$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa File: fc862717-a664-3367-88cf-5e0ecaaad117.roa (raw, json) Hash identifier: bdEWfnA14RQQRlCcmv985r81nrSP9TyFI1iYlvTj52s= Subject key identifier: 60:C3:B4:55:B4:83:D7:64:B3:15:B1:09:1D:07:2A:51:2F:40:5E:D5 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584AADF0FEDF83FDE96410836880 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 46408 IP address blocks: 207.191.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fe:df:83:fd:e9:64:10:83:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=1b95d3e8-4271-4c57-bd2f-ea29357d55ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:c3:2b:e5:28:f4:a6:ad:13:49:f1:5d:f7: e6:c6:2f:aa:fc:81:73:21:4c:bf:01:02:59:d9:bc: b8:b8:db:f5:06:ce:f7:93:1d:69:b0:74:ae:7c:69: 9d:bd:18:6c:49:b1:33:ca:76:32:dd:40:f3:3a:d6: bb:be:fa:cd:48:7b:b6:b5:52:ec:35:6a:1e:c7:8b: 3f:20:a7:9b:35:c8:e1:a7:dd:26:1b:42:51:f8:c3: 24:e6:a1:95:16:2c:0d:b0:2c:91:44:bb:01:7c:73: 74:7f:88:cb:bf:ea:2f:89:a0:da:ff:3f:0a:08:fa: 63:e3:44:49:36:c3:38:7e:d1:c5:7b:2d:ab:07:c5: 47:96:bd:5d:9b:ac:9e:60:f7:09:47:96:c7:f0:97: 34:29:11:22:d3:e3:cb:8b:2e:6d:eb:1a:86:30:f4: 65:be:0f:7f:88:11:9a:b0:2b:4d:99:94:b4:3a:06: 42:d1:f0:64:e6:af:3e:2f:1c:f6:3c:41:9c:4f:dd: a8:01:e5:15:55:36:ef:2b:3c:7f:69:cd:36:d3:6e: 4e:d5:58:04:d3:22:95:6d:24:73:db:8a:30:1b:d6: ac:8a:be:90:e2:ce:cf:da:4c:09:67:be:d1:ad:c9: ed:b1:8b:fe:43:6d:f5:5e:3a:f8:a6:3c:cd:1e:26: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C3:B4:55:B4:83:D7:64:B3:15:B1:09:1D:07:2A:51:2F:40:5E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 207.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:e3:6f:a2:31:36:f1:60:80:4c:7c:fb:19:3d:19:fd:6d:13: 22:de:d7:c8:f8:a7:ed:98:17:41:71:6a:28:e9:98:47:aa:cb: 3f:77:da:45:0c:aa:37:b3:fd:cf:4e:27:8f:76:ef:4c:77:2f: c4:72:e9:28:f9:87:5d:82:5d:10:dd:f6:67:c6:68:40:14:55: a6:5a:d8:20:42:df:fe:3e:d1:c3:c7:90:c9:6d:fe:4c:89:71: a7:6e:a1:ab:8a:4a:b0:57:ac:cc:be:b0:4a:a4:5a:80:e1:49: 8b:69:d7:e6:3c:b0:3c:a1:bb:5a:2c:fc:05:5e:54:b0:b5:d0: f4:ea:d5:31:46:8c:0c:53:62:80:ea:36:fa:d9:62:ff:21:1f: 9c:07:dc:07:b1:30:a5:a8:02:58:72:0b:e7:67:95:2b:dd:8f: 86:6e:fb:47:64:39:df:1a:4e:8f:aa:86:cf:84:40:91:60:97: c2:e5:13:c2:3a:f3:84:6b:8c:8d:65:60:0b:26:1c:6a:05:33: c5:59:90:85:aa:d6:07:99:72:50:bc:79:ba:55:63:fc:a1:93: 64:9d:00:62:33:00:3a:c1:03:60:11:98:a1:78:1c:07:9f:28: 3d:63:14:56:37:4c:2c:c0:af:d4:f2:7d:ee:b3:35:e8:8b:ff: 66:a0:42:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8P7fg/3pZBCDaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MWI5NWQzZTgtNDI3MS00YzU3LWJkMmYtZWEyOTM1N2Q1NWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkjDK+Uo9KatE0nxXffmxi+q/IFzIUy/AQJZ 2by4uNv1Bs73kx1psHSufGmdvRhsSbEzynYy3UDzOta7vvrNSHu2tVLsNWoex4s/ IKebNcjhp90mG0JR+MMk5qGVFiwNsCyRRLsBfHN0f4jLv+oviaDa/z8KCPpj40RJ NsM4ftHFey2rB8VHlr1dm6yeYPcJR5bH8Jc0KREi0+PLiy5t6xqGMPRlvg9/iBGa sCtNmZS0OgZC0fBk5q8+Lxz2PEGcT92oAeUVVTbvKzx/ac02025O1VgE0yKVbSRz 24owG9asir6Q4s7P2kwJZ77RrcntsYv+Q231Xjr4pjzNHiaSCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDDtFW0g9dksxWxCR0HKlEvQF7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZmM4NjI3MTctYTY2NC0z MzY3LTg4Y2YtNWUwZWNhYWFkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz7/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfjb6IxNvFggEx8+xk9Gf1tEyLe18j4p+2YF0FxaijpmEeqyz932kUM qjez/c9OJ49270x3L8Ry6Sj5h12CXRDd9mfGaEAUVaZa2CBC3/4+0cPHkMlt/kyJ caduoauKSrBXrMy+sEqkWoDhSYtp1+Y8sDyhu1os/AVeVLC10PTq1TFGjAxTYoDq NvrZYv8hH5wH3AexMKWoAlhyC+dnlSvdj4Zu+0dkOd8aTo+qhs+EQJFgl8LlE8I6 84RrjI1lYAsmHGoFM8VZkIWq1geZclC8ebpVY/yhk2SdAGIzADrBA2ARmKF4HAef KD1jFFY3TCzAr9Tyfe6zNeiL/2agQtc= -----END CERTIFICATE-----Generated at Tue Aug 5 20:03:41 2025 by rpki-client