$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa File: bf485a80-ca0b-337a-ab13-dda71416c121.roa (raw, json) Hash identifier: aaYB1hP3b0mH1tldD2BeTjcHZXX7O12xVYwuS49h0kM= Subject key identifier: 77:24:95:EC:18:BC:17:8A:FB:E6:CD:98:32:CB:93:B4:62:5A:06:6E Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A31B567ABEBD86C0AA7B09000 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa Signing time: Sun 15 Jun 2025 01:00:49 +0000 ROA not before: Sun 15 Jun 2025 01:00:49 +0000 ROA not after: Sat 13 Sep 2025 01:00:49 +0000 asID: 9009 IP address blocks: 207.230.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:b5:67:ab:eb:d8:6c:0a:a7:b0:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 15 01:00:49 2025 GMT Not After : Sep 13 01:00:49 2025 GMT Subject: CN=277b6eee-7cae-4c46-bb3e-1f10a03020c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:62:e8:b8:4a:81:c0:0f:c0:fc:62:f3:f8:79: d3:cf:64:6a:cf:5d:0c:52:dc:b9:47:75:18:8a:f3: 44:a4:42:c5:46:ed:2b:a5:d1:c2:de:9f:67:53:29: 5b:d0:c4:b8:a3:87:a1:e4:e3:e6:8a:d9:f6:3d:cb: 80:61:31:60:9b:48:2f:44:33:93:92:c9:68:1b:13: 97:ae:37:7a:8a:10:8d:dd:03:cb:88:52:fc:9b:6a: e4:3e:01:3e:7f:d1:ce:af:30:9f:ee:de:31:0d:a1: 0f:a2:36:81:85:8b:66:3c:a5:b5:da:e5:69:4d:19: f4:e7:20:fa:e0:34:f0:cc:e3:e5:5a:d0:a2:52:d9: 76:32:90:07:07:91:77:ef:31:51:c4:7e:ed:57:e6: e0:0d:0e:93:b3:c1:01:5b:db:22:c4:86:ae:d1:99: 08:12:2c:c9:61:1d:0c:77:e7:ff:95:3c:ed:90:60: 9a:38:32:43:1f:eb:2c:eb:56:12:08:cb:cc:21:b2: ec:ca:0d:fc:48:ef:84:dd:d5:3f:c2:eb:a5:e2:fd: 22:cc:cc:5f:dc:a6:8a:64:7f:d7:20:35:b6:f4:cc: 01:77:d1:ee:c6:f1:e5:97:dc:c4:37:be:94:0e:6f: dc:84:b8:51:e1:68:63:53:3a:51:ae:21:50:e9:c5: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:24:95:EC:18:BC:17:8A:FB:E6:CD:98:32:CB:93:B4:62:5A:06:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a2:83:76:0d:a1:44:2c:15:cf:42:3b:03:34:5d:ee:5f:4c: e0:75:73:c1:6c:1a:eb:db:56:b1:a4:bd:b6:82:f1:06:bf:27: 61:07:f7:a7:7f:69:47:0e:69:52:d4:b4:8b:ba:4b:f5:d3:34: 34:f8:79:d5:63:6b:f8:25:61:31:9a:28:61:22:95:84:81:4d: 73:c4:32:02:4c:ef:84:10:b6:c2:6d:a8:e5:9a:26:73:38:ea: c5:4f:ae:75:1a:ff:af:ed:aa:d1:a8:9c:ab:b0:62:ad:ab:82: 72:f0:c7:67:ec:3c:ec:25:94:89:40:0a:f3:b9:ad:1f:8d:28: dc:3a:93:44:9f:e5:54:60:5a:7e:cd:ff:b2:d1:ef:d1:a7:14: 66:4f:d0:d1:74:6f:b0:fb:cf:7b:92:fd:9d:1c:bb:b0:90:ca: 43:2f:b7:48:83:5a:71:c4:77:b5:cb:a8:2a:2e:16:1e:5e:1e: 13:ed:a3:47:59:46:58:7f:6a:f3:86:24:7d:74:86:f7:f3:85: 97:d1:17:11:d3:3f:1d:38:04:ff:62:c1:7d:19:96:70:05:7d: d0:cc:d1:3e:ff:d2:91:21:9d:3b:d2:d3:fc:2f:c5:e7:36:ce: 22:f5:13:ba:b9:b2:55:69:5c:31:ae:02:65:39:5c:85:d6:94: 69:c7:34:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoxtWer69hsCqewkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk Mjc3YjZlZWUtN2NhZS00YzQ2LWJiM2UtMWYxMGEwMzAyMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2LouEqBwA/A/GLz+HnTz2Rqz10MUty5R3UY ivNEpELFRu0rpdHC3p9nUylb0MS4o4eh5OPmitn2PcuAYTFgm0gvRDOTksloGxOX rjd6ihCN3QPLiFL8m2rkPgE+f9HOrzCf7t4xDaEPojaBhYtmPKW12uVpTRn05yD6 4DTwzOPlWtCiUtl2MpAHB5F37zFRxH7tV+bgDQ6Ts8EBW9sixIau0ZkIEizJYR0M d+f/lTztkGCaODJDH+ss61YSCMvMIbLsyg38SO+E3dU/wuul4v0izMxf3KaKZH/X IDW29MwBd9HuxvHll9zEN76UDm/chLhR4WhjUzpRriFQ6cWgBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcklewYvBeK++bNmDLLk7RiWgZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmY0ODVhODAtY2EwYi0z MzdhLWFiMTMtZGRhNzE0MTZjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz+Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2ig3YNoUQsFc9COwM0Xe5fTOB1c8FsGuvbVrGkvbaC8Qa/J2EH96d/ aUcOaVLUtIu6S/XTNDT4edVja/glYTGaKGEilYSBTXPEMgJM74QQtsJtqOWaJnM4 6sVPrnUa/6/tqtGonKuwYq2rgnLwx2fsPOwllIlACvO5rR+NKNw6k0Sf5VRgWn7N /7LR79GnFGZP0NF0b7D7z3uS/Z0cu7CQykMvt0iDWnHEd7XLqCouFh5eHhPto0dZ Rlh/avOGJH10hvfzhZfRFxHTPx04BP9iwX0ZlnAFfdDM0T7/0pEhnTvS0/wvxec2 ziL1E7q5slVpXDGuAmU5XIXWlGnHNJA= -----END CERTIFICATE-----Generated at Sun Jun 15 12:01:50 2025 by rpki-client