$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa File: c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa (raw, json) Hash identifier: Y7f8YWn+Uvsj+5/xRwMwCS/ePCd6jMFN3d4l6UgRxJk= Subject key identifier: 4D:3A:47:41:6C:D4:FA:7D:AD:61:C9:3A:A0:72:3A:76:11:67:B0:5C Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584A9A662F74A69124031AC70250 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 16509 IP address blocks: 207.202.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:2f:74:a6:91:24:03:1a:c7:02:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=1689425e-bc91-4d79-b071-ecfc6d5b5b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:76:0b:66:5e:06:d7:be:fc:f8:6d:85:0d: 01:ff:ac:5a:c6:b3:ca:e7:80:a5:bb:ff:18:af:a8: e3:7a:40:65:00:b3:29:72:b7:0f:83:ad:e7:55:dd: a3:a2:ec:fd:81:56:c5:90:6e:a9:9c:4c:36:01:a6: 0b:3b:c0:8f:95:46:87:ca:ef:9e:d3:70:cd:5c:9e: f9:be:4e:ca:51:1d:49:c9:96:86:53:94:a3:57:f5: a0:0a:ae:87:e9:c6:2b:df:9e:de:31:5d:42:ef:d2: 79:be:a8:05:65:c2:2f:0b:66:20:0d:3f:c8:ea:73: d7:3b:fe:7a:b1:09:01:b8:d3:d5:73:59:89:d3:96: d6:d8:75:e1:4e:e8:78:a4:ba:02:bd:f5:c3:d1:b7: ef:65:ee:37:fc:3d:7b:d8:40:dc:df:bc:6c:2a:44: c7:a0:13:9a:b2:de:6d:45:19:38:d2:aa:5e:1b:03: f8:c3:2b:92:49:67:50:ff:a9:87:0d:00:f5:f5:04: b1:b2:ad:2d:7b:07:5e:0b:e9:07:0d:5e:05:fb:ec: 69:10:77:83:7b:34:d8:d9:85:c5:5d:d8:c9:5c:e9: e7:a2:73:ef:4c:2d:2b:f9:93:ac:eb:10:d9:da:33: f2:ce:d9:0c:54:73:23:ad:5c:8c:66:61:6e:f8:1a: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3A:47:41:6C:D4:FA:7D:AD:61:C9:3A:A0:72:3A:76:11:67:B0:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9f:99:84:a2:40:9f:db:5e:61:d6:8c:b9:73:00:61:9c:5a: fd:33:51:66:ae:29:0e:6d:7c:b5:58:d1:58:c1:b5:1e:41:b0: 64:2e:61:5d:2c:82:bd:d9:14:25:30:22:98:96:68:d7:ac:3c: b6:45:b6:c5:18:bc:8e:e1:c9:91:f0:f1:11:75:1a:fd:44:c8: b0:cb:f4:bc:99:5a:03:73:a8:9f:35:f8:91:e3:11:7c:39:4e: ad:45:19:aa:9c:8a:b4:c7:8c:c2:7c:34:08:ab:a8:a4:f9:19: a7:84:50:11:91:6e:50:ff:80:e5:9f:71:ed:b5:99:44:2d:7b: b6:b0:b8:db:0c:12:68:17:c0:6e:37:0f:c1:63:86:1c:8c:82: 45:18:30:01:e5:52:62:24:86:3f:24:09:f9:d2:ad:77:bb:50: 55:8d:b4:c3:cc:1d:c0:cd:f9:9c:f2:32:dc:f8:00:eb:7f:9e: 1d:ab:8d:db:18:90:b3:a2:8a:64:53:83:52:9e:70:b1:08:9b: be:38:ad:20:5b:f6:5a:1d:6d:97:70:40:c2:88:7e:bd:1d:51: 1d:a2:13:a0:a2:c9:4c:e8:41:eb:71:a9:90:3e:37:81:4a:a5: 18:23:2b:ac:54:54:f2:11:33:a1:b8:ba:1b:fc:46:dd:0d:f3: 1d:17:65:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZi90ppEkAxrHAlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk MTY4OTQyNWUtYmM5MS00ZDc5LWIwNzEtZWNmYzZkNWI1YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1N2C2ZeBte+/PhthQ0B/6xaxrPK54Clu/8Y r6jjekBlALMpcrcPg63nVd2jouz9gVbFkG6pnEw2AaYLO8CPlUaHyu+e03DNXJ75 vk7KUR1JyZaGU5SjV/WgCq6H6cYr357eMV1C79J5vqgFZcIvC2YgDT/I6nPXO/56 sQkBuNPVc1mJ05bW2HXhTuh4pLoCvfXD0bfvZe43/D172EDc37xsKkTHoBOast5t RRk40qpeGwP4wyuSSWdQ/6mHDQD19QSxsq0tewdeC+kHDV4F++xpEHeDezTY2YXF XdjJXOnnonPvTC0r+ZOs6xDZ2jPyztkMVHMjrVyMZmFu+Brj9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE06R0Fs1Pp9rWHJOqByOnYRZ7BcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYzZkYTQzZWYtMTNmYi0z YTE5LTkwMzUtYzQ2NWNjNDVlMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2fmYSiQJ/bXmHWjLlzAGGcWv0zUWauKQ5tfLVY0VjBtR5BsGQuYV0s gr3ZFCUwIpiWaNesPLZFtsUYvI7hyZHw8RF1Gv1EyLDL9LyZWgNzqJ81+JHjEXw5 Tq1FGaqcirTHjMJ8NAirqKT5GaeEUBGRblD/gOWfce21mUQte7awuNsMEmgXwG43 D8FjhhyMgkUYMAHlUmIkhj8kCfnSrXe7UFWNtMPMHcDN+ZzyMtz4AOt/nh2rjdsY kLOiimRTg1KecLEIm744rSBb9lodbZdwQMKIfr0dUR2iE6CiyUzoQetxqZA+N4FK pRgjK6xUVPIRM6G4uhv8Rt0N8x0XZXQ= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:25 2025 by rpki-client