$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/89fe6502-e519-3f96-ad08-4aef4ff31603.roa File: 89fe6502-e519-3f96-ad08-4aef4ff31603.roa (raw, json) Hash identifier: l27jbNg8ZEfsQEqqTc1YMTIZX+5SYeOdn3B5auFSX7s= Subject key identifier: AA:97:D7:6F:91:3D:66:10:F9:9F:04:86:E1:DA:57:21:CE:6F:4C:F6 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A612B1E75F28633F8DCE99580 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/89fe6502-e519-3f96-ad08-4aef4ff31603.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 30336 IP address blocks: 207.253.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1e:75:f2:86:33:f8:dc:e9:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=d981f0a8-f554-47c6-b8f6-2c39cf580bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:e4:e1:8b:5e:c2:d2:44:06:fb:be:ee:7c: 18:a6:65:1d:08:34:9e:b9:d3:29:0e:ec:0b:b3:40: 4e:ec:cf:9a:8b:fa:44:50:56:3c:84:bd:29:d8:20: cb:5a:c2:a5:f2:6d:9a:af:3d:67:a9:f7:c5:3f:a7: ba:74:ba:ad:3f:ba:7d:8d:5f:b1:76:ec:f4:78:14: 19:a9:de:fd:2c:d1:fa:07:bc:08:3c:84:6c:ea:f0: 55:ff:0b:02:e9:3e:34:e9:97:c5:63:fe:ef:b8:7a: 90:2b:ed:d7:2a:0a:1c:60:bf:51:fb:89:14:06:5c: 70:2f:0d:30:e4:c6:a0:16:3d:96:b0:e5:4f:87:89: 52:96:49:18:c7:80:b9:79:85:7a:dd:c3:a5:8e:65: 8c:be:85:91:5a:a1:e5:f6:2e:13:03:76:9f:d7:e1: 1a:ff:0c:df:a6:03:72:bb:b7:3c:16:30:1c:c8:7d: a5:35:1d:0c:99:9a:8a:0c:5d:6a:7d:c5:43:40:29: cb:52:19:6d:a0:93:bc:0e:37:8e:4a:8b:57:84:a2: db:6b:38:d2:ac:69:e1:ac:49:61:83:bc:24:3a:5b: 5e:db:81:0a:ad:cc:43:b8:61:9d:c0:44:fb:fb:12: 33:e8:4a:61:34:84:25:27:23:64:8a:7d:5b:f3:90: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:97:D7:6F:91:3D:66:10:F9:9F:04:86:E1:DA:57:21:CE:6F:4C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/89fe6502-e519-3f96-ad08-4aef4ff31603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2e:c6:8d:4d:23:03:a6:ed:5f:14:f7:ad:b5:e5:63:18:4d: c0:32:10:53:bd:75:1f:68:73:a0:24:96:34:cd:58:e3:e2:d5: ef:0a:ce:2e:4d:df:f1:ce:4f:3b:a8:04:33:0e:27:b0:8e:73: 45:46:ed:38:b5:50:24:83:3d:03:10:39:07:d4:66:fc:43:c1: 4a:ff:62:80:59:4b:27:ff:de:5d:bc:1c:0a:25:32:2e:df:bf: 2d:b9:d1:ab:7a:fe:35:ae:30:b0:cd:9d:17:31:84:93:99:d0: 88:a9:77:2d:3b:77:ef:75:62:ef:0a:f2:e1:93:62:61:d2:69: 48:1e:bc:ef:93:ab:0f:d0:82:18:06:65:6c:a5:28:cd:cd:0f: f7:9d:3c:ea:f8:05:53:c6:0d:f4:73:2d:96:a1:fb:5b:84:45: fd:e9:eb:4e:57:27:78:ce:a3:a3:68:c3:1f:81:a3:15:b5:75: 78:0d:70:c4:10:71:d0:fe:6c:09:95:2e:cc:4b:60:6e:21:79: 32:23:5b:a6:98:d5:b4:19:81:89:f2:bd:31:59:fd:50:da:69: 48:de:49:9a:7c:81:0e:4a:2f:2a:61:53:aa:90:d6:67:4b:84: c4:c1:34:47:f5:f1:0f:30:33:90:2c:a1:f1:a0:76:44:5f:d9: 5e:66:dc:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKx518oYz+NzplYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk ZDk4MWYwYTgtZjU1NC00N2M2LWI4ZjYtMmMzOWNmNTgwYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Lk4YtewtJEBvu+7nwYpmUdCDSeudMpDuwL s0BO7M+ai/pEUFY8hL0p2CDLWsKl8m2arz1nqffFP6e6dLqtP7p9jV+xduz0eBQZ qd79LNH6B7wIPIRs6vBV/wsC6T406ZfFY/7vuHqQK+3XKgocYL9R+4kUBlxwLw0w 5MagFj2WsOVPh4lSlkkYx4C5eYV63cOljmWMvoWRWqHl9i4TA3af1+Ea/wzfpgNy u7c8FjAcyH2lNR0MmZqKDF1qfcVDQCnLUhltoJO8DjeOSotXhKLbazjSrGnhrElh g7wkOlte24EKrcxDuGGdwET7+xIz6EphNIQlJyNkin1b85AYkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqX12+RPWYQ+Z8EhuHaVyHOb0z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvODlmZTY1MDItZTUxOS0z Zjk2LWFkMDgtNGFlZjRmZjMxNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/0aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYuxo1NIwOm7V8U96215WMYTcAyEFO9dR9oc6AkljTNWOPi1e8Kzi5N 3/HOTzuoBDMOJ7COc0VG7Ti1UCSDPQMQOQfUZvxDwUr/YoBZSyf/3l28HAolMi7f vy250at6/jWuMLDNnRcxhJOZ0Iipdy07d+91Yu8K8uGTYmHSaUgevO+Tqw/QghgG ZWylKM3ND/edPOr4BVPGDfRzLZah+1uERf3p605XJ3jOo6Nowx+BoxW1dXgNcMQQ cdD+bAmVLsxLYG4heTIjW6aY1bQZgYnyvTFZ/VDaaUjeSZp8gQ5KLyphU6qQ1mdL hMTBNEf18Q8wM5AsofGgdkRf2V5m3LQ= -----END CERTIFICATE-----Generated at Tue Jul 29 20:11:26 2025 by rpki-client