$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa File: d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa (raw, json) Hash identifier: j1WgN0VsMVfqcdwLU5DkOUzILiYs0GS8WR/S4nAPAMc= Subject key identifier: F1:64:68:36:13:CE:69:C5:DD:BC:9C:86:D6:AC:24:C8:31:8E:92:A6 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584AAB2655A1F81A7E76881D4200 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 3807 IP address blocks: 207.196.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:55:a1:f8:1a:7e:76:88:1d:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=2ea5acc3-b5a6-4aa2-aa6b-345e2ced4c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:eb:91:cc:99:71:be:9c:c5:2d:bd:af:19: 07:d6:16:f6:26:16:51:42:45:07:9d:72:e6:05:93: 0a:17:e2:50:17:e0:7d:69:52:ee:27:63:b7:9c:dc: b8:9a:db:3c:07:68:ff:94:b2:57:e5:c0:61:a1:ed: 80:d6:90:12:4d:a0:8b:11:fa:2b:50:82:37:d0:66: da:b2:8a:54:2d:c5:a1:d0:8c:e1:ed:c8:da:1c:0b: 67:e6:46:7c:17:da:f1:08:06:3b:e5:cb:d7:d4:3f: d8:16:10:ca:a9:79:3c:a9:c3:69:47:4d:41:1b:19: 35:db:23:6c:f7:ee:b9:95:da:79:8c:92:27:2f:93: 4f:e3:68:b7:60:0a:dd:c2:2a:a1:bd:7d:2f:a3:3b: f1:ed:62:55:6a:4c:f0:16:79:ec:7e:37:6d:06:30: 70:28:bc:9d:a6:2d:a3:40:f9:8c:4d:9c:f3:45:fb: cd:c9:a5:b4:ef:f7:3c:83:a9:7e:e0:01:4c:1b:7e: 56:a2:1d:6f:c1:c2:77:72:e3:25:35:4b:c5:e4:71: c2:a1:0c:ba:98:a7:f2:be:29:be:86:31:81:9d:61: 5c:ee:67:ab:66:60:f8:35:e8:bd:60:37:64:13:9a: b8:35:69:57:b1:63:fc:2f:70:0b:3c:f0:ac:36:7b: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:64:68:36:13:CE:69:C5:DD:BC:9C:86:D6:AC:24:C8:31:8E:92:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d8b08568-caba-3e3f-8142-0e3cc3e8bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:8b:0f:b7:34:ab:ed:8b:53:15:09:03:17:c3:57:75:d1:84: 42:57:16:d3:87:4e:4d:eb:ad:40:5c:ec:27:96:45:b5:fc:23: 95:49:bd:28:15:10:30:12:80:e6:1b:f5:a1:f5:d0:b0:d6:64: fb:d7:9a:1f:09:1d:b5:2e:ae:d8:07:eb:bb:df:94:b9:a9:c2: e1:8a:a9:b0:d1:5e:60:08:99:24:38:02:d1:ab:b6:12:4c:c8: 38:d5:bc:8c:c4:ae:1b:1c:52:40:23:70:17:84:5c:a5:45:49: b7:76:0c:c5:d8:4b:d9:24:cc:7f:87:b0:09:95:64:d7:e0:28: ce:2b:51:00:af:90:a0:29:73:d5:5b:79:9e:ac:34:8e:1d:30: f0:5f:63:77:f0:aa:74:ea:20:31:81:33:1b:55:7b:73:8f:f9: a2:7d:af:8a:1c:26:5a:22:28:96:75:ed:28:a4:1a:0b:c7:92: aa:22:a8:b4:de:4e:d9:90:b6:4b:ab:ce:86:2e:f7:4f:fc:f3: 4c:05:6d:bb:15:65:93:06:13:45:d0:45:29:3b:64:8a:76:2b: cd:84:b7:1a:3d:1f:34:58:2a:dd:28:de:6f:70:41:db:67:56: 9c:1a:c5:70:13:27:27:38:57:be:d7:74:cd:33:4b:6c:f3:b2: c1:fd:a7:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlWh+Bp+dogdQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MmVhNWFjYzMtYjVhNi00YWEyLWFhNmItMzQ1ZTJjZWQ0YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7/rkcyZcb6cxS29rxkH1hb2JhZRQkUHnXLm BZMKF+JQF+B9aVLuJ2O3nNy4mts8B2j/lLJX5cBhoe2A1pASTaCLEforUII30Gba sopULcWh0Izh7cjaHAtn5kZ8F9rxCAY75cvX1D/YFhDKqXk8qcNpR01BGxk12yNs 9+65ldp5jJInL5NP42i3YArdwiqhvX0vozvx7WJVakzwFnnsfjdtBjBwKLydpi2j QPmMTZzzRfvNyaW07/c8g6l+4AFMG35Woh1vwcJ3cuMlNUvF5HHCoQy6mKfyvim+ hjGBnWFc7merZmD4Nei9YDdkE5q4NWlXsWP8L3ALPPCsNnuv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFkaDYTzmnF3bychtasJMgxjpKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvZDhiMDg1NjgtY2FiYS0z ZTNmLTgxNDItMGUzY2MzZThiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaLD7c0q+2LUxUJAxfDV3XRhEJXFtOHTk3rrUBc7CeWRbX8I5VJvSgV EDASgOYb9aH10LDWZPvXmh8JHbUurtgH67vflLmpwuGKqbDRXmAImSQ4AtGrthJM yDjVvIzErhscUkAjcBeEXKVFSbd2DMXYS9kkzH+HsAmVZNfgKM4rUQCvkKApc9Vb eZ6sNI4dMPBfY3fwqnTqIDGBMxtVe3OP+aJ9r4ocJloiKJZ17SikGgvHkqoiqLTe TtmQtkurzoYu90/880wFbbsVZZMGE0XQRSk7ZIp2K82Etxo9HzRYKt0o3m9wQdtn VpwaxXATJyc4V77XdM0zS2zzssH9p2A= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:04 2025 by rpki-client