$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a9d06cfd-6ecb-35c9-906d-564ef4113663.roa File: a9d06cfd-6ecb-35c9-906d-564ef4113663.roa (raw, json) Hash identifier: obr1fdG1wPpz3snvt2LDDkESNPPB8KpRo6sbdHu9S8A= Subject key identifier: B1:DA:7F:BE:E1:12:C3:B4:3E:34:15:EA:17:B1:54:ED:61:FE:C4:46 Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Certificate serial: 010D0C9F4328584A841230C7BCB4707F45DB1C40 Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a9d06cfd-6ecb-35c9-906d-564ef4113663.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 32381 IP address blocks: 207.126.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:30:c7:bc:b4:70:7f:45:db:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=324026fc-32bb-4c1a-ac8e-f134ca326965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:17:f5:e9:14:1e:06:7e:5b:72:7b:da:9c: b4:71:6a:33:d0:6f:fd:29:e6:95:21:e9:dd:23:03: c4:83:db:b7:fe:e5:58:91:04:13:2f:7a:8c:85:77: 38:b3:8b:17:d9:ff:dc:9e:60:2c:f6:4a:d9:32:28: e7:cb:9e:3f:18:01:49:aa:e9:9e:f7:3e:4f:8d:28: 60:b8:4b:ab:6f:cc:c0:1c:5d:60:c2:4e:78:0e:b7: 16:08:69:e3:17:65:95:be:63:e3:7a:dd:7d:5b:ac: 7b:48:fe:b2:28:f7:31:aa:aa:65:c0:51:cd:87:9a: cc:f9:62:76:c9:93:c6:4a:9a:7d:26:23:fa:ff:0d: 11:7a:64:1d:72:25:fc:dd:5b:6e:0f:c7:63:e4:81: 38:22:b3:39:1d:41:4f:be:87:aa:3e:f8:d9:ed:43: 06:6d:7b:5a:56:2a:f4:79:be:71:2a:c4:b9:ff:6e: 22:53:42:11:7c:80:e8:d9:dc:ca:9f:a8:e0:08:1e: 2a:b9:ba:a8:78:22:d9:42:9d:de:80:32:9d:12:d4: 83:e8:69:bd:df:34:4c:d8:79:22:ac:e4:72:20:60: 27:07:c9:65:dc:cc:4f:ed:d9:32:41:13:51:6f:2b: 45:44:f6:2e:3d:c6:ae:74:e8:e4:d9:24:60:f5:c9: 10:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DA:7F:BE:E1:12:C3:B4:3E:34:15:EA:17:B1:54:ED:61:FE:C4:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/a9d06cfd-6ecb-35c9-906d-564ef4113663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl X509v3 Authority Key Identifier: keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer sbgp-ipAddrBlock: critical IPv4: 207.126.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:14:c2:82:12:fa:14:59:9d:0b:4a:f7:23:19:c7:b3:aa:e1: a4:a0:7d:af:55:0e:36:46:60:21:65:e0:a6:54:7e:83:b0:35: d9:bd:4e:13:11:a9:41:1d:fb:69:24:8d:72:d0:0f:da:63:2e: 54:58:a9:82:27:eb:af:ce:d8:87:74:56:72:4c:c8:ba:0a:07: b9:4a:eb:b7:de:95:64:f6:4b:67:d4:62:87:0e:30:ce:51:1f: ed:85:5a:d2:27:3d:9a:78:e6:d4:9c:bf:80:a9:53:d4:84:a2: ca:8a:72:7e:79:f8:00:e3:18:5d:52:65:cf:c2:8d:51:79:0b: de:05:44:8b:05:70:25:7b:2c:49:1a:a4:bc:02:b4:bc:91:52: 4c:5f:cd:fc:3f:0c:7e:86:52:68:77:cc:4b:31:59:d7:22:95: 4b:a1:89:69:db:26:8c:b9:04:8e:54:7e:9c:af:c6:99:1e:83: 8c:4d:4f:e3:a3:93:3f:48:79:59:2e:3b:88:d5:24:36:e8:04: 89:50:61:d8:b5:60:e1:3d:8c:bd:20:cb:49:0c:1d:3a:9f:9e: dd:3d:38:4b:eb:75:36:60:90:eb:16:04:95:c7:07:78:7b:2e: 9b:d1:dc:48:35:fe:4d:e8:26:d0:9b:42:20:b3:d0:67:9b:90: 73:a3:08:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjDHvLRwf0XbHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm ZjYxMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzI0MDI2ZmMtMzJiYi00YzFhLWFjOGUtZjEzNGNhMzI2OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5MX9ekUHgZ+W3J72py0cWoz0G/9KeaVIend IwPEg9u3/uVYkQQTL3qMhXc4s4sX2f/cnmAs9krZMijny54/GAFJqume9z5PjShg uEurb8zAHF1gwk54DrcWCGnjF2WVvmPjet19W6x7SP6yKPcxqqplwFHNh5rM+WJ2 yZPGSpp9JiP6/w0RemQdciX83VtuD8dj5IE4IrM5HUFPvoeqPvjZ7UMGbXtaVir0 eb5xKsS5/24iU0IRfIDo2dzKn6jgCB4qubqoeCLZQp3egDKdEtSD6Gm93zRM2Hki rORyIGAnB8ll3MxP7dkyQRNRbytFRPYuPcaudOjk2SRg9ckQOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHaf77hEsO0PjQV6hexVO1h/sRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3 YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvYTlkMDZjZmQtNmVjYi0z NWM5LTkwNmQtNTY0ZWY0MTEzNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz36YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsUwoIS+hRZnQtK9yMZx7Oq4aSgfa9VDjZGYCFl4KZUfoOwNdm9ThMR qUEd+2kkjXLQD9pjLlRYqYIn66/O2Id0VnJMyLoKB7lK67felWT2S2fUYocOMM5R H+2FWtInPZp45tScv4CpU9SEosqKcn55+ADjGF1SZc/CjVF5C94FRIsFcCV7LEka pLwCtLyRUkxfzfw/DH6GUmh3zEsxWdcilUuhiWnbJoy5BI5Ufpyvxpkeg4xNT+Oj kz9IeVkuO4jVJDboBIlQYdi1YOE9jL0gy0kMHTqfnt09OEvrdTZgkOsWBJXHB3h7 LpvR3Eg1/k3oJtCbQiCz0GebkHOjCPQ= -----END CERTIFICATE-----Generated at Wed Aug 6 06:02:03 2025 by rpki-client