$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa File: 42595bcf-6395-3a09-aa56-88a1c857f0e6.roa (raw, json) Hash identifier: g+gVXx4x2xrZzN7YrbAU3jJEDi1rToRS1+EIq3dYpD8= Subject key identifier: D4:BC:D8:1C:CC:D8:2E:02:37:74:DE:90:13:34:F1:76:8A:87:29:38 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584AAB2655C53AC9B8D04F15EF80 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 3807 IP address blocks: 207.196.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:55:c5:3a:c9:b8:d0:4f:15:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=36314b9c-a703-45a0-af23-607b71e435ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:18:89:92:0a:ca:59:91:f3:77:b9:2b:de: 76:73:50:56:93:9d:0b:b1:25:a0:1a:75:1c:f7:26: e4:0d:32:c6:5e:30:bd:a9:7a:4d:57:9c:c0:70:77: 4d:c2:a5:b8:ce:a5:0a:f0:14:cd:93:2f:63:ad:2e: 6a:8a:dc:a6:06:f0:52:94:da:8a:e8:e7:b7:73:75: 22:70:f6:db:0c:38:e5:d3:8b:c0:ea:b4:c8:fa:23: 68:43:a3:dc:da:98:7d:30:3f:3f:c7:d7:3d:f6:60: 59:03:56:e6:d7:65:c4:02:f3:eb:2c:f1:18:33:c8: ef:bc:cd:86:fb:16:f5:b5:13:99:97:c2:89:10:18: 47:51:2a:6e:da:1c:4f:c4:3d:67:1c:28:a5:e3:03: c1:96:d5:3b:f0:29:47:58:00:e8:cb:f6:ad:f3:57: 49:ec:a5:f5:25:ae:d7:a2:2c:d5:cb:61:82:25:91: 73:55:e8:19:d7:68:d0:8b:a8:72:dc:8a:31:e7:e4: ce:d8:88:a2:ee:60:8a:06:5f:e7:18:95:46:2d:e9: a2:dc:7b:a9:c1:01:5d:6b:43:c9:05:44:88:8c:c8: 52:e2:d0:b6:2b:0b:26:5a:a9:83:07:70:d4:6a:aa: ad:61:08:41:a6:4f:2e:2c:30:e8:f2:47:c5:04:04: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BC:D8:1C:CC:D8:2E:02:37:74:DE:90:13:34:F1:76:8A:87:29:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e5:1e:94:e7:b1:fb:2a:a1:d2:19:3c:9e:59:13:27:0a:3d: b1:8c:22:9d:d7:ed:b7:7d:a6:dc:9b:d2:e6:4b:82:30:f4:f5: 96:ee:20:d3:de:0a:74:77:e4:c0:74:c0:6f:eb:20:00:b2:8a: b9:6f:8a:99:92:0c:b5:c1:43:ff:30:f0:90:f9:8d:9f:2d:32: 9d:54:fd:55:31:a2:b6:9e:eb:da:04:b6:5f:9e:57:84:81:d0: 9c:de:14:24:92:a4:09:6a:d7:fb:98:d1:48:64:05:18:4b:98: e5:0e:a9:e1:92:44:1a:db:eb:05:75:71:dc:3b:fc:5a:dd:89: 93:cf:bb:37:db:ca:28:d0:92:d5:a7:a3:f3:3b:45:ce:ae:57: 37:7d:40:1c:9f:da:d9:ba:e2:a9:e8:10:9a:ec:8c:07:9b:32: b4:5d:eb:88:93:de:bc:53:2c:5b:b4:4c:85:0e:76:a5:07:f9: 42:43:64:9e:14:3a:c7:57:49:47:37:dd:57:d0:50:83:c5:8c: cc:5f:b6:07:03:5f:68:e7:07:f3:7a:04:e3:45:b1:08:a2:10: f2:49:17:98:77:de:79:34:ef:52:f1:03:f0:30:aa:85:ec:94: 04:7b:82:8f:d8:63:9c:9f:d2:b5:4f:1a:03:5a:1d:b3:e9:db: 8b:f8:a6:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlXFOsm40E8V74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MzYzMTRiOWMtYTcwMy00NWEwLWFmMjMtNjA3YjcxZTQzNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0UYiZIKylmR83e5K952c1BWk50LsSWgGnUc 9ybkDTLGXjC9qXpNV5zAcHdNwqW4zqUK8BTNky9jrS5qitymBvBSlNqK6Oe3c3Ui cPbbDDjl04vA6rTI+iNoQ6Pc2ph9MD8/x9c99mBZA1bm12XEAvPrLPEYM8jvvM2G +xb1tROZl8KJEBhHUSpu2hxPxD1nHCil4wPBltU78ClHWADoy/at81dJ7KX1Ja7X oizVy2GCJZFzVegZ12jQi6hy3Iox5+TO2Iii7mCKBl/nGJVGLemi3HupwQFda0PJ BUSIjMhS4tC2KwsmWqmDB3DUaqqtYQhBpk8uLDDo8kfFBATNtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS82BzM2C4CN3TekBM08XaKhyk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvNDI1OTViY2YtNjM5NS0z YTA5LWFhNTYtODhhMWM4NTdmMGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8SZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrlHpTnsfsqodIZPJ5ZEycKPbGMIp3X7bd9ptyb0uZLgjD09ZbuINPe CnR35MB0wG/rIACyirlvipmSDLXBQ/8w8JD5jZ8tMp1U/VUxorae69oEtl+eV4SB 0JzeFCSSpAlq1/uY0UhkBRhLmOUOqeGSRBrb6wV1cdw7/FrdiZPPuzfbyijQktWn o/M7Rc6uVzd9QByf2tm64qnoEJrsjAebMrRd64iT3rxTLFu0TIUOdqUH+UJDZJ4U OsdXSUc33VfQUIPFjMxftgcDX2jnB/N6BONFsQiiEPJJF5h33nk071LxA/AwqoXs lAR7go/YY5yf0rVPGgNaHbPp24v4pt4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:01 2025 by rpki-client