$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/71f0bd4f-4526-3e00-a536-aa2659be1ef2.roa File: 71f0bd4f-4526-3e00-a536-aa2659be1ef2.roa (raw, json) Hash identifier: 2pBhSmisp83Gtn1AbgKg7f2flgU6z+ljWAFnNKvsVfU= Subject key identifier: 3D:9B:A6:13:19:02:F7:04:71:53:01:2E:66:CE:79:0C:C2:1F:5D:7B Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A612B0B4E17BCAE8910139BC0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/71f0bd4f-4526-3e00-a536-aa2659be1ef2.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 395075 IP address blocks: 207.253.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0b:4e:17:bc:ae:89:10:13:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=6d1c06c5-7306-48e2-92fb-8f8540161633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:a0:f7:5e:46:da:77:13:4c:d4:59:6f:96: 11:fd:76:6d:8e:cb:ce:24:55:10:1f:c0:ee:f7:59: c8:ec:93:78:f4:fa:3a:d7:df:9c:07:0c:dd:04:b4: f2:6f:44:f8:2f:2b:c1:18:54:44:67:e0:cb:41:60: a8:f7:d2:23:ac:41:17:89:84:94:65:59:70:20:cd: 49:38:44:62:a4:27:1c:fb:82:48:07:e7:d7:28:06: 79:d6:fd:45:5e:9d:aa:25:a4:c4:67:a5:29:e7:6b: 4d:a0:13:fa:bb:a5:5b:c6:ee:a7:51:6f:20:b9:6f: ef:1e:54:3c:76:0e:bd:fc:18:1d:54:c9:f8:4a:d6: 47:75:f1:66:1b:0e:b5:c4:6f:6e:89:1f:97:48:d1: b3:87:a6:20:9d:ed:d4:d2:00:e0:21:68:c1:15:71: 72:f2:26:80:ff:ed:db:2d:aa:6d:f0:aa:4d:df:4c: 54:8d:79:17:7f:de:32:a7:78:93:71:65:8e:ae:ce: 98:2a:f9:2a:1f:6f:16:e4:7c:4b:eb:05:78:26:01: 5e:a9:83:9a:c4:97:27:48:da:a4:83:a5:79:d7:c8: fa:b2:be:f8:59:8c:2a:10:f1:aa:8f:97:75:26:dd: ef:9f:61:e0:e7:27:52:a5:7f:70:7e:1d:14:61:71: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:A6:13:19:02:F7:04:71:53:01:2E:66:CE:79:0C:C2:1F:5D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/71f0bd4f-4526-3e00-a536-aa2659be1ef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:92:c6:7c:f1:1d:fb:63:69:62:01:b4:53:1f:5e:0b:eb:fb: ca:a3:0a:0c:72:1e:e4:cf:bd:62:07:7d:98:e0:9e:ce:6d:64: 33:90:9a:47:83:7c:86:89:e0:f1:1e:9c:8a:d5:f6:a2:f9:c5: 64:03:4f:d7:bf:3a:60:72:29:46:1e:a7:68:b0:20:47:28:52: 73:cc:28:13:f6:c3:93:21:7c:39:27:a2:71:f8:59:3a:d4:24: 0f:9a:a2:df:10:83:da:f8:1e:2d:17:f5:38:e6:ed:f0:68:2b: 90:f9:0c:b0:6d:ff:35:7d:13:29:46:5a:8e:de:d9:a3:9c:fc: eb:24:36:01:e6:bf:74:ff:6b:3b:f2:37:33:56:54:16:0d:1c: d8:81:ac:f8:24:53:98:71:50:13:20:21:88:78:a1:2b:43:0a: d6:e2:41:72:71:c7:2e:63:35:d3:d7:00:ab:a7:ba:5c:0b:5d: 2c:7f:73:04:f6:72:d7:0b:fd:84:9f:b1:f2:6b:cf:ae:60:a2: e5:60:97:d1:4f:9c:54:4d:1e:cc:56:5f:93:8b:5c:b4:fa:80: 61:9a:31:cf:2e:b8:58:7f:06:1e:fb:8c:6c:46:d3:c2:f6:3b: 6b:36:a2:93:88:63:be:5b:3f:9a:19:d3:c3:6f:71:65:04:ec: f1:1a:08:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKwtOF7yuiRATm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NmQxYzA2YzUtNzMwNi00OGUyLTkyZmItOGY4NTQwMTYxNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pSg915G2ncTTNRZb5YR/XZtjsvOJFUQH8Du 91nI7JN49Po619+cBwzdBLTyb0T4LyvBGFREZ+DLQWCo99IjrEEXiYSUZVlwIM1J OERipCcc+4JIB+fXKAZ51v1FXp2qJaTEZ6Up52tNoBP6u6Vbxu6nUW8guW/vHlQ8 dg69/BgdVMn4StZHdfFmGw61xG9uiR+XSNGzh6Ygne3U0gDgIWjBFXFy8iaA/+3b Lapt8KpN30xUjXkXf94yp3iTcWWOrs6YKvkqH28W5HxL6wV4JgFeqYOaxJcnSNqk g6V518j6sr74WYwqEPGqj5d1Jt3vn2Hg5ydSpX9wfh0UYXGBoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2bphMZAvcEcVMBLmbOeQzCH117MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNzFmMGJkNGYtNDUyNi0z ZTAwLWE1MzYtYWEyNjU5YmUxZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqSxnzxHftjaWIBtFMfXgvr+8qjCgxyHuTPvWIHfZjgns5tZDOQmkeD fIaJ4PEenIrV9qL5xWQDT9e/OmByKUYep2iwIEcoUnPMKBP2w5MhfDknonH4WTrU JA+aot8Qg9r4Hi0X9Tjm7fBoK5D5DLBt/zV9EylGWo7e2aOc/OskNgHmv3T/azvy NzNWVBYNHNiBrPgkU5hxUBMgIYh4oStDCtbiQXJxxy5jNdPXAKunulwLXSx/cwT2 ctcL/YSfsfJrz65gouVgl9FPnFRNHsxWX5OLXLT6gGGaMc8uuFh/Bh77jGxG08L2 O2s2opOIY75bP5oZ08NvcWUE7PEaCBI= -----END CERTIFICATE-----Generated at Tue Jul 29 20:15:56 2025 by rpki-client