$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa File: a7eb1b7a-38b5-351a-9820-21a52e05575a.roa (raw, json) Hash identifier: wkSloJdA6qdpMYqndx3do9UKa6p/nrErP8z8ymQz794= Subject key identifier: CD:D5:55:EB:49:60:D3:80:2C:98:E8:5D:03:C1:33:57:69:34:EB:D2 Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099 Certificate serial: 010D0C9F4328584A6C55E3228ACB16029AE11F00 Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 207.188.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:e3:22:8a:cb:16:02:9a:e1:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=a1958a9b-aa0e-4095-bdaf-2ce65ec9332b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:cf:b3:1c:0f:b7:34:7d:0a:fa:28:33:ee: 3d:1a:ef:48:f0:7b:84:24:b1:98:fe:f5:bb:01:ca: 42:15:04:81:60:88:c4:1c:12:6b:ff:3d:88:52:74: a3:cb:fe:07:85:77:be:d1:15:0a:f0:00:8d:fb:f7: b9:63:00:31:a8:8f:2a:7f:87:9d:6c:df:2f:74:29: 79:ca:a3:cb:35:42:8b:4f:57:30:3e:35:25:ce:78: d0:eb:70:ca:dc:0e:9b:13:c3:10:c1:cd:40:eb:b0: ad:cf:5d:60:87:21:2f:c1:da:19:18:dd:68:89:e5: 3a:7c:ac:3d:6c:93:41:9f:17:79:a0:c3:7f:32:23: 0a:4d:de:c9:0d:8e:f7:3a:5d:c5:0f:c2:95:41:c8: 02:0c:d7:2f:8c:21:33:a0:fe:e8:f9:e9:15:a2:12: 91:f5:fb:e4:c9:11:43:99:a0:4b:e7:a6:e9:0f:a8: 58:9d:ae:8d:7d:8e:49:0e:48:5f:d3:90:50:c3:90: 38:fb:63:01:cf:c3:3b:54:3b:90:ef:92:3f:18:64: ea:0a:bb:db:12:eb:eb:38:40:8c:24:99:9e:d4:e7: a4:8a:74:7e:3b:a1:94:9c:1c:67:24:f9:81:22:5a: 7e:a4:8c:f5:b3:47:49:ae:13:42:a5:a5:bb:30:e2: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D5:55:EB:49:60:D3:80:2C:98:E8:5D:03:C1:33:57:69:34:EB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a7eb1b7a-38b5-351a-9820-21a52e05575a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl X509v3 Authority Key Identifier: keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer sbgp-ipAddrBlock: critical IPv4: 207.188.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cb:65:ab:46:ca:d1:cc:3c:86:bb:04:bc:da:0a:fe:d9:a1: 16:ae:f0:38:0d:cd:27:f8:fd:a0:5d:73:d3:b6:83:a3:45:2e: 1d:b1:8e:b0:8b:72:f5:57:64:9a:e6:e6:d2:2b:2b:cb:ab:1d: 02:13:80:e5:62:ad:1f:4e:84:e3:1b:c3:c8:94:53:ec:0c:2c: fd:4d:b4:92:4d:b9:50:44:44:9a:a3:ef:ee:b1:c7:23:15:7e: 46:9c:9f:93:80:65:82:4f:16:5f:36:15:64:4d:90:c5:82:a0: f6:fd:fc:6d:54:71:ab:42:fa:be:54:5d:b9:e6:d6:33:62:4b: 0d:32:4b:47:82:78:e1:80:8a:e1:0f:25:a2:dc:fb:1f:58:df: 03:48:91:dd:20:8d:99:40:b2:26:92:c8:39:32:b9:32:0a:71: be:3f:44:6d:ba:f6:95:60:e4:9f:35:52:c3:a7:fa:a2:86:d8: ed:7a:0e:d8:0d:a9:ce:20:51:1f:e0:fd:f9:e7:e2:27:ab:d6: c4:88:95:6a:fb:d5:86:d7:a7:69:31:7f:38:44:b4:bd:6d:65: f4:05:6d:4b:a4:9f:be:c1:62:d2:fc:3d:94:1c:3b:68:ae:a4: a9:00:0d:42:ac:5a:0d:48:95:a7:05:08:1e:3b:a9:57:3a:0f: f8:2d:4b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVeMiissWAprhHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOWY2MTQtYzYyMC00MmU0LWFjYWQtYjMyOGQ2YTk3 MDk5MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YTE5NThhOWItYWEwZS00MDk1LWJkYWYtMmNlNjVlYzkzMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQLPsxwPtzR9CvooM+49Gu9I8HuEJLGY/vW7 AcpCFQSBYIjEHBJr/z2IUnSjy/4HhXe+0RUK8ACN+/e5YwAxqI8qf4edbN8vdCl5 yqPLNUKLT1cwPjUlznjQ63DK3A6bE8MQwc1A67Ctz11ghyEvwdoZGN1oieU6fKw9 bJNBnxd5oMN/MiMKTd7JDY73Ol3FD8KVQcgCDNcvjCEzoP7o+ekVohKR9fvkyRFD maBL56bpD6hYna6NfY5JDkhf05BQw5A4+2MBz8M7VDuQ75I/GGTqCrvbEuvrOECM JJme1OekinR+O6GUnBxnJPmBIlp+pIz1s0dJrhNCpaW7MOJouQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3VVetJYNOALJjoXQPBM1dpNOvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5 ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4ZDZhOTcwOTkvYTdlYjFiN2EtMzhiNS0z NTFhLTk4MjAtMjFhNTJlMDU1NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhOWY2MTQtYzYyMC00MmU0LWFj YWQtYjMyOGQ2YTk3MDk5L2MzYTlmNjE0LWM2MjAtNDJlNC1hY2FkLWIzMjhkNmE5 NzA5OS5jcmwwHwYDVR0jBBgwFoAUzDPEm0jltG9XL7NdtA/QXLHSYUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4 ZDZhOTcwOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArLZatGytHMPIa7BLzaCv7ZoRau8DgNzSf4/aBdc9O2g6NFLh2xjrCL cvVXZJrm5tIrK8urHQITgOVirR9OhOMbw8iUU+wMLP1NtJJNuVBERJqj7+6xxyMV fkacn5OAZYJPFl82FWRNkMWCoPb9/G1UcatC+r5UXbnm1jNiSw0yS0eCeOGAiuEP JaLc+x9Y3wNIkd0gjZlAsiaSyDkyuTIKcb4/RG269pVg5J81UsOn+qKG2O16DtgN qc4gUR/g/fnn4ier1sSIlWr71YbXp2kxfzhEtL1tZfQFbUukn77BYtL8PZQcO2iu pKkADUKsWg1IlacFCB47qVc6D/gtSyQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:50 2025 by rpki-client