24:1a:17:97:78:16: 7a:68:5a:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gImlaHTdWklJlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MTI1MWIwOTYtMzBlNS00YzBhLTg4YjYtYTNiZTk2MTNlMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYfFjGjzXJDX6gQVK7RU7KhmSS5YMSZkTrgK iulnOElfL8PeB/o2Ph7R8WpsutTHzIkKg3JU79BxrRZp3pzK34rkjIrg7W5L9rbn aWwbCeZ5U2qiE6AjgFxnKu/GmI8meLOPz29xWOPE2aUzYgB4yphApIi00orUDiek skzrE3Z0421VEFMzwYQJN8m5FdVrfjtEsvOO3ZNMMZp/TrjaYM0hEH6xtWLfS1gv dCdNNk7GtqpW/eYusN5fCtSzdYyPd4hT3FwGZNEJ/Ptkd489fYKwg6c4JBBPvWmw +zQJxHyC2MRKgbStT3HYo2mbxMGz9ma1Y9QEdHvAx6kCSZH8SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQwTwxppta6NQ6DwvtKfVmG6XeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELJQNu6QR9BJaW8LSKS52xLGyf+r81lL5JW8Ay27zuoRKiw3BXZ5dBE AoiKGd2BYQqsMzbc+OuPJiTg4VaxvZJHeZ1jmD7CxFBy7mo+m8TRiTi6rAhCK6mu MX9SYWpUy8qMKuUwidh9gAwaGVf3DvIbBeEXfWZhs/Mh0z98TsYP7QAd6SFxGgRx 6wKhIFlwSFY/WqwwZIlvktIijKqB4kZZGMSsSERiwh0Dp+jM8uNnyFAlmBPs5avE +rp5CciDvYA6ctcJzyycPtmXdrYF+Pq3IXs+vQp+pydo9GxovvyUKs872i2SLqn/ l+3bzsoFmyXVmvmC2SQaF5d4FnpoWgc= -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:08 2025 by rpki-client