$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa File: a9b294af-ddbd-365a-bb3f-75c215c307a2.roa (raw, json) Hash identifier: lu6vYRE0jPWQWa7EGNby5DJ4grMUvD+d6tmfoUR4cM8= Subject key identifier: D9:76:AC:8C:80:D7:6C:02:85:07:7C:7C:A6:74:85:97:40:3E:A2:A4 Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099 Certificate serial: 010D0C9F4328584A6C55E331B5FF76184E93C180 Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 207.188.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:e3:31:b5:ff:76:18:4e:93:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=61bfdb38-a31f-4d06-84dd-4ad3f7c1df0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:93:7e:1a:de:96:51:8e:a3:44:b8:da:0a: c5:eb:96:18:b9:a9:6a:87:a5:04:a3:32:2a:e2:d3: 3a:c3:f6:7c:15:08:d5:23:44:cf:c0:d8:dc:44:45: 84:6a:9b:cd:88:94:bc:51:83:7e:53:f1:8f:70:d9: 8c:74:9b:10:ac:39:d7:b4:3a:71:21:25:37:a8:dd: 55:f6:5e:7f:08:72:28:4d:f1:6a:70:25:1b:f6:2c: 55:4d:68:3e:55:77:3f:42:cb:c5:51:1e:0e:91:6e: d0:43:d9:07:e3:3a:62:5a:d2:b4:74:ae:aa:dc:9a: 51:63:f1:9c:6b:0d:49:b6:48:2d:ea:ef:e5:bd:73: 14:46:16:33:39:cb:21:13:05:dc:1a:17:cd:44:55: ad:00:57:5c:db:a0:6b:bc:2c:c3:9f:4d:0b:f0:3e: f4:9d:8d:00:0a:33:9c:1d:c5:e0:b6:2f:4c:d4:aa: d8:53:e5:95:56:af:a8:6d:2d:75:e8:06:95:df:bc: 44:a7:cd:e0:fc:93:24:4a:f2:ad:cb:24:70:2e:33: ec:a8:b1:32:ee:83:41:d5:25:f1:44:b1:b7:b0:a3: 0a:20:7b:71:22:6b:ca:03:14:2d:40:83:87:03:16: 4a:fe:9e:59:d8:53:1c:b0:ff:02:b5:d7:0a:6c:e0: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:76:AC:8C:80:D7:6C:02:85:07:7C:7C:A6:74:85:97:40:3E:A2:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl X509v3 Authority Key Identifier: keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer sbgp-ipAddrBlock: critical IPv4: 207.188.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:07:40:7b:0f:68:21:a0:df:10:ed:a3:96:a3:15:9f:44:3f: 08:08:18:02:11:ed:92:8a:f8:31:94:80:3c:74:29:a5:92:8e: 95:f1:b6:86:49:9f:c8:cd:e8:bb:e5:63:bf:c0:42:48:15:a7: d4:20:9d:62:d8:6c:b5:67:0f:90:2b:72:46:0b:c9:0e:c9:a9: 61:c5:00:92:53:49:ef:a9:76:d9:fa:b5:c9:fa:82:36:fd:99: f5:c5:88:40:3d:97:47:a8:d3:b5:62:4f:c6:3e:1a:63:6f:c6: 36:ac:eb:a3:f7:6a:07:b1:fc:bf:d4:70:8e:94:78:d4:5b:7d: 3c:25:c0:01:d9:d6:3e:06:17:29:76:ef:d3:a0:a4:24:19:37: 8e:30:86:6b:ef:19:ca:4d:60:d5:09:85:1b:e1:53:53:6b:b0: a8:fc:dd:63:28:80:68:a8:15:b5:13:56:4a:f7:a2:4a:25:57: eb:c3:02:b4:9e:9e:19:9e:10:97:2d:82:0a:ff:d9:b4:30:3c: 93:23:8a:72:bc:90:c3:87:58:bd:02:36:e0:7e:54:d9:3c:f3: f3:2e:44:4f:3a:57:9e:f8:61:6c:37:d4:b3:98:58:b2:c7:8a: 0e:e8:59:37:69:d4:e6:7a:0f:9d:8d:4b:2a:15:20:6a:99:0f: a4:34:f2:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVeMxtf92GE6TwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOWY2MTQtYzYyMC00MmU0LWFjYWQtYjMyOGQ2YTk3 MDk5MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk NjFiZmRiMzgtYTMxZi00ZDA2LTg0ZGQtNGFkM2Y3YzFkZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP+TfhrellGOo0S42grF65YYualqh6UEozIq 4tM6w/Z8FQjVI0TPwNjcREWEapvNiJS8UYN+U/GPcNmMdJsQrDnXtDpxISU3qN1V 9l5/CHIoTfFqcCUb9ixVTWg+VXc/QsvFUR4OkW7QQ9kH4zpiWtK0dK6q3JpRY/Gc aw1Jtkgt6u/lvXMURhYzOcshEwXcGhfNRFWtAFdc26BrvCzDn00L8D70nY0ACjOc HcXgti9M1KrYU+WVVq+obS116AaV37xEp83g/JMkSvKtyyRwLjPsqLEy7oNB1SXx RLG3sKMKIHtxImvKAxQtQIOHAxZK/p5Z2FMcsP8CtdcKbOAO6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNl2rIyA12wChQd8fKZ0hZdAPqKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5 ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4ZDZhOTcwOTkvYTliMjk0YWYtZGRiZC0z NjVhLWJiM2YtNzVjMjE1YzMwN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhOWY2MTQtYzYyMC00MmU0LWFj YWQtYjMyOGQ2YTk3MDk5L2MzYTlmNjE0LWM2MjAtNDJlNC1hY2FkLWIzMjhkNmE5 NzA5OS5jcmwwHwYDVR0jBBgwFoAUzDPEm0jltG9XL7NdtA/QXLHSYUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4 ZDZhOTcwOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8HQHsPaCGg3xDto5ajFZ9EPwgIGAIR7ZKK+DGUgDx0KaWSjpXxtoZJ n8jN6LvlY7/AQkgVp9QgnWLYbLVnD5ArckYLyQ7JqWHFAJJTSe+pdtn6tcn6gjb9 mfXFiEA9l0eo07ViT8Y+GmNvxjas66P3agex/L/UcI6UeNRbfTwlwAHZ1j4GFyl2 79OgpCQZN44whmvvGcpNYNUJhRvhU1NrsKj83WMogGioFbUTVkr3okolV+vDArSe nhmeEJctggr/2bQwPJMjinK8kMOHWL0CNuB+VNk88/MuRE86V574YWw31LOYWLLH ig7oWTdp1OZ6D52NSyoVIGqZD6Q08gs= -----END CERTIFICATE-----Generated at Wed Aug 6 11:18:45 2025 by rpki-client