$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/e46e3fe5-c13f-3af9-b507-5a60e9158403.roa File: e46e3fe5-c13f-3af9-b507-5a60e9158403.roa (raw, json) Hash identifier: QloqzU/mkN1aPPRhWUGXDhQHlrBqjbeYQe9y1QMn+mg= Subject key identifier: 91:28:D0:4F:E8:5D:53:F0:C3:F4:F7:2F:6E:8A:89:76:66:18:E4:83 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584AAB265571B8D2D0F9A17D0E80 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/e46e3fe5-c13f-3af9-b507-5a60e9158403.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 3807 IP address blocks: 207.196.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:55:71:b8:d2:d0:f9:a1:7d:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=2f0c1c97-f7e9-4009-a10c-d9bbe71826bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0c:15:06:bc:c9:34:d7:0d:ac:de:ad:45:34: 77:ae:a7:f0:0b:47:ea:02:20:c7:7b:6a:4c:26:53: 74:be:50:43:e9:c4:38:4a:9e:12:ff:51:ef:d7:54: f3:50:67:28:c0:6d:a1:f6:80:39:59:e6:be:18:7b: aa:9e:2d:79:f3:15:aa:b3:cf:0a:6f:61:9a:ee:21: 39:a8:e5:a5:32:80:aa:bd:f5:02:98:fc:8b:7c:4f: 06:e1:ca:9b:3f:07:42:30:87:c0:65:83:dd:39:7d: 30:8c:95:f6:40:d7:45:51:b2:43:1b:9c:c2:32:5d: 18:72:8a:82:37:f8:b3:35:6b:79:d2:9d:f7:15:40: ec:42:88:f8:59:8b:66:2c:32:42:1c:57:d1:e4:e1: 61:56:dd:cc:08:05:35:68:b7:85:e8:dd:a9:d6:f0: 56:47:0d:f0:90:c8:d6:f5:f3:5d:77:e5:3a:a1:ca: 1e:34:fd:cb:4c:58:52:94:ab:a1:09:f3:3f:e6:fb: 26:74:6a:02:3e:69:0e:9f:c2:7f:23:08:13:f3:b8: ae:48:42:a8:7b:68:11:66:7a:dc:89:74:ea:44:89: 38:53:53:79:31:36:6d:ad:04:1a:a2:e5:55:57:68: e2:2e:95:1d:e5:17:79:3d:d2:f6:f0:d0:3e:d3:23: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:28:D0:4F:E8:5D:53:F0:C3:F4:F7:2F:6E:8A:89:76:66:18:E4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/e46e3fe5-c13f-3af9-b507-5a60e9158403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:87:02:7e:8c:e6:a3:6e:5f:33:ed:dc:06:4f:5a:7e:df:00: 2f:27:d6:ef:67:c3:c6:f6:30:b9:d1:7d:09:9b:bd:2a:a6:c4: 7b:64:66:fa:93:76:10:5f:d3:c7:e1:89:04:0b:07:da:d8:53: b7:91:cc:17:11:bf:43:36:b9:4b:bb:1c:78:f8:50:58:bf:05: ca:52:96:ee:09:3e:b5:b3:45:34:b3:2a:ea:91:d9:e9:e6:fd: db:96:6a:10:87:d9:c6:d7:50:d6:15:7f:69:31:72:a2:d6:3c: 30:22:09:a2:aa:a6:d8:52:31:d2:1a:95:85:ef:53:4a:84:ce: 64:73:ab:8a:e5:69:a8:a7:12:03:91:fb:a9:a1:41:cd:c9:ce: 4b:f6:fe:70:22:28:9a:52:a4:7c:66:bc:9f:56:90:08:0a:b0: 7c:7b:22:cc:dd:21:36:25:4b:07:63:3e:1a:f8:39:ea:c9:67: a1:b8:72:69:fa:c7:d2:f3:55:5f:a2:82:17:b2:23:6b:79:a5: 1f:61:62:fa:49:e7:d2:fd:71:03:af:91:aa:aa:f9:21:42:67: 99:c3:cd:7b:23:d1:23:c3:9c:3f:06:48:aa:c5:75:d6:8e:bc: 86:16:f4:8f:1a:d4:7a:7f:11:93:6f:aa:2b:f7:26:18:0a:5b: 5d:9b:2a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlVxuNLQ+aF9DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MmYwYzFjOTctZjdlOS00MDA5LWExMGMtZDliYmU3MTgyNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQwVBrzJNNcNrN6tRTR3rqfwC0fqAiDHe2pM JlN0vlBD6cQ4Sp4S/1Hv11TzUGcowG2h9oA5Wea+GHuqni158xWqs88Kb2Ga7iE5 qOWlMoCqvfUCmPyLfE8G4cqbPwdCMIfAZYPdOX0wjJX2QNdFUbJDG5zCMl0YcoqC N/izNWt50p33FUDsQoj4WYtmLDJCHFfR5OFhVt3MCAU1aLeF6N2p1vBWRw3wkMjW 9fNdd+U6ocoeNP3LTFhSlKuhCfM/5vsmdGoCPmkOn8J/IwgT87iuSEKoe2gRZnrc iXTqRIk4U1N5MTZtrQQaouVVV2jiLpUd5Rd5PdL28NA+0yOJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEo0E/oXVPww/T3L26KiXZmGOSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvZTQ2ZTNmZTUtYzEzZi0z YWY5LWI1MDctNWE2MGU5MTU4NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8SEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiHAn6M5qNuXzPt3AZPWn7fAC8n1u9nw8b2MLnRfQmbvSqmxHtkZvqT dhBf08fhiQQLB9rYU7eRzBcRv0M2uUu7HHj4UFi/BcpSlu4JPrWzRTSzKuqR2enm /duWahCH2cbXUNYVf2kxcqLWPDAiCaKqpthSMdIalYXvU0qEzmRzq4rlaainEgOR +6mhQc3Jzkv2/nAiKJpSpHxmvJ9WkAgKsHx7IszdITYlSwdjPhr4OerJZ6G4cmn6 x9LzVV+igheyI2t5pR9hYvpJ59L9cQOvkaqq+SFCZ5nDzXsj0SPDnD8GSKrFddaO vIYW9I8a1Hp/EZNvqiv3JhgKW12bKp0= -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:52 2025 by rpki-client