$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa File: 7d010eae-b07d-3815-afbe-2a97d3e18248.roa (raw, json) Hash identifier: YYHzKfscFcL7UIcfq+NUE0yZfIPhzI6q2ldvP7Pyn2g= Subject key identifier: C2:0D:3C:63:66:36:86:38:34:D8:3F:F7:A9:BC:B0:A5:CE:9B:DC:EA Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E962AC25BCFE243AF1734C0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 97.71.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:2a:c2:5b:cf:e2:43:af:17:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=cfb8732c-9786-4b43-939b-537c8c0f9205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:c1:c6:10:44:5a:86:6f:7b:cf:00:6b:bb: 14:b2:ca:0a:42:af:98:fc:ef:2c:4e:1e:5b:7e:ee: 6e:36:43:41:77:36:78:81:1e:e9:a8:ed:43:cc:43: 49:bf:83:06:da:1d:9d:05:0b:2f:0a:6a:91:26:6c: 3c:30:6f:5c:1d:97:ae:c5:2a:01:12:ff:bf:29:20: 00:7f:1e:61:69:ae:ed:c9:09:cb:1a:e9:bb:6b:04: c0:10:8c:a5:48:42:f0:28:2a:24:06:db:b3:08:35: 6f:24:32:10:84:41:71:13:5a:00:4f:e4:11:18:5c: 45:38:31:6e:5c:bb:54:d9:09:14:d8:1e:d5:73:6e: 6a:4b:89:fe:5c:a3:9d:82:3b:54:1c:92:02:05:31: 64:ab:c6:ae:02:02:c0:b7:bd:f4:12:10:60:1e:c8: 0d:32:db:3a:ad:93:91:aa:1f:f4:40:45:18:51:ea: 60:16:13:ba:3e:ac:6d:9e:b4:23:26:3d:eb:c2:43: 50:dd:b5:86:17:25:25:8a:79:db:19:3a:65:aa:77: 3f:ef:13:bd:96:fd:b2:1e:26:bb:07:81:47:42:21: 39:d4:d9:17:f7:98:81:f7:1a:68:41:1b:46:a8:24: 37:40:73:a6:ef:2e:26:0a:00:ca:a5:f7:ac:f5:ca: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0D:3C:63:66:36:86:38:34:D8:3F:F7:A9:BC:B0:A5:CE:9B:DC:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.71.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:38:52:9e:59:58:d9:0a:5e:5f:96:1b:64:aa:53:df:92:0e: 5c:77:a7:dc:ee:49:84:eb:24:9c:93:16:de:02:08:d3:df:02: 99:9c:52:3e:07:dd:42:5f:be:5f:cb:12:6a:fb:ec:20:15:81: 64:eb:1f:28:3a:2d:20:84:e6:c5:73:7a:5c:42:9f:3e:61:86: 84:fb:48:b5:8a:32:6d:2e:e7:4e:e0:e5:dc:36:ca:bd:4f:de: 17:54:74:95:19:63:7e:76:35:ce:77:fe:40:9f:e5:ee:74:b3: bb:0a:de:d4:ec:8e:02:a1:be:e2:dd:6b:66:5a:d1:37:0c:ee: 08:bd:57:49:d3:04:08:5a:e9:c6:cc:e4:d1:83:e8:cb:1c:1d: d4:af:39:1d:ef:08:7d:9e:b8:af:68:a3:2a:74:32:26:59:c0: 7f:76:d1:e8:40:ab:8e:5f:a3:14:10:13:e0:75:c3:52:e6:59: e9:5d:37:3b:80:16:d6:24:a5:26:bc:11:dc:8d:12:6d:b0:e0: 88:a5:74:c3:9c:a6:73:78:f8:13:fc:27:db:ab:cf:fe:fb:79: b2:a7:76:e2:b4:3d:b5:4c:6b:5c:c4:2e:95:d4:66:90:ca:3a: 2a:26:d1:6e:29:f5:db:b0:35:82:75:75:5d:c1:23:46:30:49: 4b:4d:93:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelirCW8/iQ68XNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk Y2ZiODczMmMtOTc4Ni00YjQzLTkzOWItNTM3YzhjMGY5MjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCrBxhBEWoZve88Aa7sUssoKQq+Y/O8sTh5b fu5uNkNBdzZ4gR7pqO1DzENJv4MG2h2dBQsvCmqRJmw8MG9cHZeuxSoBEv+/KSAA fx5haa7tyQnLGum7awTAEIylSELwKCokBtuzCDVvJDIQhEFxE1oAT+QRGFxFODFu XLtU2QkU2B7Vc25qS4n+XKOdgjtUHJICBTFkq8auAgLAt730EhBgHsgNMts6rZOR qh/0QEUYUepgFhO6PqxtnrQjJj3rwkNQ3bWGFyUlinnbGTplqnc/7xO9lv2yHia7 B4FHQiE51NkX95iB9xpoQRtGqCQ3QHOm7y4mCgDKpfes9crvkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMINPGNmNoY4NNg/96m8sKXOm9zqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvN2QwMTBlYWUtYjA3ZC0z ODE1LWFmYmUtMmE5N2QzZTE4MjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYUeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk4Up5ZWNkKXl+WG2SqU9+SDlx3p9zuSYTrJJyTFt4CCNPfApmcUj4H 3UJfvl/LEmr77CAVgWTrHyg6LSCE5sVzelxCnz5hhoT7SLWKMm0u507g5dw2yr1P 3hdUdJUZY352Nc53/kCf5e50s7sK3tTsjgKhvuLda2Za0TcM7gi9V0nTBAha6cbM 5NGD6MscHdSvOR3vCH2euK9ooyp0MiZZwH920ehAq45foxQQE+B1w1LmWeldNzuA FtYkpSa8EdyNEm2w4IildMOcpnN4+BP8J9urz/77ebKnduK0PbVMa1zELpXUZpDK Oiom0W4p9duwNYJ1dV3BI0YwSUtNk7w= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:15 2025 by rpki-client