$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa File: 0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa (raw, json) Hash identifier: QkRjsklsMsYx+Q1rmMKjgVkQ7JP5rIwpohTt1yXdGa4= Subject key identifier: 63:E1:2E:F3:1E:A0:B9:67:46:11:BF:EA:BE:06:70:97:BF:AA:F4:8F Certificate issuer: /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Certificate serial: 010D0C9F4328584A71EB508834D7C5BD69A8C7E0 Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 16509 IP address blocks: 204.128.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:50:88:34:d7:c5:bd:69:a8:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=12df12bd-e348-4a9e-bad6-d59fc4a55f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d7:b9:9e:d6:87:4f:82:20:7c:df:62:b3:bb: e3:a6:bf:bd:3a:12:95:16:40:7f:68:f2:ef:35:a0: 1d:29:60:86:e3:cc:bc:c4:52:32:0f:78:77:85:60: 7d:ab:b8:a1:90:4f:fb:c4:6c:c6:78:a7:0b:a8:d4: f4:11:f8:53:44:bf:da:85:19:7e:31:41:e0:2e:6e: 91:1c:88:9d:bc:99:08:5a:4d:53:49:c2:cc:94:b7: 7e:bd:5b:89:7f:f7:fd:82:35:9d:59:07:40:89:25: 7b:82:bb:e7:4d:73:1d:5e:10:f1:2d:af:e4:de:99: 09:09:e9:89:d9:54:89:4f:54:9d:52:6c:d7:71:c5: 23:bb:fb:a9:ca:3b:ca:ca:67:b3:36:be:49:c2:eb: c8:d4:52:30:04:47:fc:fd:0c:91:5c:7e:8d:e2:04: 44:ef:92:2c:d5:17:d2:36:1e:41:4d:bc:3a:a0:67: 29:e9:bc:93:89:ab:fb:cd:f5:a8:cd:21:f7:19:2a: fe:90:1c:42:4b:07:06:35:6e:c9:6d:35:3c:0e:3b: 6f:87:1b:3b:63:2c:d0:e4:5b:26:ae:b9:05:87:29: a9:dc:f3:11:59:37:8f:af:7a:f3:e2:61:82:55:f3: 53:f6:a8:29:e8:fc:6f:ff:bc:03:7c:f5:2e:cc:b6: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E1:2E:F3:1E:A0:B9:67:46:11:BF:EA:BE:06:70:97:BF:AA:F4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/0dfa09dd-8c83-31be-b25b-bfcfd3f10baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl X509v3 Authority Key Identifier: keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer sbgp-ipAddrBlock: critical IPv4: 204.128.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e5:12:1e:fa:64:ae:14:ea:25:f6:8c:56:a8:be:ac:ae:51: 59:00:c9:59:c2:67:0a:64:cc:18:dc:e7:eb:d9:f8:3e:09:bf: b5:ef:94:fa:f4:74:e6:f9:4b:8e:33:0c:89:37:5a:33:bc:b7: 09:44:90:f4:05:da:96:23:28:92:97:8c:68:e1:93:ba:2a:0f: 51:81:95:82:0e:83:39:ff:8c:9d:cf:6b:52:5d:df:f7:eb:ee: 7f:5f:0d:2b:38:01:76:9f:d5:bf:13:27:2a:1c:7e:d1:c7:4d: 8b:16:fe:ed:3e:42:54:0a:ca:5a:8b:48:8c:be:8f:95:76:25: 73:bd:e5:04:9b:94:df:67:35:80:f6:1f:41:89:70:a2:a2:4a: 33:ff:c5:01:95:c0:38:58:ea:ce:42:e7:13:ef:e5:07:64:cc: c3:e2:84:a9:53:09:56:e3:93:74:70:48:21:9f:06:ab:c3:3d: b1:e3:b9:a8:67:88:c3:9b:1a:ec:14:b9:90:72:05:1a:cb:5e: 98:31:55:19:a1:91:42:38:f2:00:7b:44:42:98:99:fb:ec:62: 87:a5:5c:88:3d:63:0f:1c:4d:c7:f8:5e:cb:ee:b8:8f:44:b0: d6:a6:34:48:47:8c:e7:43:30:f8:2a:fa:fb:7d:ac:92:14:7e: e8:54:a8:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61CINNfFvWmox+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RkNTYwZDQtNzdjOS00YWI2LWIyMmItOTc3MWFhM2I2 N2MyMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MTJkZjEyYmQtZTM0OC00YTllLWJhZDYtZDU5ZmM0YTU1ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhte5ntaHT4IgfN9is7vjpr+9OhKVFkB/aPLv NaAdKWCG48y8xFIyD3h3hWB9q7ihkE/7xGzGeKcLqNT0EfhTRL/ahRl+MUHgLm6R HIidvJkIWk1TScLMlLd+vVuJf/f9gjWdWQdAiSV7grvnTXMdXhDxLa/k3pkJCemJ 2VSJT1SdUmzXccUju/upyjvKymezNr5JwuvI1FIwBEf8/QyRXH6N4gRE75Is1RfS Nh5BTbw6oGcp6byTiav7zfWozSH3GSr+kBxCSwcGNW7JbTU8Djtvhxs7YyzQ5Fsm rrkFhymp3PMRWTePr3rz4mGCVfNT9qgp6Pxv/7wDfPUuzLaL9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPhLvMeoLlnRhG/6r4GcJe/qvSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1 NjBkNC03N2M5LTRhYjYtYjIyYi05NzcxYWEzYjY3YzIvMGRmYTA5ZGQtOGM4My0z MWJlLWIyNWItYmZjZmQzZjEwYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2RkNTYwZDQtNzdjOS00YWI2LWIy MmItOTc3MWFhM2I2N2MyLzdkZDU2MGQ0LTc3YzktNGFiNi1iMjJiLTk3NzFhYTNi NjdjMi5jcmwwHwYDVR0jBBgwFoAUaH23I0rV6sAiz6qA1UzejvWxHL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1NjBkNC03N2M5LTRhYjYtYjIyYi05Nzcx YWEzYjY3YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzICvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAflEh76ZK4U6iX2jFaovqyuUVkAyVnCZwpkzBjc5+vZ+D4Jv7XvlPr0 dOb5S44zDIk3WjO8twlEkPQF2pYjKJKXjGjhk7oqD1GBlYIOgzn/jJ3Pa1Jd3/fr 7n9fDSs4AXaf1b8TJyocftHHTYsW/u0+QlQKylqLSIy+j5V2JXO95QSblN9nNYD2 H0GJcKKiSjP/xQGVwDhY6s5C5xPv5QdkzMPihKlTCVbjk3RwSCGfBqvDPbHjuahn iMObGuwUuZByBRrLXpgxVRmhkUI48gB7REKYmfvsYoelXIg9Yw8cTcf4XsvuuI9E sNamNEhHjOdDMPgq+vt9rJIUfuhUqPY= -----END CERTIFICATE-----Generated at Mon Aug 4 14:59:06 2025 by rpki-client