$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa File: 7c3bc679-7f26-38de-b562-b430ec117b80.roa (raw, json) Hash identifier: sSDA9Nj11B6HYMKYs35uhgkAzv2HWgaamLvowd8qS1s= Subject key identifier: A1:43:4D:77:C8:8D:74:BE:CB:77:76:1A:29:8D:84:28:D8:4B:9D:74 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A3FAAD82BEC7F19D72846F240 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 22652 IP address blocks: 75.98.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:d8:2b:ec:7f:19:d7:28:46:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=70be2494-3c9c-4007-b0de-f02725bc20b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:27:d5:55:1c:e4:aa:85:43:b9:d3:c7:4d: 5b:bf:45:ce:87:36:19:3e:e1:23:5a:aa:8a:e4:f3: 84:e4:2a:d9:b0:de:61:b7:8f:b5:0a:56:9c:36:b9: 65:eb:0a:96:78:f1:f1:c5:30:ba:8e:c2:55:f4:dc: 3c:d3:0c:51:05:0c:51:07:fd:24:97:48:f4:84:7b: c5:87:4a:89:0b:94:31:29:42:98:e0:4c:65:66:9f: ff:1c:da:0e:19:d1:13:96:48:25:eb:ab:a2:42:fd: a7:95:26:09:07:c5:b0:45:d9:ee:67:34:28:41:a0: 7d:73:34:73:83:a4:13:94:e9:e3:57:b0:23:a4:1d: 2e:59:7e:af:a2:96:a7:af:15:6a:b9:43:bc:52:06: fb:4a:67:ce:e3:9c:b4:94:c9:81:aa:25:56:e3:ba: dd:22:2c:c6:2f:b7:7b:05:d5:7d:31:2c:42:70:74: 30:67:42:c6:c2:46:4f:c2:5a:6c:57:41:b1:d8:fc: 9b:61:1d:34:89:df:2d:25:d1:b5:e1:90:27:9e:05: fb:ff:22:51:7d:69:1b:a7:5f:69:29:8b:69:36:18: 27:fb:47:14:22:2f:6b:f1:ef:0f:75:c1:e8:4c:90: 37:0c:be:0c:b5:6f:51:23:54:f2:db:03:ca:4a:4b: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:43:4D:77:C8:8D:74:BE:CB:77:76:1A:29:8D:84:28:D8:4B:9D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 75.98.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:77:35:eb:d8:df:a6:d3:cc:b3:fc:94:b1:df:f5:27:f1:73: 9d:ab:b2:98:15:a6:e8:9c:24:54:ae:dd:3d:97:9b:e6:05:20: 0e:c5:30:18:73:a5:b2:95:3d:1c:a4:92:cf:2a:e7:6f:7c:55: 48:ad:f1:0d:f3:d9:a3:67:de:9b:af:11:58:22:93:b0:95:72: da:26:ec:7e:54:d1:bf:cb:e6:b0:0a:ba:e7:19:61:34:be:2b: 7b:bd:5d:de:7a:d4:0b:fa:df:aa:1a:3b:63:38:b3:b1:ab:3f: 18:2b:c6:bd:55:ae:e9:8f:8a:73:38:a2:7a:03:00:96:35:09: b9:c3:b8:d8:cb:24:77:ab:61:8a:7b:e7:61:9d:24:05:35:9d: 37:b5:02:ff:2c:56:de:f7:8b:4f:64:3d:35:9a:0f:ce:ad:a0: 39:da:a0:62:19:cf:b9:f4:3d:8b:38:51:07:1f:b0:1b:cd:40: 86:eb:05:2f:d6:fe:be:df:ce:6c:47:bd:37:2d:5d:f9:67:e6: bd:09:33:a1:b1:86:28:ad:81:70:37:32:de:79:31:43:56:57: 23:d2:76:57:83:28:70:52:51:95:37:f1:32:65:27:40:fd:4a: aa:b2:48:ca:6f:94:03:94:8e:8a:4e:2e:79:b3:b1:91:5e:4c: 63:ca:27:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtgr7H8Z1yhG8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk NzBiZTI0OTQtM2M5Yy00MDA3LWIwZGUtZjAyNzI1YmMyMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1En1VUc5KqFQ7nTx01bv0XOhzYZPuEjWqqK 5POE5CrZsN5ht4+1ClacNrll6wqWePHxxTC6jsJV9Nw80wxRBQxRB/0kl0j0hHvF h0qJC5QxKUKY4ExlZp//HNoOGdETlkgl66uiQv2nlSYJB8WwRdnuZzQoQaB9czRz g6QTlOnjV7AjpB0uWX6vopanrxVquUO8Ugb7SmfO45y0lMmBqiVW47rdIizGL7d7 BdV9MSxCcHQwZ0LGwkZPwlpsV0Gx2PybYR00id8tJdG14ZAnngX7/yJRfWkbp19p KYtpNhgn+0cUIi9r8e8PdcHoTJA3DL4MtW9RI1Ty2wPKSktSfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFDTXfIjXS+y3d2GimNhCjYS510MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvN2MzYmM2NzktN2YyNi0z OGRlLWI1NjItYjQzMGVjMTE3YjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES2KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp3NevY36bTzLP8lLHf9Sfxc52rspgVpuicJFSu3T2Xm+YFIA7FMBhz pbKVPRykks8q5298VUit8Q3z2aNn3puvEVgik7CVctom7H5U0b/L5rAKuucZYTS+ K3u9Xd561Av636oaO2M4s7GrPxgrxr1VrumPinM4onoDAJY1CbnDuNjLJHerYYp7 52GdJAU1nTe1Av8sVt73i09kPTWaD86toDnaoGIZz7n0PYs4UQcfsBvNQIbrBS/W /r7fzmxHvTctXfln5r0JM6GxhiitgXA3Mt55MUNWVyPSdleDKHBSUZU38TJlJ0D9 SqqySMpvlAOUjopOLnmzsZFeTGPKJ1c= -----END CERTIFICATE-----Generated at Mon Jul 28 22:25:24 2025 by rpki-client