$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa File: a12882fe-d453-381a-9a7a-cbe2ae96018a.roa (raw, json) Hash identifier: AhoyHOv4T6tWaNQQ4oAnEbgH3nhJt+zFP2nRcVIUJ9E= Subject key identifier: 69:47:99:78:72:72:32:79:37:56:D9:63:A6:C6:44:49:6A:87:6F:4E Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584AAB264B671446FEAB9CAD2EC0 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 3807 IP address blocks: 207.196.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:4b:67:14:46:fe:ab:9c:ad:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=8f3c06f2-0bba-4bc0-9313-03cce5a871ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:d8:89:6e:f8:77:00:1a:a4:ed:0b:cb:55: 77:4e:78:a3:0f:36:38:23:0c:f3:11:36:7f:f7:bb: 4a:c2:9d:0b:e2:b1:76:e0:d5:e7:11:cc:9c:17:ad: af:9f:41:34:39:ae:06:74:f2:dc:79:77:41:fd:40: d9:c9:32:94:a2:68:ad:d8:b7:0e:aa:79:14:3e:fc: 3c:34:a0:4b:3e:98:f1:ad:fd:9a:10:a3:18:4d:04: 3f:5d:5c:f8:f4:f0:49:30:f7:ff:f3:bc:7b:65:d4: ee:36:db:68:03:72:46:4f:ac:84:1b:16:f8:c7:5f: 20:f1:87:0d:db:d5:9e:49:82:d0:2e:cd:15:d6:bf: b3:99:c0:ad:f8:22:6e:35:b2:3f:03:70:f3:b2:f5: 10:df:e9:fc:0e:b1:f8:58:a0:d8:f3:bf:53:ea:fc: 58:c0:e7:6f:69:32:7a:36:39:cb:98:d3:65:07:7c: 31:07:f8:8d:d9:1f:aa:f8:a6:a8:c1:79:50:16:da: 41:ad:91:43:c2:54:64:5c:40:ed:49:fa:bf:44:b8: d2:ae:24:04:fb:2e:04:15:e2:4d:08:5c:97:0b:2a: 7d:1d:82:ec:43:d2:99:54:1d:5e:78:e5:d3:b8:68: 8d:02:ca:96:2f:24:ab:c2:49:29:8e:df:8a:89:6f: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:47:99:78:72:72:32:79:37:56:D9:63:A6:C6:44:49:6A:87:6F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:49:44:f1:6c:68:16:50:3a:de:85:74:24:42:ed:bd:8e:f3: 57:1b:47:df:2e:20:0b:b1:12:b6:8f:b2:db:14:82:8d:8d:e5: 88:5d:a4:58:f8:58:4c:0d:ed:46:75:4a:4b:e0:b0:a5:2f:cb: e1:8b:d9:3d:09:d9:24:9d:65:ac:89:d2:7f:57:2b:3d:ed:74: 13:da:f7:d3:8b:b8:75:59:4c:9d:da:9e:2f:5c:1b:38:1e:59: 49:ae:ed:4a:ec:d7:bd:e1:b8:9a:01:14:b1:c0:15:9e:c9:f1: 27:f0:82:76:97:ac:6d:d8:54:47:d5:74:8a:f2:e7:b5:96:06: 4e:7d:ea:af:f2:08:da:ac:48:31:9b:db:a8:14:0f:a7:ba:fa: ab:98:5d:08:b3:fa:87:d2:e7:81:f8:3b:31:c7:0a:a2:97:6c: 57:06:62:05:27:ab:05:de:e8:66:34:46:d8:74:16:18:5b:92: b4:9a:34:a8:e8:3c:68:9c:cd:45:11:06:fe:0d:72:83:04:67: 75:1c:27:64:88:b9:e2:40:b6:01:a4:14:30:b5:6f:5a:c2:a7: 9d:8f:e6:bd:c2:10:75:8d:26:42:a3:92:b2:d6:aa:7f:84:8f: 89:b4:62:e0:5f:f5:43:d5:c4:1a:3f:5f:79:09:09:90:d3:50: 64:92:02:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJktnFEb+q5ytLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OGYzYzA2ZjItMGJiYS00YmMwLTkzMTMtMDNjY2U1YTg3MWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHPYiW74dwAapO0Ly1V3TnijDzY4IwzzETZ/ 97tKwp0L4rF24NXnEcycF62vn0E0Oa4GdPLceXdB/UDZyTKUomit2LcOqnkUPvw8 NKBLPpjxrf2aEKMYTQQ/XVz49PBJMPf/87x7ZdTuNttoA3JGT6yEGxb4x18g8YcN 29WeSYLQLs0V1r+zmcCt+CJuNbI/A3DzsvUQ3+n8DrH4WKDY879T6vxYwOdvaTJ6 NjnLmNNlB3wxB/iN2R+q+KaowXlQFtpBrZFDwlRkXEDtSfq/RLjSriQE+y4EFeJN CFyXCyp9HYLsQ9KZVB1eeOXTuGiNAsqWLySrwkkpjt+KiW9xfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlHmXhycjJ5N1bZY6bGRElqh29OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvYTEyODgyZmUtZDQ1My0z ODFhLTlhN2EtY2JlMmFlOTYwMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8TwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZJRPFsaBZQOt6FdCRC7b2O81cbR98uIAuxEraPstsUgo2N5YhdpFj4 WEwN7UZ1SkvgsKUvy+GL2T0J2SSdZayJ0n9XKz3tdBPa99OLuHVZTJ3ani9cGzge WUmu7Urs173huJoBFLHAFZ7J8SfwgnaXrG3YVEfVdIry57WWBk596q/yCNqsSDGb 26gUD6e6+quYXQiz+ofS54H4OzHHCqKXbFcGYgUnqwXe6GY0Rth0FhhbkrSaNKjo PGiczUURBv4NcoMEZ3UcJ2SIueJAtgGkFDC1b1rCp52P5r3CEHWNJkKjkrLWqn+E j4m0YuBf9UPVxBo/X3kJCZDTUGSSAlY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:19 2025 by rpki-client