$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa File: c8584e3d-2de4-333a-b52b-831df19e3f45.roa (raw, json) Hash identifier: mjkbX+6Lx+VQAG8Uvq4prSUD6y6uZbQANqHW3DHe5lA= Subject key identifier: BD:FD:2D:81:D3:EE:D5:B2:CD:BF:A7:50:60:43:E1:84:5A:83:28:81 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96547E17BE36D29BB6A740 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 97.71.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:54:7e:17:be:36:d2:9b:b6:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=b40c797e-a315-4cf0-b3d3-10544c7c63ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a9:f3:0f:a6:60:3a:36:6b:b9:ca:62:52:09: 64:f4:43:8c:9c:93:e7:46:73:ad:c3:c4:72:70:9e: 27:23:c6:f8:9a:de:a7:43:40:57:07:0b:4a:99:22: da:6a:a5:d7:6e:23:d8:e2:ac:5f:a2:5b:1c:9d:f9: c2:78:1d:db:29:ab:8f:5a:26:bd:91:c7:26:41:15: a9:aa:d8:c3:f6:a2:f2:58:10:ee:ea:dc:77:f3:35: 86:16:80:53:0f:05:c1:8c:33:9a:e4:91:d1:49:8a: 52:b3:03:01:06:83:ff:04:10:56:ff:ff:0c:6f:a9: d2:d6:76:f6:f1:33:52:a2:40:2d:2f:6b:4a:f8:71: 51:f3:b0:dd:aa:8e:38:8b:6d:61:d3:b4:a5:2b:a7: 6b:2e:cf:d1:00:80:21:49:be:c4:81:93:f3:77:60: 3a:f6:f4:70:e5:7c:f3:c3:a8:e1:5c:30:7c:87:94: 24:4b:3b:2e:c1:52:28:e6:55:96:e3:a2:78:a6:83: 23:70:51:d8:16:23:c5:ec:6f:9d:32:01:7f:da:d7: 4c:e0:1a:cd:cb:18:cd:02:26:2f:92:45:0c:b1:05: c1:8f:24:69:fa:e5:3d:8c:68:05:30:20:0a:47:8d: 8c:8d:3c:87:f9:91:2f:8c:b6:61:8a:6e:61:a0:3d: 58:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FD:2D:81:D3:EE:D5:B2:CD:BF:A7:50:60:43:E1:84:5A:83:28:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.71.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:14:e5:35:5d:0f:a9:bd:63:1e:d6:21:e1:49:d3:fb:42:b3: 5b:56:3b:68:e3:14:da:94:2d:fd:70:e1:2d:a4:a7:0a:d4:9c: 0b:c2:73:2d:8f:59:a6:79:7f:5a:8f:b1:bd:8c:95:7e:29:6a: 21:6d:15:1d:2c:94:e9:24:23:c3:7f:6e:21:24:c8:30:8d:03: 75:9e:28:35:74:94:4b:62:49:2e:21:b9:5f:5b:96:da:1c:60: 74:d6:d0:37:da:ec:2e:b8:6e:24:f0:62:26:3d:58:51:12:0f: 51:7a:fd:07:2d:81:32:cb:99:82:2d:a1:51:36:23:5b:a4:15: 16:e0:de:2f:de:49:a2:6d:04:49:a5:a9:11:7a:ef:90:10:23: cd:62:a6:eb:0e:f6:2e:11:94:5d:94:7e:52:25:11:ef:bf:d1: ca:83:6e:6c:45:c1:ef:1a:6a:d8:72:3d:56:84:ab:4f:07:eb: cc:e4:37:8b:be:25:10:04:fa:c6:8a:71:d3:fc:ec:11:08:ac: ee:7b:7d:00:e7:25:e8:69:3e:ae:f0:b5:eb:17:1b:fa:59:11: 65:1f:1c:f1:32:ed:0e:91:0b:40:88:4d:fa:76:e8:e4:9b:07: a5:c1:97:a1:91:c3:a4:0a:43:1a:09:05:d5:e9:ef:05:e8:66: db:f3:9b:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellR+F7420pu2p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YjQwYzc5N2UtYTMxNS00Y2YwLWIzZDMtMTA1NDRjN2M2M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqnzD6ZgOjZrucpiUglk9EOMnJPnRnOtw8Ry cJ4nI8b4mt6nQ0BXBwtKmSLaaqXXbiPY4qxfolscnfnCeB3bKauPWia9kccmQRWp qtjD9qLyWBDu6tx38zWGFoBTDwXBjDOa5JHRSYpSswMBBoP/BBBW//8Mb6nS1nb2 8TNSokAtL2tK+HFR87Ddqo44i21h07SlK6drLs/RAIAhSb7EgZPzd2A69vRw5Xzz w6jhXDB8h5QkSzsuwVIo5lWW46J4poMjcFHYFiPF7G+dMgF/2tdM4BrNyxjNAiYv kkUMsQXBjyRp+uU9jGgFMCAKR42MjTyH+ZEvjLZhim5hoD1YRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL39LYHT7tWyzb+nUGBD4YRagyiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzg1ODRlM2QtMmRlNC0z MzNhLWI1MmItODMxZGYxOWUzZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQU5TVdD6m9Yx7WIeFJ0/tCs1tWO2jjFNqULf1w4S2kpwrUnAvCcy2P WaZ5f1qPsb2MlX4paiFtFR0slOkkI8N/biEkyDCNA3WeKDV0lEtiSS4huV9bltoc YHTW0Dfa7C64biTwYiY9WFESD1F6/QctgTLLmYItoVE2I1ukFRbg3i/eSaJtBEml qRF675AQI81ipusO9i4RlF2UflIlEe+/0cqDbmxFwe8aathyPVaEq08H68zkN4u+ JRAE+saKcdP87BEIrO57fQDnJehpPq7wtesXG/pZEWUfHPEy7Q6RC0CITfp26OSb B6XBl6GRw6QKQxoJBdXp7wXoZtvzm+I= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:51 2025 by rpki-client