$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa File: f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa (raw, json) Hash identifier: QihOoqgVw97BttFnbPzxIYaPTi2pRQ84bOGslmNNvG4= Subject key identifier: FD:C0:4D:22:25:52:62:06:38:66:BD:FC:EB:96:F6:CC:56:92:0E:7E Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584AADF1032B6378A78ED9C217B8 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7782 IP address blocks: 107.152.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:03:2b:63:78:a7:8e:d9:c2:17:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=e19e84f0-1f22-4bfa-8116-b2b1133149c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:8a:3e:3b:d7:28:c7:ad:49:1b:39:d8:f0: e8:b5:e3:ba:20:d4:85:fc:bd:a7:2c:d0:28:35:3a: d7:cb:21:67:09:30:d6:ec:c7:bd:26:7b:b9:d0:1f: ad:dd:a5:c3:8c:d8:c1:d4:5c:09:e6:cb:ba:1f:bc: e7:cb:71:52:5a:09:07:13:0f:d3:52:75:f2:2d:21: a9:2b:7c:dd:7d:31:38:10:be:eb:4e:83:9f:f7:fc: 19:4c:c2:be:9b:3a:76:87:72:a4:e2:cc:d4:e8:c0: 92:e0:9f:03:ea:23:ea:da:92:49:50:9e:ef:ad:c3: a6:5b:2d:74:d2:6c:e1:01:6d:82:8b:00:49:e6:1d: 9e:b7:eb:fc:54:15:5b:6f:b5:49:49:e8:b3:bf:fd: 30:07:f7:e5:ff:3c:16:91:5c:df:46:50:81:b2:ef: a6:09:23:b5:0c:3e:22:50:6a:87:ca:99:83:d0:67: f8:c6:40:4d:c6:11:5e:20:c8:42:14:61:72:a9:a3: 91:1c:6e:89:ab:d1:7f:83:2f:74:87:e8:2c:f6:27: 52:06:2f:ba:c5:09:42:e9:b8:51:b5:d2:ea:b5:fc: be:5c:fb:53:e7:c2:b6:54:d9:a1:0b:8c:92:69:4f: 8c:42:04:ad:62:54:ff:87:40:b0:3c:f8:67:69:9a: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C0:4D:22:25:52:62:06:38:66:BD:FC:EB:96:F6:CC:56:92:0E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 107.152.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a4:17:6f:87:9b:e1:5e:8a:44:bc:8f:b7:41:b6:45:74:48: 61:0e:3c:0d:96:62:5e:b6:b3:1f:e8:6e:f7:9c:02:7e:27:27: e3:b2:9c:5c:d5:9b:51:3a:59:d0:79:ba:68:bd:26:24:33:01: 3f:6f:74:f5:55:d8:51:13:75:f1:9d:77:c4:4e:bf:df:17:5a: f5:7b:a2:66:ee:a2:b2:64:80:f2:cb:a7:31:3f:13:7a:53:05: d0:2d:66:89:39:a7:86:56:57:7b:3b:de:24:e9:05:89:c1:16: 38:ea:08:09:1f:dc:09:e5:e0:d2:51:d3:6b:4a:06:ea:93:de: e0:ef:06:09:05:3c:41:0d:5a:cc:ef:fc:98:5d:e9:a0:c1:d5: 77:64:73:68:7c:b9:c4:d8:9a:43:20:ad:0b:52:9f:6c:78:23: 9c:9a:f0:96:61:e3:0f:ab:36:86:c1:a1:89:45:75:39:80:04: f9:5b:a0:cf:3f:e2:65:41:36:af:1a:4f:ed:24:a0:f3:7e:c2: d4:26:86:a9:94:1a:20:64:68:9c:5f:be:93:d6:70:d0:8d:b3: 4a:90:d3:27:fd:60:92:55:7e:3e:a3:ab:5f:1b:c5:2a:35:ca: 59:05:c9:d3:bd:a0:80:f2:e9:c7:ad:2b:5f:49:71:9f:88:50: 90:4c:2d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QMrY3injtnCF7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZTE5ZTg0ZjAtMWYyMi00YmZhLTgxMTYtYjJiMTEzMzE0OWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku+KPjvXKMetSRs52PDoteO6INSF/L2nLNAo NTrXyyFnCTDW7Me9Jnu50B+t3aXDjNjB1FwJ5su6H7zny3FSWgkHEw/TUnXyLSGp K3zdfTE4EL7rToOf9/wZTMK+mzp2h3Kk4szU6MCS4J8D6iPq2pJJUJ7vrcOmWy10 0mzhAW2CiwBJ5h2et+v8VBVbb7VJSeizv/0wB/fl/zwWkVzfRlCBsu+mCSO1DD4i UGqHypmD0Gf4xkBNxhFeIMhCFGFyqaORHG6Jq9F/gy90h+gs9idSBi+6xQlC6bhR tdLqtfy+XPtT58K2VNmhC4ySaU+MQgStYlT/h0CwPPhnaZo0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3ATSIlUmIGOGa9/OuW9sxWkg5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZjgyMGU3NWYtNGU3Zi0z NTJhLWE2N2EtYTcxZmY4YmE1NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOkF2+Hm+FeikS8j7dBtkV0SGEOPA2WYl62sx/obvecAn4nJ+OynFzV m1E6WdB5umi9JiQzAT9vdPVV2FETdfGdd8ROv98XWvV7ombuorJkgPLLpzE/E3pT BdAtZok5p4ZWV3s73iTpBYnBFjjqCAkf3Anl4NJR02tKBuqT3uDvBgkFPEENWszv /Jhd6aDB1Xdkc2h8ucTYmkMgrQtSn2x4I5ya8JZh4w+rNobBoYlFdTmABPlboM8/ 4mVBNq8aT+0koPN+wtQmhqmUGiBkaJxfvpPWcNCNs0qQ0yf9YJJVfj6jq18bxSo1 ylkFydO9oIDy6cetK19JcZ+IUJBMLRQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:58 2025 by rpki-client