$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7aa53a94-3248-3a2a-8afb-3e017a9f0066.roa File: 7aa53a94-3248-3a2a-8afb-3e017a9f0066.roa (raw, json) Hash identifier: e9hMQasB0sQGTftQiLE+6hw3Umq+FQ1xhD8H0B1pJ3o= Subject key identifier: 9C:77:07:1D:F7:5F:85:B1:A7:A4:32:0A:5E:6E:F7:3B:E0:3C:64:A3 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858499DBF2BECD6057D3932906600 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7aa53a94-3248-3a2a-8afb-3e017a9f0066.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 11426 IP address blocks: 207.230.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2b:ec:d6:05:7d:39:32:90:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=e24bde27-b51b-42c2-a0f7-032046c0cad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:4c:10:6c:29:bc:bc:e7:c8:fd:34:dc:8c: f3:db:b9:3d:fc:ca:23:e6:d7:3b:0e:66:0b:fb:2c: 72:67:57:ed:bb:b2:c9:e6:92:f1:2d:49:8a:1b:e9: 9a:de:de:9e:65:b7:3c:a4:6f:a3:24:a2:a6:c4:b2: 66:90:8f:11:cf:e7:7d:39:04:18:31:ec:6a:fa:2e: 2a:c9:32:37:82:26:b7:bd:c4:b7:de:c4:47:33:30: ba:1b:b7:cf:e2:44:94:f8:be:97:63:30:57:67:c4: bf:e8:27:f4:50:27:6e:73:b5:3e:85:64:09:f2:1e: 5c:9c:3f:36:15:36:24:f0:64:66:93:39:c3:6f:d9: 93:0d:fd:8b:3e:cd:b7:4c:f1:5f:58:0f:09:47:e6: 8a:65:4c:f1:a6:73:69:fd:92:a6:f6:dc:4a:67:16: 0f:73:64:e3:ab:63:72:96:33:bd:49:56:58:1e:13: bd:09:d7:14:0c:56:d1:f8:ae:06:e5:ab:7b:0e:aa: f0:81:ce:e1:d8:03:e9:19:01:2c:8c:92:ff:1e:bd: 83:64:14:c6:24:83:fa:c1:b8:89:29:a2:fa:00:27: aa:8d:ee:9d:10:5e:d8:56:40:9e:a0:ee:19:e1:d1: 03:42:96:4b:e8:f7:0d:a5:8e:56:9a:b0:fb:ac:20: 26:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:77:07:1D:F7:5F:85:B1:A7:A4:32:0A:5E:6E:F7:3B:E0:3C:64:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7aa53a94-3248-3a2a-8afb-3e017a9f0066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6c:00:02:3b:7d:00:fc:42:16:df:8d:83:8a:2d:c8:3c:3b: 29:6d:4e:22:6c:d1:7a:10:6a:88:63:fa:d1:be:09:10:9d:09: 0b:e2:64:2a:93:70:70:ae:1c:f3:67:da:40:10:d5:ec:b0:e7: d3:cb:c4:68:60:28:71:e7:e8:be:34:a3:d7:8f:cb:13:92:14: 1c:de:42:d1:e9:fc:08:49:b3:c6:ac:0a:81:06:1b:44:88:41: 9d:c7:08:d4:32:e8:6f:2f:c0:12:59:5b:ab:dd:51:80:af:16: a0:b6:49:89:d4:44:a0:ca:7e:cb:b7:c1:1c:ee:dd:85:dc:36: 23:60:ee:a5:75:bc:37:30:42:4c:44:7d:10:f4:db:e7:cb:42: 6b:40:03:8b:3a:a1:45:c0:1e:bb:c5:86:9b:97:10:22:ea:81: 1a:f5:37:8e:1d:f7:83:10:d8:88:a2:fe:00:8f:10:0b:7f:7b: 45:f4:2d:b7:2d:4f:04:c4:1e:c2:5a:1b:82:ff:20:e3:5a:03: 3d:49:2b:fe:b3:2e:7a:2c:83:49:29:35:3e:4c:e4:96:29:cc: ca:87:da:29:85:a5:13:ae:bd:e8:bb:45:3a:ad:17:b4:cf:f9: 64:ab:41:73:5f:1c:da:28:80:d7:9d:17:e4:85:25:a9:15:62: 76:c7:d4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvyvs1gV9OTKQZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZTI0YmRlMjctYjUxYi00MmMyLWEwZjctMDMyMDQ2YzBjYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitRMEGwpvLznyP003Izz27k9/Moj5tc7DmYL +yxyZ1ftu7LJ5pLxLUmKG+ma3t6eZbc8pG+jJKKmxLJmkI8Rz+d9OQQYMexq+i4q yTI3gia3vcS33sRHMzC6G7fP4kSU+L6XYzBXZ8S/6Cf0UCduc7U+hWQJ8h5cnD82 FTYk8GRmkznDb9mTDf2LPs23TPFfWA8JR+aKZUzxpnNp/ZKm9txKZxYPc2Tjq2Ny ljO9SVZYHhO9CdcUDFbR+K4G5at7Dqrwgc7h2APpGQEsjJL/Hr2DZBTGJIP6wbiJ KaL6ACeqje6dEF7YVkCeoO4Z4dEDQpZL6PcNpY5WmrD7rCAmwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx3Bx33X4Wxp6QyCl5u9zvgPGSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvN2FhNTNhOTQtMzI0OC0z YTJhLThhZmItM2UwMTdhOWYwMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+Z0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJsAAI7fQD8QhbfjYOKLcg8OyltTiJs0XoQaohj+tG+CRCdCQviZCqT cHCuHPNn2kAQ1eyw59PLxGhgKHHn6L40o9ePyxOSFBzeQtHp/AhJs8asCoEGG0SI QZ3HCNQy6G8vwBJZW6vdUYCvFqC2SYnURKDKfsu3wRzu3YXcNiNg7qV1vDcwQkxE fRD02+fLQmtAA4s6oUXAHrvFhpuXECLqgRr1N44d94MQ2Iii/gCPEAt/e0X0Lbct TwTEHsJaG4L/IONaAz1JK/6zLnosg0kpNT5M5JYpzMqH2imFpROuvei7RTqtF7TP +WSrQXNfHNoogNedF+SFJakVYnbH1NI= -----END CERTIFICATE-----Generated at Sun Jun 15 12:05:29 2025 by rpki-client