$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bc015f38-470c-35a2-a871-e2816ec1eddd.roa File: bc015f38-470c-35a2-a871-e2816ec1eddd.roa (raw, json) Hash identifier: pjWWNOIi/DgqBucGxqAmfXWM067cjOkFLvX6ztLEZAE= Subject key identifier: 96:A9:71:D4:DC:2D:2B:8C:B5:68:67:50:0F:41:9F:46:62:94:CB:C4 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AA85B9A593595DFED8E53EE80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bc015f38-470c-35a2-a871-e2816ec1eddd.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 215595 IP address blocks: 107.158.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:9a:59:35:95:df:ed:8e:53:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=7206b190-3d07-4c33-9bbd-cea807c6f4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:68:fd:a4:ab:04:6e:50:80:7b:4b:42:6c:88: 2a:47:a9:ce:e8:f0:63:a2:55:34:14:a5:9f:55:56: 08:89:cc:a2:e4:15:28:a2:16:ed:cd:97:af:a2:18: 17:5f:0e:b3:89:c6:c5:a6:6e:0e:7d:44:ca:88:be: e3:5a:20:28:7c:24:0e:64:0b:16:f0:8e:83:9c:3f: dd:ca:79:57:56:da:16:e4:55:d3:04:d2:60:27:9d: 0d:91:f3:ef:54:49:82:64:6f:c0:c0:62:1d:e0:ed: 75:f6:2e:9f:97:8c:b7:ef:3c:ca:b5:3b:79:2b:10: 2e:05:56:dc:bf:30:99:65:65:1a:3b:83:d5:e6:ac: 62:b1:78:6f:e1:b9:c0:9b:01:86:65:9b:1d:ab:22: 56:31:42:ae:57:02:46:48:0e:7f:4a:d0:15:41:b1: 66:f1:ac:84:99:25:14:24:54:60:62:64:f7:78:7f: 07:91:b7:d5:59:a2:47:51:fe:3e:87:9b:95:f1:03: ed:ca:94:9a:d3:46:5e:5b:0b:38:79:db:53:25:82: b5:f2:66:7c:5c:ad:6e:31:35:43:c9:a7:04:28:45: bc:84:71:33:a3:14:eb:7a:47:bb:c9:1f:15:ed:22: 7f:26:f3:3a:cf:c6:8f:91:47:93:a7:cd:32:c7:fb: 1c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A9:71:D4:DC:2D:2B:8C:B5:68:67:50:0F:41:9F:46:62:94:CB:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bc015f38-470c-35a2-a871-e2816ec1eddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a7:0a:e0:8a:3f:c5:a8:c7:18:d5:ae:09:72:95:a4:72:5c: ce:30:9c:69:f4:d7:4e:2b:7d:9a:c2:92:42:08:0d:85:49:ba: cf:9c:7c:33:6a:1b:2d:f3:b7:99:c4:cc:14:96:a1:8a:a5:4f: 2f:eb:ea:18:c0:7f:53:51:36:02:bf:1f:e1:e0:c3:49:fb:d7: 4e:22:c4:9d:40:ef:6f:d9:68:33:39:aa:00:09:56:06:11:1e: 66:34:48:b7:f2:61:59:12:7d:30:ba:f8:e6:90:84:d2:7d:20: da:e1:50:15:00:56:4e:17:56:ae:0a:5e:31:2e:8b:42:fb:a2: 33:25:da:9d:68:38:aa:d4:12:bf:0c:07:aa:fc:07:05:2c:b7: a9:59:09:7e:71:b8:cc:f0:0a:e5:52:f4:01:5f:f9:37:4c:d6: 5d:be:26:21:60:54:e8:16:e9:cd:71:cb:c1:f7:ca:e4:d4:b2: 07:44:8f:e7:d0:07:7a:fd:82:37:e9:f1:73:b7:46:34:5a:ab: b4:b9:92:8c:f9:51:7b:d7:c8:38:3c:cf:5a:a7:19:be:00:c0: 04:b3:84:67:d1:9c:b0:04:a4:eb:f3:a6:5f:6c:62:5e:38:6f: 82:1e:05:30:d3:d3:90:79:37:23:0c:72:c6:3a:70:0c:fe:fd: 1b:ff:8e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW5pZNZXf7Y5T7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk NzIwNmIxOTAtM2QwNy00YzMzLTliYmQtY2VhODA3YzZmNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWj9pKsEblCAe0tCbIgqR6nO6PBjolU0FKWf VVYIicyi5BUoohbtzZevohgXXw6zicbFpm4OfUTKiL7jWiAofCQOZAsW8I6DnD/d ynlXVtoW5FXTBNJgJ50NkfPvVEmCZG/AwGId4O119i6fl4y37zzKtTt5KxAuBVbc vzCZZWUaO4PV5qxisXhv4bnAmwGGZZsdqyJWMUKuVwJGSA5/StAVQbFm8ayEmSUU JFRgYmT3eH8HkbfVWaJHUf4+h5uV8QPtypSa00ZeWws4edtTJYK18mZ8XK1uMTVD yacEKEW8hHEzoxTreke7yR8V7SJ/JvM6z8aPkUeTp80yx/sc3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJapcdTcLSuMtWhnUA9Bn0ZilMvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYmMwMTVmMzgtNDcwYy0z NWEyLWE4NzEtZTI4MTZlYzFlZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa55UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEenCuCKP8WoxxjVrglylaRyXM4wnGn0104rfZrCkkIIDYVJus+cfDNq Gy3zt5nEzBSWoYqlTy/r6hjAf1NRNgK/H+Hgw0n7104ixJ1A72/ZaDM5qgAJVgYR HmY0SLfyYVkSfTC6+OaQhNJ9INrhUBUAVk4XVq4KXjEui0L7ojMl2p1oOKrUEr8M B6r8BwUst6lZCX5xuMzwCuVS9AFf+TdM1l2+JiFgVOgW6c1xy8H3yuTUsgdEj+fQ B3r9gjfp8XO3RjRaq7S5koz5UXvXyDg8z1qnGb4AwASzhGfRnLAEpOvzpl9sYl44 b4IeBTDT05B5NyMMcsY6cAz+/Rv/jsA= -----END CERTIFICATE-----Generated at Wed Aug 6 16:15:27 2025 by rpki-client