$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a3e95f9f-5870-3d64-aee5-ee4941e4dc2c.roa File: a3e95f9f-5870-3d64-aee5-ee4941e4dc2c.roa (raw, json) Hash identifier: Y8Qr+1Udp0PTyOrPE8eByZL9vwaBBkbbB4n/kGmdqek= Subject key identifier: 9A:24:12:04:2E:EF:E6:00:56:12:FD:70:3E:86:68:82:D9:31:BE:F3 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584AAB2656252B7624AE0DED2F00 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a3e95f9f-5870-3d64-aee5-ee4941e4dc2c.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 3807 IP address blocks: 207.196.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:56:25:2b:76:24:ae:0d:ed:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=a830da97-9599-460b-ba44-62e210323a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fb:bc:87:ac:bf:79:51:60:40:59:35:f8:41: d0:cf:7e:8d:70:82:b7:98:c0:6f:b6:2c:e7:9e:7f: 77:05:9a:53:9c:de:cd:ca:df:80:09:93:e7:0e:66: 5c:63:30:e5:6f:65:67:dd:b6:41:52:d5:2d:17:97: bf:c5:0a:f1:50:fa:45:00:67:6f:53:da:d8:53:9f: b2:91:5b:eb:7f:4a:79:f4:df:f9:8a:46:be:bc:99: 21:92:9f:82:09:87:e1:77:45:c5:9c:e6:2d:c9:30: 31:c7:b9:95:ef:51:05:24:3d:0e:c6:92:43:02:17: 03:fa:ad:f0:3d:a1:3d:cf:97:8f:68:c7:fb:eb:c2: ab:d6:da:2c:f7:ee:ff:f1:26:20:be:02:95:e7:b3: 09:1f:50:75:63:90:e4:50:41:49:65:5e:b7:bd:1f: 8c:a6:9a:f4:a1:fe:35:94:72:1b:fc:7d:87:54:6d: a5:aa:a4:e8:c8:3a:db:5f:5f:31:c5:4b:de:f5:b0: 63:2f:4b:ad:32:be:79:4b:93:c3:06:a0:7f:f2:5f: 3f:48:0b:5a:b9:9d:3d:f8:54:24:ba:0e:84:54:8f: 3d:9a:07:40:23:39:64:d2:28:6b:d0:5f:3f:06:5f: d3:7e:23:86:eb:a4:be:5f:f6:db:88:ce:09:2d:ac: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:24:12:04:2E:EF:E6:00:56:12:FD:70:3E:86:68:82:D9:31:BE:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a3e95f9f-5870-3d64-aee5-ee4941e4dc2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:17:6e:fe:f1:48:8a:2a:db:f8:22:02:ac:10:f4:23:69:1d: a4:73:1b:29:a2:dd:73:3f:4a:d3:66:42:81:dd:4b:39:06:3d: a0:4f:a3:4b:23:ad:5f:7c:f0:28:5a:41:42:3c:ac:68:a1:e5: 75:3d:19:69:ae:fc:db:bf:fc:da:0b:d3:a4:88:90:92:c9:74: 0c:24:78:07:81:1e:81:f9:0a:64:04:aa:bf:f1:ee:ea:68:b1: e5:f1:7a:11:c9:72:2f:9c:53:0a:1b:49:55:82:17:d6:6e:09: 2b:64:ac:98:3a:18:8e:09:aa:38:a6:1f:e6:c3:1c:d4:c7:c3: f9:64:06:d9:ec:7a:ce:7a:5f:f1:ec:49:be:8f:8f:92:64:f1: 5d:5c:4b:8f:8b:0f:dd:23:a9:f6:43:3b:64:cc:a7:52:4f:65: aa:29:ad:53:c8:cb:ab:ea:3c:8c:c2:34:7b:07:64:a1:f6:2c: 25:db:6f:d0:db:dc:5e:09:bc:5a:d0:44:25:eb:d9:0e:ec:2a: 4d:a4:b6:7b:cf:9c:26:27:6e:8b:82:31:6d:b6:45:82:5d:c7: 61:9d:73:9d:28:7b:88:03:03:aa:87:fb:cb:43:53:94:6d:35: bf:fd:22:00:04:3c:52:ea:a4:60:8f:2f:12:89:3c:f3:f7:09: fc:dd:9e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlYlK3Ykrg3tLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk YTgzMGRhOTctOTU5OS00NjBiLWJhNDQtNjJlMjEwMzIzYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pu8h6y/eVFgQFk1+EHQz36NcIK3mMBvtizn nn93BZpTnN7Nyt+ACZPnDmZcYzDlb2Vn3bZBUtUtF5e/xQrxUPpFAGdvU9rYU5+y kVvrf0p59N/5ika+vJkhkp+CCYfhd0XFnOYtyTAxx7mV71EFJD0OxpJDAhcD+q3w PaE9z5ePaMf768Kr1tos9+7/8SYgvgKV57MJH1B1Y5DkUEFJZV63vR+Mppr0of41 lHIb/H2HVG2lqqToyDrbX18xxUve9bBjL0utMr55S5PDBqB/8l8/SAtauZ09+FQk ug6EVI89mgdAIzlk0ihr0F8/Bl/TfiOG66S+X/bbiM4JLaz3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJokEgQu7+YAVhL9cD6GaILZMb7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvYTNlOTVmOWYtNTg3MC0z ZDY0LWFlZTUtZWU0OTQxZTRkYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8SsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEXbv7xSIoq2/giAqwQ9CNpHaRzGymi3XM/StNmQoHdSzkGPaBPo0sj rV988ChaQUI8rGih5XU9GWmu/Nu//NoL06SIkJLJdAwkeAeBHoH5CmQEqr/x7upo seXxehHJci+cUwobSVWCF9ZuCStkrJg6GI4JqjimH+bDHNTHw/lkBtnses56X/Hs Sb6Pj5Jk8V1cS4+LD90jqfZDO2TMp1JPZaoprVPIy6vqPIzCNHsHZKH2LCXbb9Db 3F4JvFrQRCXr2Q7sKk2ktnvPnCYnbouCMW22RYJdx2Gdc50oe4gDA6qH+8tDU5Rt Nb/9IgAEPFLqpGCPLxKJPPP3CfzdnsY= -----END CERTIFICATE-----Generated at Mon Aug 4 18:21:18 2025 by rpki-client