$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa File: c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa (raw, json) Hash identifier: heJPwkLyYVHjD+rE7G1KYfB1IgM73OujDnNls/pu020= Subject key identifier: 63:79:F8:F3:26:3C:65:3C:25:3B:B6:C7:69:FB:86:27:F4:CD:35:FA Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584AB91B953C56EFA52370269380 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16548 IP address blocks: 204.186.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:95:3c:56:ef:a5:23:70:26:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=0e387b0d-877f-4748-aa0f-034261b07590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:8b:2c:c3:a5:55:b0:41:a0:07:12:df:21: 8e:3d:d8:6e:75:46:3a:2c:14:a4:ac:b1:80:b9:7e: 91:c9:03:f1:8a:0d:a5:8d:ea:22:9f:0c:b5:b2:30: ef:b3:6d:5a:27:a8:ce:80:27:3c:fa:db:1c:1c:d5: 3c:ee:18:4f:3d:a1:68:1f:ee:5a:24:b1:3a:b8:2e: 99:b3:48:8c:69:44:39:48:01:39:06:49:17:a8:ed: de:df:0c:7a:27:3f:0a:d2:10:16:47:af:43:60:f7: 7a:25:80:1f:07:08:24:bc:aa:16:0a:15:0c:53:07: da:9b:29:77:16:8c:bf:c1:ca:6f:83:f3:d7:32:ee: b3:e3:15:4f:2d:01:34:87:1c:fa:ec:da:58:fa:af: 9f:6c:7a:21:74:e5:1d:aa:fc:58:02:31:e5:3b:fc: 3e:aa:d3:0a:54:f0:f9:90:78:fe:79:ed:4f:bc:7a: da:99:13:19:79:11:0e:1d:d5:05:fe:37:3a:c6:cc: d1:21:ad:68:a0:48:84:0c:cd:59:11:a6:2a:44:5f: 95:98:e5:a7:71:60:bf:d5:85:1f:a3:24:e1:10:0c: 2c:f7:6f:fc:1f:07:3d:9a:c6:8c:7c:d2:f6:7d:a0: f0:25:9d:7a:b1:9a:45:4f:e0:cd:1b:39:71:cd:11: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:79:F8:F3:26:3C:65:3C:25:3B:B6:C7:69:FB:86:27:F4:CD:35:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 204.186.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8a:3b:fd:85:65:4a:dc:61:0f:ae:79:d2:97:a6:68:e7:f6: 6f:b8:83:fe:c8:e4:80:c1:e4:a3:2d:f7:d9:de:66:4d:09:98: b4:c1:97:bf:f7:65:5d:88:ef:be:ae:24:a1:fb:da:34:21:ee: 2a:f4:b5:50:a2:c5:99:54:a8:1c:aa:01:56:c4:2d:3d:8e:88: db:35:ca:ad:2e:a8:ab:2d:c2:e0:8c:d8:dc:fa:52:d0:a7:b3: 77:31:ba:5f:35:a9:2d:a2:49:d2:f5:4c:09:e9:ee:5f:d9:e7: 71:57:7b:ff:d4:ee:85:ef:d6:80:17:28:24:70:cd:d3:24:a9: b9:aa:fe:0e:04:e9:69:48:7d:50:48:aa:49:e1:c2:5d:c4:ea: a8:1c:ca:d4:1b:c6:20:c1:dd:b8:5f:0d:37:eb:c7:70:f2:0b: 7e:de:ef:a2:76:52:16:46:28:ad:2a:40:06:df:c0:a8:2c:6f: b6:f9:bb:d0:88:d3:71:33:05:b8:93:4c:dc:7b:3c:38:20:62: 03:5c:aa:b4:69:50:d1:7f:aa:62:cd:4d:a3:d1:5f:b5:66:6d: 68:71:b3:0f:6b:26:ae:df:b9:4e:03:36:f4:df:56:69:89:ad: 4b:63:cf:e8:50:38:fa:0d:0c:76:12:5c:9d:8e:51:2f:00:c4: 51:aa:6f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5U8Vu+lI3Amk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGUzODdiMGQtODc3Zi00NzQ4LWFhMGYtMDM0MjYxYjA3NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgSLLMOlVbBBoAcS3yGOPdhudUY6LBSkrLGA uX6RyQPxig2ljeoinwy1sjDvs21aJ6jOgCc8+tscHNU87hhPPaFoH+5aJLE6uC6Z s0iMaUQ5SAE5BkkXqO3e3wx6Jz8K0hAWR69DYPd6JYAfBwgkvKoWChUMUwfamyl3 Foy/wcpvg/PXMu6z4xVPLQE0hxz67NpY+q+fbHohdOUdqvxYAjHlO/w+qtMKVPD5 kHj+ee1PvHramRMZeREOHdUF/jc6xszRIa1ooEiEDM1ZEaYqRF+VmOWncWC/1YUf oyThEAws92/8Hwc9msaMfNL2faDwJZ16sZpFT+DNGzlxzRHDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN5+PMmPGU8JTu2x2n7hif0zTX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvYzQ0MzJhZDYtZTllNS0z NTUzLWExZGEtOGViZmNiNDFhZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+KO/2FZUrcYQ+uedKXpmjn9m+4g/7I5IDB5KMt99neZk0JmLTBl7/3 ZV2I776uJKH72jQh7ir0tVCixZlUqByqAVbELT2OiNs1yq0uqKstwuCM2Nz6UtCn s3cxul81qS2iSdL1TAnp7l/Z53FXe//U7oXv1oAXKCRwzdMkqbmq/g4E6WlIfVBI qknhwl3E6qgcytQbxiDB3bhfDTfrx3DyC37e76J2UhZGKK0qQAbfwKgsb7b5u9CI 03EzBbiTTNx7PDggYgNcqrRpUNF/qmLNTaPRX7VmbWhxsw9rJq7fuU4DNvTfVmmJ rUtjz+hQOPoNDHYSXJ2OUS8AxFGqb7o= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:08 2025 by rpki-client