$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/bf8efb3a-c6c1-3cbd-96e2-23c6043ab799.roa File: bf8efb3a-c6c1-3cbd-96e2-23c6043ab799.roa (raw, json) Hash identifier: 8PwbvuAN3KJ5rhOvCOdaBEfYv2BXN92ynAnq/nmpxMA= Subject key identifier: D9:71:ED:78:DB:1F:AF:25:85:1E:2A:8D:D6:87:F8:05:E9:CA:D4:05 Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913 Certificate serial: 010D0C9F4328584AAB26452D5156B29AF16CCF00 Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/bf8efb3a-c6c1-3cbd-96e2-23c6043ab799.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 209699 IP address blocks: 207.2.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:45:2d:51:56:b2:9a:f1:6c:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=d38d9142-f175-4549-8cc7-a41746761db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:82:83:7d:b2:0c:b9:a3:d1:84:35:7f:fc:3e: 01:fc:c2:7f:84:d0:e8:ce:81:40:d8:ff:33:02:23: 4a:6d:d9:e6:25:c1:ed:4a:69:6e:a4:36:58:ab:f4: fe:5f:9d:69:f9:2b:13:00:54:6b:02:da:95:d7:27: 14:0c:c9:19:8d:2d:34:0e:f5:64:fd:e3:38:9c:94: ec:da:de:02:2b:3a:8e:c7:43:1b:8c:2f:ff:c3:f2: b3:b0:9f:21:da:3b:67:87:62:c6:df:60:46:7f:43: 94:0c:3c:98:5e:7e:ec:55:6f:78:92:5f:3c:54:77: 35:90:3a:f3:fa:00:71:81:56:19:51:23:e4:5b:30: 75:ed:a2:be:08:b2:e3:34:94:2b:a8:ce:63:96:66: 95:43:83:33:18:49:9c:1c:5d:f6:2f:f2:0a:62:8e: 46:b4:0c:e5:c2:1f:b1:59:38:e7:08:fa:4a:c4:89: 76:b3:8a:ae:d9:a5:11:78:e4:97:ea:93:8b:e8:81: e9:41:66:95:4f:19:5c:13:cd:9f:00:59:7b:70:4c: 0d:d7:f5:88:64:fc:00:a5:6a:cf:3d:f0:10:c0:1d: 50:e1:87:44:c4:36:91:13:4a:99:51:7c:62:7e:32: cf:5a:33:25:10:6c:70:16:80:9a:cf:6d:00:47:44: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:71:ED:78:DB:1F:AF:25:85:1E:2A:8D:D6:87:F8:05:E9:CA:D4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/bf8efb3a-c6c1-3cbd-96e2-23c6043ab799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl X509v3 Authority Key Identifier: keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer sbgp-ipAddrBlock: critical IPv4: 207.2.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c6:64:6f:39:6c:4d:5a:75:70:03:a7:2a:3a:8f:48:41:59: 07:e4:b1:a8:18:60:66:be:85:ba:9f:60:d9:6d:e7:60:da:60: a8:4e:85:01:d8:9a:7b:73:d5:c2:a4:31:39:5c:57:55:40:f1: 5f:4a:38:94:ee:41:90:bb:2a:34:47:40:1d:a7:db:9b:c7:02: a3:f8:15:c4:c3:57:88:ad:a6:7c:31:b5:f0:f5:a0:ce:08:af: 0b:db:14:cf:7a:23:4a:0a:12:e1:2c:d1:12:71:71:5a:26:40: 09:87:c1:cd:e9:7e:be:b9:f3:21:d5:fa:3a:95:09:73:87:40: 21:d1:21:d5:ae:3d:e7:35:83:c4:fd:6a:a8:64:7f:d2:83:c6: e5:91:14:c4:6f:e5:a7:94:7d:6d:eb:3d:59:d5:74:42:12:c8: 7c:6f:9d:dc:5e:5b:6d:f7:2f:07:f1:c2:c8:32:68:9b:f5:e5: 0b:d1:d4:8d:46:30:3c:80:43:b9:bd:15:45:7b:7d:db:0f:af: a4:80:6e:f0:3e:54:14:49:36:f9:d8:a4:6e:c9:8a:ad:6c:09: 06:41:df:03:9d:53:ef:dc:dd:b1:3e:ba:c5:25:e7:66:db:e5: ec:e3:45:47:f5:df:ba:5b:07:ca:ca:3b:8f:81:67:f3:a8:3b: e3:b9:42:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJkUtUVaymvFszwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdhNjM0MWItNWE1ZS00YWMwLWE3NjAtNWE1NDE5MGFm OTEzMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZDM4ZDkxNDItZjE3NS00NTQ5LThjYzctYTQxNzQ2NzYxZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oKDfbIMuaPRhDV//D4B/MJ/hNDozoFA2P8z AiNKbdnmJcHtSmlupDZYq/T+X51p+SsTAFRrAtqV1ycUDMkZjS00DvVk/eM4nJTs 2t4CKzqOx0MbjC//w/KzsJ8h2jtnh2LG32BGf0OUDDyYXn7sVW94kl88VHc1kDrz +gBxgVYZUSPkWzB17aK+CLLjNJQrqM5jlmaVQ4MzGEmcHF32L/IKYo5GtAzlwh+x WTjnCPpKxIl2s4qu2aUReOSX6pOL6IHpQWaVTxlcE82fAFl7cEwN1/WIZPwApWrP PfAQwB1Q4YdExDaRE0qZUXxifjLPWjMlEGxwFoCaz20AR0QMawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlx7XjbH68lhR4qjdaH+AXpytQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2 MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0MTkwYWY5MTMvYmY4ZWZiM2EtYzZjMS0z Y2JkLTk2ZTItMjNjNjA0M2FiNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTdhNjM0MWItNWE1ZS00YWMwLWE3 NjAtNWE1NDE5MGFmOTEzL2U3YTYzNDFiLTVhNWUtNGFjMC1hNzYwLTVhNTQxOTBh ZjkxMy5jcmwwHwYDVR0jBBgwFoAUMaKt48OVDcaXQR4vjLH8a7eDJcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0 MTkwYWY5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPGZG85bE1adXADpyo6j0hBWQfksagYYGa+hbqfYNlt52DaYKhOhQHY mntz1cKkMTlcV1VA8V9KOJTuQZC7KjRHQB2n25vHAqP4FcTDV4itpnwxtfD1oM4I rwvbFM96I0oKEuEs0RJxcVomQAmHwc3pfr658yHV+jqVCXOHQCHRIdWuPec1g8T9 aqhkf9KDxuWRFMRv5aeUfW3rPVnVdEISyHxvndxeW233LwfxwsgyaJv15QvR1I1G MDyAQ7m9FUV7fdsPr6SAbvA+VBRJNvnYpG7Jiq1sCQZB3wOdU+/c3bE+usUl52bb 5ezjRUf137pbB8rKO4+BZ/OoO+O5QsE= -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:08 2025 by rpki-client